Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/f0832e-675b-4ec2-a802-9b26cab79451/1/jJPSj-e-v9sgP4W0f2-frivwIRI.roa
File: jJPSj-e-v9sgP4W0f2-frivwIRI.roa (raw, json)
Hash identifier: d3IaJBpWA8Z9+VCeILAHvc4L5h7XdsOdtTNLAQnWkOw=
Subject key identifier: 8C:93:D2:8F:E7:BE:BF:DB:20:3F:85:B4:7F:6F:9F:AE:2B:F0:21:12
Certificate issuer: /CN=1455ca30592313388925ee1441009ad31d4bb41f
Certificate serial: 01A167BF0393F84114BF26EFDAB3F67DFA9B
Authority key identifier: 14:55:CA:30:59:23:13:38:89:25:EE:14:41:00:9A:D3:1D:4B:B4:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FFXKMFkjEziJJe4UQQCa0x1LtB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/f0832e-675b-4ec2-a802-9b26cab79451/1/jJPSj-e-v9sgP4W0f2-frivwIRI.roa
Signing time: Fri 23 Oct 2026 07:52:13 +0000
ROA not before: Fri 23 Oct 2026 07:52:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218554
IP address blocks: 46.21.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/f0832e-675b-4ec2-a802-9b26cab79451/1/FFXKMFkjEziJJe4UQQCa0x1LtB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/f0832e-675b-4ec2-a802-9b26cab79451/1/FFXKMFkjEziJJe4UQQCa0x1LtB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/FFXKMFkjEziJJe4UQQCa0x1LtB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 13:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:67:bf:03:93:f8:41:14:bf:26:ef:da:b3:f6:7d:fa:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1455ca30592313388925ee1441009ad31d4bb41f
Validity
Not Before: Oct 23 07:52:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8c93d28fe7bebfdb203f85b47f6f9fae2bf02112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:26:9a:b1:55:e0:21:1f:d1:f9:8f:1e:6e:32:
ac:7f:25:52:f5:f6:49:8a:eb:a6:aa:ea:e6:26:f9:
15:2a:56:40:6c:19:8a:b6:fa:e2:0a:8d:20:53:f4:
33:2d:df:9a:56:6a:3e:0e:86:f5:21:7a:c8:f7:78:
72:23:e6:6a:73:b5:13:14:06:8c:92:8b:11:2f:a1:
db:f0:2f:f3:9d:92:ee:ff:2a:fc:d8:fd:af:9f:ae:
57:b6:cb:38:fe:aa:3b:5b:04:f8:57:27:0b:73:5a:
2c:38:aa:84:20:57:6e:1b:87:cb:98:76:86:29:90:
67:fc:8a:7f:7b:8d:ca:4d:da:98:7c:1a:ab:7e:3c:
1e:83:07:2f:2c:5b:ef:e7:34:d3:68:28:80:15:c5:
5f:e9:ea:35:42:59:3a:98:2c:c1:09:55:61:e2:19:
c6:fd:ec:43:bf:2d:28:0f:c3:b9:62:b6:fc:4b:5f:
1d:7d:5f:75:2f:dc:09:48:5c:87:41:67:24:b1:44:
70:9b:d1:29:62:a0:2e:82:21:46:86:da:43:74:3c:
2b:12:94:5f:9b:a5:6d:d8:42:21:14:31:f1:ff:38:
d9:cc:30:8e:1e:3c:4e:ba:34:a6:65:69:8a:28:78:
d8:a0:72:5f:59:1b:dd:d9:66:8d:d5:f5:8e:fc:8e:
ae:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:93:D2:8F:E7:BE:BF:DB:20:3F:85:B4:7F:6F:9F:AE:2B:F0:21:12
X509v3 Authority Key Identifier:
keyid:14:55:CA:30:59:23:13:38:89:25:EE:14:41:00:9A:D3:1D:4B:B4:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FFXKMFkjEziJJe4UQQCa0x1LtB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f0832e-675b-4ec2-a802-9b26cab79451/1/jJPSj-e-v9sgP4W0f2-frivwIRI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f0832e-675b-4ec2-a802-9b26cab79451/1/FFXKMFkjEziJJe4UQQCa0x1LtB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.21.20.0/24
Signature Algorithm: sha256WithRSAEncryption
67:bd:dd:76:15:ee:77:3a:58:1f:49:cf:7f:54:6e:49:20:52:
42:19:e9:8e:85:04:99:1f:77:a0:c1:ce:42:c7:8d:e1:42:54:
d6:a1:69:b4:63:f8:cc:29:33:bc:3a:11:92:3d:ac:1a:4a:81:
fa:5a:39:f1:07:0a:ac:c1:1e:d5:e3:a7:d6:f4:d8:51:2d:06:
94:6e:50:1a:56:43:2a:9f:cc:8e:69:fe:0b:55:7a:c7:15:fd:
dd:c5:3a:fd:ff:9a:b0:2d:e6:e7:9d:3d:a9:ee:8f:20:ce:67:
8e:ab:9c:4f:0e:4a:c2:33:4a:a2:54:88:af:b8:40:65:cc:d2:
69:2d:65:be:32:5e:42:d4:31:1f:cb:40:a0:63:03:9c:0b:e0:
5b:74:1b:f7:66:7a:bc:35:34:8d:c2:85:d6:cc:b6:c4:a8:eb:
9e:46:fd:bb:d4:85:75:89:b1:69:97:64:ed:45:6c:13:48:6a:
10:aa:e4:81:a5:d8:2d:29:87:a2:a7:12:a4:e8:3e:f8:f7:93:
90:bd:3b:61:6f:db:a9:3a:03:f4:14:47:e8:9f:e4:27:12:2a:
b6:a9:a1:40:7f:37:50:8f:1d:38:5c:7e:71:37:90:a0:27:c0:
a7:bd:c0:84:18:a3:40:88:7e:7b:2e:7f:cf:dc:98:1e:cb:c5:
7b:44:fd:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 18:41:03 2026 by rpki-client