Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/jDXTCYklB5PjjPIato0R36g-v0k.roa
File: jDXTCYklB5PjjPIato0R36g-v0k.roa (raw, json)
Hash identifier: eI/sh5HNeFnTdoWxawvOf1uflA50KRdHYyBYW0mL9vo=
Subject key identifier: 8C:35:D3:09:89:25:07:93:E3:8C:F2:1A:B6:8D:11:DF:A8:3E:BF:49
Certificate issuer: /CN=9f1c350cf567345e5d75e6c53e04df4e1241c140
Certificate serial: 019F2368A81E6509C8C40881F2FDEDA0C259
Authority key identifier: 9F:1C:35:0C:F5:67:34:5E:5D:75:E6:C5:3E:04:DF:4E:12:41:C1:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nxw1DPVnNF5ddebFPgTfThJBwUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/jDXTCYklB5PjjPIato0R36g-v0k.roa
Signing time: Thu 02 Jul 2026 15:18:09 +0000
ROA not before: Thu 02 Jul 2026 15:18:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 24634
IP address blocks: 80.89.176.0/20 maxlen: 24
194.26.4.0/22 maxlen: 24
2a06:b940::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/nxw1DPVnNF5ddebFPgTfThJBwUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/nxw1DPVnNF5ddebFPgTfThJBwUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nxw1DPVnNF5ddebFPgTfThJBwUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:a8:1e:65:09:c8:c4:08:81:f2:fd:ed:a0:c2:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f1c350cf567345e5d75e6c53e04df4e1241c140
Validity
Not Before: Jul 2 15:18:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8c35d30989250793e38cf21ab68d11dfa83ebf49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e7:f4:19:1c:44:48:e0:c7:0d:50:16:5a:ca:
c3:68:54:7a:b1:3e:65:9f:96:c4:61:4b:78:ff:6e:
fa:07:5a:e0:27:c0:74:25:9f:53:fe:9d:95:ab:18:
19:57:f7:6f:ef:b6:94:cb:50:31:00:c1:15:2f:a9:
15:6b:e8:f1:52:ce:3b:45:44:70:84:a1:7d:04:27:
78:dc:4d:d4:68:96:39:cb:9a:40:d5:f0:8e:80:40:
f7:f5:95:23:85:bb:d2:18:88:f6:7c:f6:a9:00:86:
49:0a:e6:cc:7f:b2:d8:10:ea:0b:7a:c5:13:58:8e:
8a:9f:ee:13:0e:63:41:cf:c5:27:7f:f1:19:6a:21:
8a:1c:6b:d5:d4:3d:79:20:cd:57:cc:d2:31:2f:f1:
49:aa:7e:c6:d5:99:01:7c:77:e4:a4:7a:fd:dd:8d:
7a:2b:e7:f1:78:fc:f7:d2:d4:30:30:b1:e2:be:65:
5b:7f:0a:6e:bb:31:be:66:c6:6b:c3:1a:1f:d4:8d:
ab:2a:8a:ec:62:c0:a9:ea:15:7f:84:77:c4:1c:35:
0a:26:b7:40:22:01:5a:bd:8d:26:7f:48:40:1d:6b:
6b:36:58:3f:2c:25:b7:0c:73:37:83:b9:0a:5d:a8:
ff:50:b1:9e:26:7f:df:5e:aa:65:3d:11:0c:d8:4b:
61:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:35:D3:09:89:25:07:93:E3:8C:F2:1A:B6:8D:11:DF:A8:3E:BF:49
X509v3 Authority Key Identifier:
keyid:9F:1C:35:0C:F5:67:34:5E:5D:75:E6:C5:3E:04:DF:4E:12:41:C1:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nxw1DPVnNF5ddebFPgTfThJBwUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/jDXTCYklB5PjjPIato0R36g-v0k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/nxw1DPVnNF5ddebFPgTfThJBwUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.89.176.0/20
194.26.4.0/22
IPv6:
2a06:b940::/29
Signature Algorithm: sha256WithRSAEncryption
51:9f:be:f7:33:47:8a:a3:a7:08:b3:7f:54:62:4b:dc:a3:58:
03:f7:af:cc:0e:df:1d:71:65:d8:01:44:fc:6b:e9:c0:27:bf:
cf:e9:c3:c2:ae:28:24:df:50:27:c6:61:02:a4:a2:cd:f8:01:
06:81:8d:d6:ba:6a:25:71:62:18:dc:cd:b3:89:d8:c8:f9:78:
a5:dc:10:ae:97:5f:ca:82:62:43:53:cd:55:ec:5a:71:3b:3f:
24:49:5f:83:80:15:26:d0:28:70:ed:78:00:85:06:7b:01:c3:
52:45:33:48:5a:39:ef:22:57:99:ed:77:32:1b:72:5b:6b:99:
e3:a0:04:c4:7a:35:cc:36:19:2e:97:85:fb:04:39:12:23:9a:
45:d7:66:f7:08:59:85:a4:b7:82:21:de:92:5c:3e:87:d8:8e:
e7:a5:6c:69:2e:78:df:4c:eb:1b:af:c7:67:30:45:d3:68:9c:
6d:9b:79:d6:34:33:80:2d:f5:6a:71:e5:4c:21:55:d0:80:5f:
11:c7:83:78:63:24:5e:e8:d1:00:f2:af:49:1b:3a:c0:e4:b8:
13:2a:c7:ff:8d:31:f6:55:9a:4f:db:05:83:8b:c1:3e:c6:28:
3a:96:d9:bc:f2:d9:bf:75:b2:0e:0e:28:8b:16:dc:c4:89:31:
eb:87:b7:24
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZ8jaKgeZQnIxAiB8v3toMJZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmMWMzNTBjZjU2NzM0NWU1ZDc1ZTZjNTNlMDRkZjRlMTI0
MWMxNDAwHhcNMjYwNzAyMTUxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YzM1ZDMwOTg5MjUwNzkzZTM4Y2YyMWFiNjhkMTFkZmE4M2ViZjQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOf0GRxESODHDVAWWsrDaFR6sT5l
n5bEYUt4/276B1rgJ8B0JZ9T/p2VqxgZV/dv77aUy1AxAMEVL6kVa+jxUs47RURw
hKF9BCd43E3UaJY5y5pA1fCOgED39ZUjhbvSGIj2fPapAIZJCubMf7LYEOoLesUT
WI6Kn+4TDmNBz8Unf/EZaiGKHGvV1D15IM1XzNIxL/FJqn7G1ZkBfHfkpHr93Y16
K+fxePz30tQwMLHivmVbfwpuuzG+ZsZrwxof1I2rKorsYsCp6hV/hHfEHDUKJrdA
IgFavY0mf0hAHWtrNlg/LCW3DHM3g7kKXaj/ULGeJn/fXqplPREM2EthOQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFIw10wmJJQeT44zyGraNEd+oPr9JMB8GA1UdIwQY
MBaAFJ8cNQz1ZzReXXXmxT4E304SQcFAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnh3MURQVm5ORjVkZGViRlBnVGZUaEpCd1VBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9hY2UzNzMtYjgxYi00MDBjLTg0NWMt
OTYyOGY1MjY2NTQyLzEvakRYVENZa2xCNVBqalBJYXRvMFIzNmctdjBrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy9hY2UzNzMtYjgxYi00MDBjLTg0NWMtOTYyOGY1MjY2NTQy
LzEvbnh3MURQVm5ORjVkZGViRlBnVGZUaEpCd1VBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQEUFmwAwQC
whoEMA0EAgACMAcDBQMqBrlAMA0GCSqGSIb3DQEBCwUAA4IBAQBRn773M0eKo6cI
s39UYkvco1gD96/MDt8dcWXYAUT8a+nAJ7/P6cPCrigk31AnxmECpKLN+AEGgY3W
umolcWIY3M2zidjI+Xil3BCul1/KgmJDU81V7FpxOz8kSV+DgBUm0Chw7XgAhQZ7
AcNSRTNIWjnvIleZ7XcyG3Jba5njoATEejXMNhkul4X7BDkSI5pF12b3CFmFpLeC
Id6SXD6H2I7npWxpLnjfTOsbr8dnMEXTaJxtm3nWNDOALfVqceVMIVXQgF8Rx4N4
YyRe6NEA8q9JGzrA5LgTKsf/jTH2VZpP2wWDi8E+xig6ltm88tm/dbIODiiLFtzE
iTHrh7ck
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:07:24 2026 by rpki-client