Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/efff71-7d11-4a1a-8ad3-a67d8c7ed7ca/1/JJ3xHddZ0I1G4GC6ngsCT2Z1AKg.roa
File: JJ3xHddZ0I1G4GC6ngsCT2Z1AKg.roa (raw, json)
Hash identifier: p0H/nJ8SSJawvhGyEkFr2hf/MirWYL1XCitw4pi102Q=
Subject key identifier: 24:9D:F1:1D:D7:59:D0:8D:46:E0:60:BA:9E:0B:02:4F:66:75:00:A8
Certificate issuer: /CN=f503b683d74086443bd44e6d92b71776c5c35170
Certificate serial: 019F2368FB86B7CD14A4CB7FDF9EBB8CE18D
Authority key identifier: F5:03:B6:83:D7:40:86:44:3B:D4:4E:6D:92:B7:17:76:C5:C3:51:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9QO2g9dAhkQ71E5tkrcXdsXDUXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/efff71-7d11-4a1a-8ad3-a67d8c7ed7ca/1/JJ3xHddZ0I1G4GC6ngsCT2Z1AKg.roa
Signing time: Thu 02 Jul 2026 15:18:30 +0000
ROA not before: Thu 02 Jul 2026 15:18:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208143
IP address blocks: 185.179.34.0/24 maxlen: 24
2a02:6c20:5::/48 maxlen: 48
2a02:6c20:810::/48 maxlen: 48
2a02:6c20:828::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/efff71-7d11-4a1a-8ad3-a67d8c7ed7ca/1/9QO2g9dAhkQ71E5tkrcXdsXDUXA.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/efff71-7d11-4a1a-8ad3-a67d8c7ed7ca/1/9QO2g9dAhkQ71E5tkrcXdsXDUXA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9QO2g9dAhkQ71E5tkrcXdsXDUXA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:fb:86:b7:cd:14:a4:cb:7f:df:9e:bb:8c:e1:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f503b683d74086443bd44e6d92b71776c5c35170
Validity
Not Before: Jul 2 15:18:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=249df11dd759d08d46e060ba9e0b024f667500a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a8:4c:50:4d:2b:cf:18:50:65:04:4d:5d:ef:
cd:84:2b:76:40:1c:a8:c0:e8:0e:b4:52:7a:51:15:
af:b7:2b:c9:8d:bb:6a:c6:ee:2b:4f:88:69:57:87:
ff:17:9b:0a:6a:79:e9:cd:06:24:9a:11:b8:75:c5:
4c:e9:31:07:d2:1c:84:29:22:c0:79:a0:00:52:6f:
af:a6:cb:d5:32:67:48:b3:c3:91:8d:24:86:e5:d3:
9d:d7:5b:7e:ce:11:45:de:c6:bd:44:b0:c8:ab:f1:
bc:de:b4:69:23:f3:1d:38:8e:df:5e:d9:e6:9a:8e:
10:fa:68:c6:3f:04:21:73:41:be:62:c2:b6:c0:a9:
ec:b0:48:3a:5b:a5:d2:96:60:6f:d1:6a:ba:0e:f1:
b0:ba:eb:0a:46:66:f0:72:22:21:42:66:e1:07:ea:
6a:d7:31:1a:21:dc:91:c0:e2:fb:9a:b3:13:bb:c9:
79:0c:a4:ca:9d:a6:5d:ad:aa:e5:92:0a:74:6c:12:
16:e6:f9:73:e8:e5:b6:e9:b0:72:c6:f9:7d:f5:7f:
b1:f9:b1:3d:3c:3c:80:bd:da:9e:cc:a5:ac:36:03:
9d:e7:24:c3:7f:23:a1:cc:97:5d:94:e2:98:18:70:
8a:bd:4f:7e:f1:bf:8d:98:34:52:28:68:9e:97:86:
fb:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:9D:F1:1D:D7:59:D0:8D:46:E0:60:BA:9E:0B:02:4F:66:75:00:A8
X509v3 Authority Key Identifier:
keyid:F5:03:B6:83:D7:40:86:44:3B:D4:4E:6D:92:B7:17:76:C5:C3:51:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9QO2g9dAhkQ71E5tkrcXdsXDUXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/efff71-7d11-4a1a-8ad3-a67d8c7ed7ca/1/JJ3xHddZ0I1G4GC6ngsCT2Z1AKg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/efff71-7d11-4a1a-8ad3-a67d8c7ed7ca/1/9QO2g9dAhkQ71E5tkrcXdsXDUXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.179.34.0/24
IPv6:
2a02:6c20:5::/48
2a02:6c20:810::/48
2a02:6c20:828::/48
Signature Algorithm: sha256WithRSAEncryption
7e:2a:cc:8a:cd:64:75:34:aa:c8:09:80:51:a7:25:f1:db:ef:
2e:0f:cb:14:26:d7:17:ff:5a:56:d2:d2:59:5c:d9:3e:0c:15:
2c:a0:e8:16:ae:b5:a5:d3:be:11:08:93:fd:65:64:76:f1:e4:
0e:29:05:0a:7c:1b:f8:c2:dc:7d:ab:aa:23:f3:ce:75:d4:7e:
58:00:ff:50:38:5c:76:7d:39:ff:0f:66:4c:83:3a:c7:c7:c2:
74:24:ee:81:ef:41:e5:af:15:3b:45:a8:71:64:5c:d6:1e:a1:
49:a6:0f:87:11:bd:18:39:96:35:de:5a:46:45:a9:e1:71:51:
71:5f:ff:71:19:08:fa:6d:56:ee:06:e5:98:fb:26:59:c7:33:
fd:cf:42:48:77:b2:8d:4e:83:a1:5b:51:56:f2:4c:10:de:86:
cf:12:7e:b8:73:9f:08:18:5c:e0:68:fa:ee:6f:f6:0c:70:30:
32:1f:7a:45:b2:c0:0d:1f:6b:54:16:be:f5:a2:b8:f2:e2:de:
e0:68:a3:16:a9:e3:98:64:d7:ed:16:1b:ac:1b:30:6b:f4:2a:
4b:95:7d:3a:a1:d2:74:88:c1:81:39:ae:43:44:8e:6f:ab:1f:
09:3e:4a:29:70:ae:02:c3:e3:75:eb:7d:7f:7d:18:0a:c9:c6:
1a:e5:f1:a1
-----BEGIN CERTIFICATE-----
MIIFIDCCBAigAwIBAgISAZ8jaPuGt80UpMt/3567jOGNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1MDNiNjgzZDc0MDg2NDQzYmQ0NGU2ZDkyYjcxNzc2YzVj
MzUxNzAwHhcNMjYwNzAyMTUxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNDlkZjExZGQ3NTlkMDhkNDZlMDYwYmE5ZTBiMDI0ZjY2NzUwMGE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqhMUE0rzxhQZQRNXe/NhCt2QByo
wOgOtFJ6URWvtyvJjbtqxu4rT4hpV4f/F5sKannpzQYkmhG4dcVM6TEH0hyEKSLA
eaAAUm+vpsvVMmdIs8ORjSSG5dOd11t+zhFF3sa9RLDIq/G83rRpI/MdOI7fXtnm
mo4Q+mjGPwQhc0G+YsK2wKnssEg6W6XSlmBv0Wq6DvGwuusKRmbwciIhQmbhB+pq
1zEaIdyRwOL7mrMTu8l5DKTKnaZdrarlkgp0bBIW5vlz6OW26bByxvl99X+x+bE9
PDyAvdqezKWsNgOd5yTDfyOhzJddlOKYGHCKvU9+8b+NmDRSKGiel4b7fwIDAQAB
o4ICLDCCAigwHQYDVR0OBBYEFCSd8R3XWdCNRuBgup4LAk9mdQCoMB8GA1UdIwQY
MBaAFPUDtoPXQIZEO9RObZK3F3bFw1FwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVFPMmc5ZEFoa1E3MUU1dGtyY1hkc1hEVVhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9lZmZmNzEtN2QxMS00YTFhLThhZDMt
YTY3ZDhjN2VkN2NhLzEvSkozeEhkZFowSTFHNEdDNm5nc0NUMloxQUtnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS9lZmZmNzEtN2QxMS00YTFhLThhZDMtYTY3ZDhjN2VkN2Nh
LzEvOVFPMmc5ZEFoa1E3MUU1dGtyY1hkc1hEVVhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAMBAIAATAGAwQAubMiMCEE
AgACMBsDBwAqAmwgAAUDBwAqAmwgCBADBwAqAmwgCCgwDQYJKoZIhvcNAQELBQAD
ggEBAH4qzIrNZHU0qsgJgFGnJfHb7y4PyxQm1xf/WlbS0llc2T4MFSyg6BautaXT
vhEIk/1lZHbx5A4pBQp8G/jC3H2rqiPzznXUflgA/1A4XHZ9Of8PZkyDOsfHwnQk
7oHvQeWvFTtFqHFkXNYeoUmmD4cRvRg5ljXeWkZFqeFxUXFf/3EZCPptVu4G5Zj7
JlnHM/3PQkh3so1Og6FbUVbyTBDehs8SfrhznwgYXOBo+u5v9gxwMDIfekWywA0f
a1QWvvWiuPLi3uBooxap45hk1+0WG6wbMGv0KkuVfTqh0nSIwYE5rkNEjm+rHwk+
SilwrgLD43XrfX99GArJxhrl8aE=
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:38:09 2026 by rpki-client