Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/JgaD7deFAxN-muXuVTudc83Zxgk.roa
File: JgaD7deFAxN-muXuVTudc83Zxgk.roa (raw, json)
Hash identifier: 8QsIQfwgyYrYvZ/NsZS4s1FSbyb6R/VSrsbKiaRbQTg=
Subject key identifier: 26:06:83:ED:D7:85:03:13:7E:9A:E5:EE:55:3B:9D:73:CD:D9:C6:09
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019DEF7C8C25D3543FF101D4252B73678F3B
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/JgaD7deFAxN-muXuVTudc83Zxgk.roa
Signing time: Sun 03 May 2026 20:16:50 +0000
ROA not before: Sun 03 May 2026 20:16:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8129
IP address blocks: 5.230.195.0/24 maxlen: 24
94.249.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ef:7c:8c:25:d3:54:3f:f1:01:d4:25:2b:73:67:8f:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: May 3 20:16:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=260683edd78503137e9ae5ee553b9d73cdd9c609
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:dd:f1:ef:bd:b7:88:4f:40:b0:b6:29:c7:f5:
64:40:10:74:a9:73:e7:90:80:d6:bf:a1:65:03:e0:
ca:7c:27:f2:ab:3e:c4:a4:63:5b:40:b3:da:0f:e7:
5d:49:36:9d:09:3c:79:07:0c:88:3a:d2:33:83:d5:
65:f0:2a:49:fc:f2:d9:79:64:46:0a:d8:4d:fb:d5:
41:7f:83:76:71:22:53:6c:9d:98:72:f5:66:84:f6:
a6:5e:fb:49:e6:76:07:e5:e8:28:8a:f0:74:40:77:
8c:d7:8e:a1:36:5a:80:85:0b:53:6b:bb:31:da:94:
1c:68:4d:6a:44:02:65:6b:5e:23:6c:c1:c3:b3:12:
ef:db:cf:fa:a5:fd:65:38:45:ad:fb:78:9e:9c:42:
93:13:69:68:36:09:fe:2f:cf:f3:e9:08:c3:48:2c:
d8:8c:02:5e:46:9d:41:b4:0d:92:dc:e5:52:0c:3a:
83:2c:b5:c2:e8:ea:58:12:d3:62:e3:cd:12:a7:28:
76:7d:2a:df:d8:0c:ed:6c:d9:b8:0f:0f:e0:41:5a:
fe:ae:7e:8e:b5:2c:27:76:5a:97:df:37:81:e1:36:
7b:df:11:71:28:be:66:ee:3e:00:59:4c:9e:3c:b8:
98:37:86:dd:4a:c5:2f:92:52:21:59:07:52:36:81:
58:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:06:83:ED:D7:85:03:13:7E:9A:E5:EE:55:3B:9D:73:CD:D9:C6:09
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/JgaD7deFAxN-muXuVTudc83Zxgk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.230.195.0/24
94.249.198.0/24
Signature Algorithm: sha256WithRSAEncryption
56:ed:25:f8:50:73:d8:59:7d:b5:00:ec:3f:91:f1:98:36:57:
69:e4:ee:fd:16:17:be:ff:42:97:66:34:9a:6c:59:9a:b3:07:
fe:44:b9:9b:bf:b9:0e:f2:df:8c:66:fe:55:ad:e2:80:9a:9e:
d0:bb:47:f5:b8:6b:2d:3b:c5:e9:6c:5b:b7:00:f0:22:27:01:
dc:4c:b8:7e:69:2c:5a:90:1d:d0:b0:50:3b:2b:a3:e9:f0:4a:
74:6d:0d:a3:bc:31:a3:65:a1:aa:a2:0f:7c:2c:8d:04:b3:76:
f2:bf:1e:01:4a:1c:14:95:72:12:71:2b:32:3c:ad:40:7f:85:
3e:54:a0:a4:f3:f6:72:80:a0:db:ad:fb:bd:b4:9a:20:da:62:
17:20:2f:4b:69:fb:1f:7d:03:dc:4c:89:4f:18:64:37:68:82:
aa:6a:7f:90:02:9d:8c:c2:13:78:2e:e3:ca:ba:8e:9d:f0:50:
7e:91:12:bb:6f:f5:14:0d:83:ad:18:04:da:46:f0:39:08:78:
e8:8a:ce:3a:82:9b:00:24:c8:b0:72:e2:e9:cf:7c:22:2d:cc:
93:08:bb:65:ad:24:69:a0:0d:a8:5f:5c:19:7c:5c:b6:93:a6:
c1:1d:50:02:00:ac:d2:73:67:29:80:8e:be:5c:bb:2e:1d:89:
9a:e5:85:39
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ3vfIwl01Q/8QHUJStzZ487MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjYwNTAzMjAxNjUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNjA2ODNlZGQ3ODUwMzEzN2U5YWU1ZWU1NTNiOWQ3M2NkZDljNjA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAid3x7723iE9AsLYpx/VkQBB0qXPn
kIDWv6FlA+DKfCfyqz7EpGNbQLPaD+ddSTadCTx5BwyIOtIzg9Vl8CpJ/PLZeWRG
CthN+9VBf4N2cSJTbJ2YcvVmhPamXvtJ5nYH5egoivB0QHeM146hNlqAhQtTa7sx
2pQcaE1qRAJla14jbMHDsxLv28/6pf1lOEWt+3ienEKTE2loNgn+L8/z6QjDSCzY
jAJeRp1BtA2S3OVSDDqDLLXC6OpYEtNi480Spyh2fSrf2AztbNm4Dw/gQVr+rn6O
tSwndlqX3zeB4TZ73xFxKL5m7j4AWUyePLiYN4bdSsUvklIhWQdSNoFY1wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFCYGg+3XhQMTfprl7lU7nXPN2cYJMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvSmdhRDdkZUZBeE4tbXVYdVZUdWRjODNaeGdrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABebDAwQA
XvnGMA0GCSqGSIb3DQEBCwUAA4IBAQBW7SX4UHPYWX21AOw/kfGYNldp5O79Fhe+
/0KXZjSabFmaswf+RLmbv7kO8t+MZv5VreKAmp7Qu0f1uGstO8XpbFu3APAiJwHc
TLh+aSxakB3QsFA7K6Pp8Ep0bQ2jvDGjZaGqog98LI0Es3byvx4BShwUlXIScSsy
PK1Af4U+VKCk8/ZygKDbrfu9tJog2mIXIC9LafsffQPcTIlPGGQ3aIKqan+QAp2M
whN4LuPKuo6d8FB+kRK7b/UUDYOtGATaRvA5CHjois46gpsAJMiwcuLpz3wiLcyT
CLtlrSRpoA2oX1wZfFy2k6bBHVACAKzSc2cpgI6+XLsuHYma5YU5
-----END CERTIFICATE-----
Generated at Tue May 12 22:19:35 2026 by rpki-client