Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/JDO-N7w0Fa52JLt8GtUoT0ncalo.roa
File: JDO-N7w0Fa52JLt8GtUoT0ncalo.roa (raw, json)
Hash identifier: tzG8NZ2N7BL/I/RQ8HSnEMaZNAihPmVOsUxkrVflzJg=
Subject key identifier: 24:33:BE:37:BC:34:15:AE:76:24:BB:7C:1A:D5:28:4F:49:DC:6A:5A
Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial: 01A1779EE8E4340E0264AF9F0ED772CB16C4
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/JDO-N7w0Fa52JLt8GtUoT0ncalo.roa
Signing time: Mon 26 Oct 2026 09:51:05 +0000
ROA not before: Mon 26 Oct 2026 09:51:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216169
IP address blocks: 91.217.166.0/24 maxlen: 24
2a05:9080:14::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 14:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:77:9e:e8:e4:34:0e:02:64:af:9f:0e:d7:72:cb:16:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Validity
Not Before: Oct 26 09:51:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2433be37bc3415ae7624bb7c1ad5284f49dc6a5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:eb:59:5d:f1:e8:e7:e1:f5:41:42:73:11:0e:
c8:73:dd:50:20:d3:a6:55:b8:7a:4e:28:1c:88:0a:
1c:aa:6e:6c:98:4d:f5:b6:0b:2d:e3:3e:bd:5c:63:
37:15:08:14:0e:f9:97:5e:cc:0f:a5:8d:0e:84:39:
ef:59:6e:9b:01:e6:ef:17:b8:39:1c:2b:fd:d4:be:
8b:50:43:bb:0f:69:cd:26:46:f9:2a:f8:5b:dc:c9:
97:67:8c:38:e9:65:d6:b8:47:6c:41:4f:36:f9:9f:
b8:3c:f6:ed:01:e5:c7:92:bc:4a:45:20:88:09:61:
11:6b:52:5f:4b:d6:54:eb:03:9d:e8:d3:81:97:4b:
24:b8:6c:fc:15:a8:bf:25:0a:fe:88:0e:3e:07:7a:
86:97:65:0c:e4:dc:33:1b:27:44:25:c5:7e:66:23:
fc:4d:b9:b8:24:73:8c:09:33:d9:6d:55:d1:bf:b2:
da:fd:9e:d8:87:0b:ea:d4:60:59:b8:dd:5a:c7:ff:
ed:ab:b3:7b:bb:44:8e:12:0b:a6:e9:ce:9e:3d:2d:
9a:8e:ec:50:19:54:7b:d1:9b:b8:d9:b4:e8:2e:b0:
3f:dc:cb:bd:32:79:aa:9f:a3:48:7f:02:fe:ff:92:
48:14:23:ff:05:e0:ea:3e:86:87:4d:7b:26:18:cd:
f0:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:33:BE:37:BC:34:15:AE:76:24:BB:7C:1A:D5:28:4F:49:DC:6A:5A
X509v3 Authority Key Identifier:
keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/JDO-N7w0Fa52JLt8GtUoT0ncalo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.166.0/24
IPv6:
2a05:9080:14::/48
Signature Algorithm: sha256WithRSAEncryption
bb:95:59:e8:d0:61:d5:52:f4:7d:da:dc:20:57:09:13:00:4d:
1d:c5:78:f5:c2:3f:c2:c9:6b:68:10:d4:59:e8:94:8e:36:f1:
cc:75:db:8b:c3:43:a0:bf:2b:ca:1a:13:d6:54:a3:8d:45:92:
07:7d:48:56:7a:89:3d:08:89:65:dc:f7:11:32:be:c2:4f:79:
fd:a0:96:30:19:27:2b:e2:fc:59:3f:1d:21:21:df:f1:be:5f:
6e:4c:92:8c:25:40:84:3e:31:d2:5a:80:e9:3f:b1:b9:93:13:
9d:9b:f3:85:54:03:c5:e0:11:2a:4e:f8:de:dc:a1:1e:f8:f9:
51:6b:fd:19:ab:56:bf:61:f0:1d:b6:2f:4c:fb:51:f5:5d:5a:
e0:06:01:ce:22:68:9c:e4:50:9a:81:c0:e2:79:1e:4f:a5:37:
4d:ea:a6:a9:c0:ad:64:92:9e:1d:1b:b4:20:91:d2:43:76:7f:
74:d9:f3:37:69:df:82:57:38:3c:8e:23:41:7a:87:b4:42:c2:
e0:f8:9f:b1:5e:24:0a:4c:95:a9:b6:36:69:3a:b8:c3:59:ee:
23:27:fa:78:02:4a:21:dc:55:92:c6:37:bc:1e:00:7c:63:74:
b1:66:16:7f:df:29:f6:fe:e2:f7:29:54:b9:07:d6:2c:e3:10:
c3:ae:d1:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 22:58:26 2026 by rpki-client