Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/jb8Tvu-x7ca2UcmH3_LPMilszLc.roa
File: jb8Tvu-x7ca2UcmH3_LPMilszLc.roa (raw, json)
Hash identifier: OlkXDSnelXREdmtqy5ujR0YEOkVjksdthFMCcz2iNqk=
Subject key identifier: 8D:BF:13:BE:EF:B1:ED:C6:B6:51:C9:87:DF:F2:CF:32:29:6C:CC:B7
Certificate issuer: /CN=edf36b243560346053bc60ced4e98aa48ea1a063
Certificate serial: 01A0A70BE43839A56544DC6A95B55863EF4E
Authority key identifier: ED:F3:6B:24:35:60:34:60:53:BC:60:CE:D4:E9:8A:A4:8E:A1:A0:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7fNrJDVgNGBTvGDO1OmKpI6hoGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/jb8Tvu-x7ca2UcmH3_LPMilszLc.roa
Signing time: Tue 15 Sep 2026 21:49:29 +0000
ROA not before: Tue 15 Sep 2026 21:49:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35758
IP address blocks: 142.228.8.0/23 maxlen: 23
142.228.239.0/24 maxlen: 24
198.33.8.0/23 maxlen: 23
198.34.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/7fNrJDVgNGBTvGDO1OmKpI6hoGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/7fNrJDVgNGBTvGDO1OmKpI6hoGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/7fNrJDVgNGBTvGDO1OmKpI6hoGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Sep 2026 02:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a7:0b:e4:38:39:a5:65:44:dc:6a:95:b5:58:63:ef:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edf36b243560346053bc60ced4e98aa48ea1a063
Validity
Not Before: Sep 15 21:49:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8dbf13beefb1edc6b651c987dff2cf32296cccb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5c:b8:2c:af:42:4d:a2:1a:10:f9:c8:e2:a3:
f3:13:e0:3c:53:73:28:a1:97:a5:43:6d:c8:28:c0:
8a:93:27:48:e7:84:b4:92:d9:62:31:a3:6a:ec:00:
68:f7:06:f5:23:e8:b9:c2:0a:48:78:e7:f5:7d:5d:
dd:4e:28:b6:7f:41:ac:51:74:0e:41:29:5e:8f:ca:
44:13:66:8a:43:7d:74:4d:f3:d2:47:4a:4d:82:88:
83:b9:0d:f0:89:69:60:bb:19:f2:84:14:b2:a6:ab:
a3:d5:17:78:0f:71:89:0a:f4:c2:22:c8:2b:9e:ec:
ce:2e:77:97:46:c2:1d:9a:1f:b4:8c:ba:d0:a3:e0:
eb:34:72:05:11:b8:69:b2:e3:14:f2:ca:f3:cb:27:
d1:d7:e4:27:45:d5:0c:43:bf:b8:90:65:1c:bd:62:
b5:a8:55:72:17:ea:eb:16:b4:e9:4f:25:4c:fa:43:
36:fc:46:53:aa:0f:bf:e1:a5:4b:8b:0c:23:2e:8b:
6d:be:36:04:3d:75:43:23:a6:3a:89:e7:0e:5e:24:
fd:2d:12:8f:b7:d8:1f:62:48:c5:d9:23:ed:2a:31:
95:6c:ae:dd:ca:12:65:07:33:6c:58:8d:f3:51:59:
68:72:54:46:7e:33:12:c2:c6:45:c5:18:82:ae:b5:
f3:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:BF:13:BE:EF:B1:ED:C6:B6:51:C9:87:DF:F2:CF:32:29:6C:CC:B7
X509v3 Authority Key Identifier:
keyid:ED:F3:6B:24:35:60:34:60:53:BC:60:CE:D4:E9:8A:A4:8E:A1:A0:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7fNrJDVgNGBTvGDO1OmKpI6hoGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/jb8Tvu-x7ca2UcmH3_LPMilszLc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/7fNrJDVgNGBTvGDO1OmKpI6hoGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
142.228.8.0/23
142.228.239.0/24
198.33.8.0/23
198.34.64.0/24
Signature Algorithm: sha256WithRSAEncryption
31:fd:a8:c4:9e:0e:83:64:0e:e8:bd:ca:62:9b:b6:4c:17:7b:
45:f1:93:af:8c:34:da:8d:8b:1b:46:de:a3:ba:77:d7:75:8f:
ba:02:33:ee:f0:1b:82:d5:f8:85:35:d3:39:10:09:b1:ce:93:
00:59:22:84:e6:8f:0b:cb:dc:2d:8b:18:b3:ea:ef:63:2b:a8:
21:1b:ef:f6:ed:2c:b7:62:1d:d5:96:ca:ac:dd:51:c8:76:f4:
b2:32:78:9e:1c:d0:f0:20:90:2c:ae:13:94:49:92:fc:c2:76:
8b:6b:b1:cb:74:54:a5:3c:f5:1c:a1:ce:a8:0e:1d:03:17:c1:
e7:b0:84:a4:09:56:b5:1f:7e:1c:7d:77:e6:7a:37:93:22:3a:
cd:2e:12:8f:8b:bf:2c:bf:a2:a0:17:83:1b:eb:ce:fc:fc:4b:
16:d6:09:f8:8f:45:0f:f1:c6:bb:9d:1d:b5:fe:4f:55:69:4c:
6a:e2:ea:79:2b:11:4e:8d:a8:04:a7:69:b2:3a:ad:38:c6:17:
25:fb:22:e3:a2:c1:3e:6d:c2:f6:f5:45:c5:42:f9:81:a6:06:
c4:2a:69:31:72:19:3b:3a:c1:9a:3d:6b:50:e4:99:37:f5:4b:
b3:8e:eb:a7:19:74:dc:36:c7:1c:e3:41:26:d6:68:a2:5b:21:
a3:18:44:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 11:43:32 2026 by rpki-client