Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/jtNMbctmoeTy6sd9LST64n6P_dk.roa
File: jtNMbctmoeTy6sd9LST64n6P_dk.roa (raw, json)
Hash identifier: YY03jOdZendFXpCgqi0pAEkPVn3PnU+/LyoTLk3wiFA=
Subject key identifier: 8E:D3:4C:6D:CB:66:A1:E4:F2:EA:C7:7D:2D:24:FA:E2:7E:8F:FD:D9
Certificate issuer: /CN=edf36b243560346053bc60ced4e98aa48ea1a063
Certificate serial: 01A0A70BE64FFD941FAC5D7C74D8D0670E3F
Authority key identifier: ED:F3:6B:24:35:60:34:60:53:BC:60:CE:D4:E9:8A:A4:8E:A1:A0:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7fNrJDVgNGBTvGDO1OmKpI6hoGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/jtNMbctmoeTy6sd9LST64n6P_dk.roa
Signing time: Tue 15 Sep 2026 21:49:30 +0000
ROA not before: Tue 15 Sep 2026 21:49:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 134351
IP address blocks: 198.33.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/7fNrJDVgNGBTvGDO1OmKpI6hoGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/7fNrJDVgNGBTvGDO1OmKpI6hoGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/7fNrJDVgNGBTvGDO1OmKpI6hoGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Sep 2026 02:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a7:0b:e6:4f:fd:94:1f:ac:5d:7c:74:d8:d0:67:0e:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edf36b243560346053bc60ced4e98aa48ea1a063
Validity
Not Before: Sep 15 21:49:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8ed34c6dcb66a1e4f2eac77d2d24fae27e8ffdd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:2b:1f:a7:e2:3e:9d:58:3a:ad:9a:6d:d8:f1:
08:92:ee:d9:82:c3:48:7f:2d:36:db:66:a9:fe:3b:
2e:e3:b2:a2:be:f6:3c:77:9d:15:e8:1e:a9:31:26:
03:1b:ed:95:a5:8c:b8:58:03:f2:2f:2a:06:8e:eb:
74:19:fb:a9:78:43:8a:0f:02:d0:0c:75:7f:35:92:
d1:d7:bd:a8:2e:8a:26:3a:19:2a:29:a5:5f:a6:c0:
6d:78:be:58:14:87:4c:90:dc:92:fb:9d:42:e1:48:
ec:dd:09:54:32:77:4b:fc:da:1c:f9:8b:d2:b5:b3:
88:39:ce:3c:c2:4e:dc:f0:da:4b:a8:1c:b7:be:f9:
b6:2b:6b:0a:70:8f:69:5f:39:11:42:b9:26:5f:72:
38:8f:d8:0a:93:99:9e:a2:c5:22:b1:47:8f:07:46:
74:83:31:dd:c0:31:9d:58:cf:52:ec:f4:eb:29:64:
6a:0e:14:38:d0:df:2e:30:5d:29:49:3e:bc:ef:41:
11:c5:b0:65:2c:b7:2a:de:72:37:08:13:78:46:37:
b3:ee:d3:96:3e:2d:1b:7e:a2:28:e1:02:ec:f5:3f:
8f:ce:88:8d:62:af:ab:e6:2e:45:72:ae:67:ef:b9:
e3:2a:72:39:fa:a9:38:55:76:a0:5a:b3:df:76:4a:
75:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:D3:4C:6D:CB:66:A1:E4:F2:EA:C7:7D:2D:24:FA:E2:7E:8F:FD:D9
X509v3 Authority Key Identifier:
keyid:ED:F3:6B:24:35:60:34:60:53:BC:60:CE:D4:E9:8A:A4:8E:A1:A0:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7fNrJDVgNGBTvGDO1OmKpI6hoGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/jtNMbctmoeTy6sd9LST64n6P_dk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/7fNrJDVgNGBTvGDO1OmKpI6hoGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
198.33.176.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:e4:05:9b:8b:cd:1a:80:32:28:e1:14:b3:05:e1:8c:17:dc:
1d:5c:6e:f1:e2:3b:65:43:31:aa:f6:49:d3:21:d6:fa:7e:c8:
db:56:0b:7d:fa:f0:e2:dc:b6:ea:8a:f7:02:69:7c:15:15:b4:
0f:81:d1:7e:37:ef:b9:8b:87:19:6d:a6:1c:9f:42:e0:36:f4:
c2:e7:b1:ae:be:4c:60:2f:7f:49:2e:b4:91:1f:13:75:77:2d:
b0:ac:a0:a2:cb:09:80:e4:43:24:60:44:80:1b:36:e9:0f:14:
62:c3:8a:71:a5:c0:84:29:25:a0:cd:81:14:f3:12:ae:cc:47:
f9:d1:43:22:6b:be:2b:d4:22:2a:f0:4c:47:da:a6:2d:d9:56:
ed:2e:33:f3:d3:c0:57:0f:b4:3b:d9:f3:2f:fc:41:b5:0b:81:
2b:60:85:92:db:ea:98:0f:fd:d8:72:13:13:59:af:94:9e:62:
d8:4f:ef:61:ce:d1:ea:4e:b7:e3:71:ad:52:43:8f:48:4f:e5:
2d:15:b4:26:14:49:b5:6d:23:03:b8:7e:c1:52:03:86:c8:29:
c2:68:fe:60:e6:d0:e6:9e:32:47:7a:eb:57:2c:eb:f9:9b:b2:
cf:60:e9:01:d7:cd:ef:a4:5a:b5:de:de:ef:fd:ca:a7:9a:37:
70:3c:e0:76
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaCnC+ZP/ZQfrF18dNjQZw4/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkZjM2YjI0MzU2MDM0NjA1M2JjNjBjZWQ0ZTk4YWE0OGVh
MWEwNjMwHhcNMjYwOTE1MjE0OTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZWQzNGM2ZGNiNjZhMWU0ZjJlYWM3N2QyZDI0ZmFlMjdlOGZmZGQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiCsfp+I+nVg6rZpt2PEIku7ZgsNI
fy0222ap/jsu47KivvY8d50V6B6pMSYDG+2VpYy4WAPyLyoGjut0GfupeEOKDwLQ
DHV/NZLR172oLoomOhkqKaVfpsBteL5YFIdMkNyS+51C4Ujs3QlUMndL/Noc+YvS
tbOIOc48wk7c8NpLqBy3vvm2K2sKcI9pXzkRQrkmX3I4j9gKk5meosUisUePB0Z0
gzHdwDGdWM9S7PTrKWRqDhQ40N8uMF0pST6870ERxbBlLLcq3nI3CBN4Rjez7tOW
Pi0bfqIo4QLs9T+PzoiNYq+r5i5Fcq5n77njKnI5+qk4VXagWrPfdkp1bwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFI7TTG3LZqHk8urHfS0k+uJ+j/3ZMB8GA1UdIwQY
MBaAFO3zayQ1YDRgU7xgztTpiqSOoaBjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2ZOckpEVmdOR0JUdkdETzFPbUtwSTZob0dNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC80YzcwNzQtOThjMS00MzM5LWEwNGUt
N2NiMmZkMjMyY2NjLzEvanROTWJjdG1vZVR5NnNkOUxTVDY0bjZQX2RrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC80YzcwNzQtOThjMS00MzM5LWEwNGUtN2NiMmZkMjMyY2Nj
LzEvN2ZOckpEVmdOR0JUdkdETzFPbUtwSTZob0dNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxiGwMA0G
CSqGSIb3DQEBCwUAA4IBAQCs5AWbi80agDIo4RSzBeGMF9wdXG7x4jtlQzGq9knT
Idb6fsjbVgt9+vDi3LbqivcCaXwVFbQPgdF+N++5i4cZbaYcn0LgNvTC57Guvkxg
L39JLrSRHxN1dy2wrKCiywmA5EMkYESAGzbpDxRiw4pxpcCEKSWgzYEU8xKuzEf5
0UMia74r1CIq8ExH2qYt2VbtLjPz08BXD7Q72fMv/EG1C4ErYIWS2+qYD/3YchMT
Wa+UnmLYT+9hztHqTrfjca1SQ49IT+UtFbQmFEm1bSMDuH7BUgOGyCnCaP5g5tDm
njJHeutXLOv5m7LPYOkB183vpFq13t7v/cqnmjdwPOB2
-----END CERTIFICATE-----
Generated at Sat Sep 19 11:43:35 2026 by rpki-client