Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/pJSN_0UYP55mnYa8i9az-116_xU.roa
File: pJSN_0UYP55mnYa8i9az-116_xU.roa (raw, json)
Hash identifier: ooW2IQf7TB4yeIzuJ+xNye0+a25s9T8MsooWPksXqB0=
Subject key identifier: A4:94:8D:FF:45:18:3F:9E:66:9D:86:BC:8B:D6:B3:FB:5D:7A:FF:15
Certificate issuer: /CN=e58024b729d99f05133ec6d14390c73eb36db99e
Certificate serial: 019EFE56B05CDC2D80DF53AF6D916FBE83F3
Authority key identifier: E5:80:24:B7:29:D9:9F:05:13:3E:C6:D1:43:90:C7:3E:B3:6D:B9:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/pJSN_0UYP55mnYa8i9az-116_xU.roa
Signing time: Thu 25 Jun 2026 10:32:34 +0000
ROA not before: Thu 25 Jun 2026 10:32:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208855
IP address blocks: 81.2.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 20:41:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fe:56:b0:5c:dc:2d:80:df:53:af:6d:91:6f:be:83:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e58024b729d99f05133ec6d14390c73eb36db99e
Validity
Not Before: Jun 25 10:32:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a4948dff45183f9e669d86bc8bd6b3fb5d7aff15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:9b:17:b0:4b:37:6f:b9:d0:64:c5:19:9e:8c:
e4:68:05:ff:8c:43:32:d5:62:d3:78:a0:f4:20:6b:
8f:a1:37:65:5a:38:69:13:21:3a:33:25:be:5a:d6:
3a:85:80:6d:ae:96:a1:37:40:36:45:bb:cc:db:93:
d7:74:b8:df:ae:97:86:d4:0a:25:09:52:2d:00:c2:
9e:44:6b:f0:59:09:86:12:ee:58:8c:d9:25:43:51:
13:7d:91:35:81:f1:47:db:5c:61:47:6b:cd:0d:35:
fe:f4:34:3b:63:66:c8:fa:f7:ce:10:b4:d4:01:bb:
40:e7:e8:f0:45:f5:05:63:0d:96:af:9a:f0:c6:00:
ee:f2:a1:00:dd:38:23:e4:60:a4:84:a3:65:ce:2d:
4f:f9:a6:48:ab:7b:d9:c1:fb:b5:67:c8:b4:53:71:
f4:a0:39:98:d7:7b:91:9b:96:92:73:8c:b0:6b:17:
d8:ee:be:1c:14:ec:58:d5:c0:a3:e8:fb:0f:b9:32:
3f:9c:bf:b5:50:17:33:e2:d6:73:3f:64:1c:7b:1c:
69:cd:2d:2f:7a:34:e7:1c:55:76:39:09:73:42:e0:
c6:d2:e0:ca:90:af:22:8c:7e:36:4b:fd:61:62:5a:
2a:ef:e5:2f:82:9e:f4:42:69:d2:af:e0:d5:b2:a3:
4d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:94:8D:FF:45:18:3F:9E:66:9D:86:BC:8B:D6:B3:FB:5D:7A:FF:15
X509v3 Authority Key Identifier:
keyid:E5:80:24:B7:29:D9:9F:05:13:3E:C6:D1:43:90:C7:3E:B3:6D:B9:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/pJSN_0UYP55mnYa8i9az-116_xU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.2.184.0/24
Signature Algorithm: sha256WithRSAEncryption
44:fd:5c:62:55:bd:07:7a:87:cc:91:a3:d6:bc:8f:85:b2:7a:
9f:b2:46:07:62:c6:ee:2e:72:e0:75:83:15:c3:6e:0b:66:08:
28:b5:eb:d7:5b:14:11:23:ec:1d:9f:58:8d:b6:09:a9:5a:d7:
f7:f4:0d:ad:5c:fc:94:a4:de:eb:00:47:87:55:01:4f:ba:bf:
81:50:c4:80:2e:64:62:44:46:02:9f:1b:fe:cb:56:86:db:74:
41:fc:53:1f:ef:32:e0:53:68:0d:80:55:56:6d:e6:25:1f:40:
74:15:99:d8:46:8a:a4:11:ad:3d:22:2d:df:33:28:6e:52:fa:
e0:e0:d7:04:c7:e9:4d:94:da:ff:60:3f:c8:9b:f0:e0:89:21:
bd:49:5e:40:09:19:b0:19:c6:25:e8:41:de:12:f7:dc:1d:47:
f4:53:6d:b7:36:2f:a2:17:6e:33:96:a6:ba:4e:fe:ce:95:b2:
8d:87:22:8d:10:42:3f:8d:d8:26:6c:95:e6:b6:74:56:0b:43:
10:9e:79:c8:ac:29:d6:39:36:2e:1d:ad:c3:97:f7:07:da:a7:
57:e2:46:9b:33:29:8b:30:2c:7b:5f:4e:ca:08:36:f9:bc:a4:
95:ae:9b:93:38:19:7a:38:1f:b3:cc:4b:f5:14:e4:7a:94:65:
0e:2e:31:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 02:39:15 2026 by rpki-client