Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/jFJe3jl_QcpRM-Nhwh499UXzHl8.roa
File: jFJe3jl_QcpRM-Nhwh499UXzHl8.roa (raw, json)
Hash identifier: 4ZP7K3NzaQIb5Oo5+GVsX5DHhCL0Z9KsvPv5i497LDk=
Subject key identifier: 8C:52:5E:DE:39:7F:41:CA:51:33:E3:61:C2:1E:3D:F5:45:F3:1E:5F
Certificate issuer: /CN=1a7f036e2592391fb45a3dd33caf0b07956973cf
Certificate serial: 01A0EBD586B14F081AA648A82A392D648DEF
Authority key identifier: 1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/jFJe3jl_QcpRM-Nhwh499UXzHl8.roa
Signing time: Tue 29 Sep 2026 06:23:54 +0000
ROA not before: Tue 29 Sep 2026 06:23:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 45.156.144.0/24 maxlen: 24
45.156.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 12:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:d5:86:b1:4f:08:1a:a6:48:a8:2a:39:2d:64:8d:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a7f036e2592391fb45a3dd33caf0b07956973cf
Validity
Not Before: Sep 29 06:23:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8c525ede397f41ca5133e361c21e3df545f31e5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:1e:3a:95:75:48:a9:87:52:ca:3a:a0:ec:af:
d6:48:d4:17:ce:db:ec:37:b5:d5:23:11:29:b4:47:
f0:81:bb:4e:5e:ae:8a:22:e7:08:40:c1:59:bb:e8:
ad:ee:cd:e0:0b:51:a1:82:45:fc:8d:89:4f:66:8f:
56:0d:93:40:ba:bf:af:14:20:27:ea:0c:23:29:80:
8a:34:25:9f:e4:e4:43:68:00:29:9a:6c:63:09:98:
1a:b6:b7:3b:5e:ad:ce:f6:3b:ad:6a:b6:a1:0e:35:
cc:27:c6:0b:c7:f6:d2:62:c3:2d:04:53:83:47:10:
48:c6:52:63:31:e2:f9:87:25:09:f7:24:b6:5c:e1:
3c:4b:c0:76:1b:4e:31:9c:49:9f:6e:41:3f:54:fe:
0c:87:7e:96:c3:5b:ed:e8:79:fa:40:a3:76:94:6a:
20:b6:b5:ae:71:9f:d7:94:19:cd:71:91:00:10:a4:
48:0b:74:5c:fe:92:70:15:de:6e:93:e7:df:13:0a:
9b:2d:11:c4:68:93:b2:7e:c5:7a:5e:49:15:47:ce:
e2:be:c8:40:8d:25:2b:35:c0:3d:20:d5:16:ee:f1:
5c:37:d8:49:f7:2e:32:d9:db:ac:62:48:0f:c5:34:
af:02:10:b1:87:07:00:e4:73:c7:97:95:ad:fd:54:
4d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:52:5E:DE:39:7F:41:CA:51:33:E3:61:C2:1E:3D:F5:45:F3:1E:5F
X509v3 Authority Key Identifier:
keyid:1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/jFJe3jl_QcpRM-Nhwh499UXzHl8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.144.0/24
45.156.146.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:49:73:be:30:0d:20:d4:ae:6a:ca:ef:79:ee:a9:a0:97:94:
42:86:ba:72:43:a6:83:fe:c5:c2:8e:40:94:41:4c:2d:76:f6:
78:d2:14:7b:04:5f:5d:7d:43:bf:40:85:a8:ce:d1:cf:3d:37:
0f:54:d0:06:e4:9d:65:07:92:8a:14:e0:6d:63:82:90:17:8f:
34:c9:11:b9:8a:8a:78:b5:b9:4e:b3:b3:ce:4a:00:fb:79:a2:
2c:78:91:46:13:56:fb:91:7f:eb:24:b4:9b:b4:df:a9:b2:c4:
f6:98:d3:c9:2e:81:a2:5d:ec:34:7e:48:5b:8f:9b:ff:80:46:
76:f9:a3:65:a2:f7:6f:58:78:78:3f:ee:df:2a:48:5a:8e:31:
aa:52:4f:4b:e4:31:36:4a:ef:9c:f8:de:99:65:93:16:ad:2d:
a2:e0:21:c9:61:eb:a6:33:ba:e4:f3:54:28:5f:15:0f:d7:42:
c9:f6:a6:16:06:0e:ab:d2:18:88:e3:bf:2c:3d:c7:00:70:b7:
1d:55:5e:78:90:60:43:19:95:39:51:1f:5a:8a:12:18:78:73:
b4:68:80:72:ae:81:a5:ea:9a:91:8f:d3:8f:2c:63:39:8d:11:
e4:ad:99:df:8a:78:e6:38:a1:34:c4:37:ef:ad:aa:c5:be:91:
aa:60:36:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 21:25:27 2026 by rpki-client