Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/JNtEUjv1u2nrR2kJY3xTk9eLdQU.roa
File: JNtEUjv1u2nrR2kJY3xTk9eLdQU.roa (raw, json)
Hash identifier: y7e9qF3W4oZOepFOJNd5APdu3FIuFqB+iMZzLRxwKEo=
Subject key identifier: 24:DB:44:52:3B:F5:BB:69:EB:47:69:09:63:7C:53:93:D7:8B:75:05
Certificate issuer: /CN=49c403d43b5f38fca2119cd1409a92763edefe71
Certificate serial: 01A04264ADC4B957971602A03F212ECDCB27
Authority key identifier: 49:C4:03:D4:3B:5F:38:FC:A2:11:9C:D1:40:9A:92:76:3E:DE:FE:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ScQD1DtfOPyiEZzRQJqSdj7e_nE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/JNtEUjv1u2nrR2kJY3xTk9eLdQU.roa
Signing time: Thu 27 Aug 2026 08:44:49 +0000
ROA not before: Thu 27 Aug 2026 08:44:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 274434
IP address blocks: 176.57.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ScQD1DtfOPyiEZzRQJqSdj7e_nE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 11:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:42:64:ad:c4:b9:57:97:16:02:a0:3f:21:2e:cd:cb:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49c403d43b5f38fca2119cd1409a92763edefe71
Validity
Not Before: Aug 27 08:44:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=24db44523bf5bb69eb476909637c5393d78b7505
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:93:1b:8d:aa:dd:52:25:f2:9c:56:77:69:64:
4a:c8:cb:4f:c6:a0:41:6f:0c:19:33:45:30:3a:aa:
f5:85:1b:5d:7c:81:d8:5f:dd:54:9d:59:55:ac:77:
9f:e7:05:e8:1f:b2:a5:93:72:d2:d5:3a:2a:9d:1d:
f6:60:0a:d4:77:7e:ce:59:1a:cd:0c:f9:ae:50:c8:
18:ce:da:ec:49:9a:e5:68:7e:e3:2d:1e:e5:0f:f9:
f6:47:dd:db:16:5e:09:43:81:9f:65:94:50:f7:68:
3f:9e:c0:ab:f1:1a:ef:29:6c:0e:48:56:bf:cf:96:
e3:c9:91:a3:64:ea:dd:4f:3c:45:fa:8d:70:9d:2c:
59:37:ec:04:e3:75:4a:1c:14:1c:c8:17:e8:c0:11:
70:67:9a:a4:58:b9:c3:dc:a7:9d:6b:c0:3a:07:34:
fa:93:b9:e9:ae:1c:6f:ea:b7:21:b0:87:e2:da:e1:
a0:f9:d2:d7:f9:8b:42:8f:5f:7f:5d:91:a5:6f:e1:
1d:e9:3f:18:4a:32:a6:6e:23:f6:47:61:2b:02:e6:
b5:8c:39:e9:a0:fb:fd:cc:5e:37:95:98:e6:4d:99:
c3:36:a6:e0:50:47:dd:6b:18:92:58:7d:e3:cd:68:
3e:c8:fc:25:b4:0e:db:32:f8:65:f5:af:02:1b:9e:
ad:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:DB:44:52:3B:F5:BB:69:EB:47:69:09:63:7C:53:93:D7:8B:75:05
X509v3 Authority Key Identifier:
keyid:49:C4:03:D4:3B:5F:38:FC:A2:11:9C:D1:40:9A:92:76:3E:DE:FE:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ScQD1DtfOPyiEZzRQJqSdj7e_nE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/JNtEUjv1u2nrR2kJY3xTk9eLdQU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.57.200.0/24
Signature Algorithm: sha256WithRSAEncryption
24:8c:08:85:2b:38:0b:e7:1e:22:8d:52:04:cb:a8:e4:25:30:
eb:58:1a:ab:ed:ca:42:e6:02:28:96:2c:7f:ef:65:32:b3:74:
29:79:16:ff:cf:bb:65:0c:6c:7e:20:7c:22:5b:41:97:58:9e:
1a:2f:20:e7:55:9e:83:6d:ac:d2:a7:54:06:e3:b9:d9:a0:4b:
dd:61:6f:ea:33:c4:8f:79:89:3b:ad:7c:96:24:ac:45:2a:78:
18:26:56:e2:ef:33:0f:b1:8f:f4:9d:e9:d1:5a:33:b3:d2:49:
9a:cf:0c:35:47:68:47:95:06:69:f3:c0:1f:d5:cb:fd:ad:f2:
4d:e6:b9:60:06:e4:b6:b1:bf:d1:97:e1:89:a8:51:13:9e:f6:
59:76:8d:92:79:1f:a3:49:19:a2:ea:98:d2:f3:e6:ed:24:94:
e7:89:f3:8c:e6:bf:bb:11:04:6e:74:d1:8f:1d:af:e5:1e:34:
00:30:dd:2b:2e:55:33:66:e0:40:76:9e:8f:72:56:e0:a4:04:
70:a4:06:2a:a3:b4:52:21:bb:8c:e7:d8:30:c8:4d:6e:3d:a1:
d4:30:39:25:5d:af:c7:a6:3e:df:3d:1a:6d:36:3d:a1:12:47:
e0:38:fd:95:15:56:8b:ee:af:b5:38:30:2d:43:fd:19:96:2a:
b9:32:2a:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 17:24:24 2026 by rpki-client