Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/JCP7cyxcaPbidVqw7tlahBAb4Wk.roa
File: JCP7cyxcaPbidVqw7tlahBAb4Wk.roa (raw, json)
Hash identifier: aMueGC0Pw7DcGTeQ5eK1f6/J1WEjWYvSKzT9pIgZ0Fs=
Subject key identifier: 24:23:FB:73:2C:5C:68:F6:E2:75:5A:B0:EE:D9:5A:84:10:1B:E1:69
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A10D568678D9EF61F570E6A81C087C2A1C
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/JCP7cyxcaPbidVqw7tlahBAb4Wk.roa
Signing time: Mon 05 Oct 2026 18:32:16 +0000
ROA not before: Mon 05 Oct 2026 18:32:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29802
IP address blocks: 77.67.49.0/24 maxlen: 24
194.77.200.0/24 maxlen: 24
212.189.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 20:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0d:56:86:78:d9:ef:61:f5:70:e6:a8:1c:08:7c:2a:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Oct 5 18:32:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2423fb732c5c68f6e2755ab0eed95a84101be169
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:80:d1:dd:95:ad:e4:a9:65:c2:48:c5:19:3b:
ea:7d:ca:11:b3:99:2c:f8:c7:c4:12:d3:56:d3:a0:
f9:9c:c3:f4:a8:1a:f7:c9:f5:bf:96:d5:66:93:8a:
73:5b:62:75:9e:21:a8:d3:1f:4c:92:a3:9c:ea:59:
a6:78:80:ac:7a:f8:5a:85:4a:3b:f3:de:c5:1d:5c:
65:76:9e:e7:24:fd:3d:60:a3:7e:cb:71:6e:cc:40:
dc:a9:eb:bf:44:74:8f:6a:b1:3a:57:24:9b:a1:f3:
2f:ba:41:66:06:f3:59:f7:fb:f8:37:b6:03:06:f0:
90:1d:4f:ec:a8:09:40:ed:8a:4b:b2:05:57:a1:1f:
e1:f2:8b:16:69:ef:36:2b:80:df:cd:6e:74:16:87:
69:36:c8:f4:39:a3:8b:e4:cc:a7:d9:55:0e:ee:32:
13:7e:02:5d:dd:f1:d9:4f:36:5a:f0:2d:12:90:42:
bb:b8:1d:37:a3:19:17:77:c9:dd:10:6f:76:2a:94:
e5:2b:83:f9:fb:2b:82:e3:bb:ff:fb:17:e9:25:75:
e5:f6:f9:e6:f5:f1:eb:fc:ce:71:9f:53:02:34:31:
ee:3f:ca:ef:d9:b6:fc:0d:b2:2b:18:dc:f4:46:ec:
94:bf:b4:af:be:4a:ee:a5:a8:b2:22:d1:19:a6:72:
56:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:23:FB:73:2C:5C:68:F6:E2:75:5A:B0:EE:D9:5A:84:10:1B:E1:69
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/JCP7cyxcaPbidVqw7tlahBAb4Wk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.67.49.0/24
194.77.200.0/24
212.189.124.0/24
Signature Algorithm: sha256WithRSAEncryption
08:aa:64:69:65:a9:79:29:cb:c7:08:a0:94:3c:5b:10:42:8e:
5a:05:db:dc:7b:49:e6:6a:d7:52:f3:8a:ad:2a:0b:80:e3:83:
4c:0f:66:6e:c1:e2:0b:7e:85:c1:28:cc:55:43:95:48:33:c1:
ad:95:64:10:2c:0a:0d:51:34:30:e9:44:8d:e6:a8:44:77:f7:
d6:f5:06:a5:66:90:43:f2:20:26:3c:c3:8d:54:69:92:61:90:
1e:e3:1b:6d:55:dc:0c:14:b7:04:ee:7f:6b:d4:14:b5:a7:8f:
93:b6:0a:22:0c:4d:04:82:1c:0b:d4:97:b4:de:38:af:c4:f4:
3e:4a:ff:b2:c9:ce:36:8c:8b:9e:19:bc:33:4c:18:ff:46:0c:
7b:65:7b:fc:bf:35:64:4a:86:3c:4e:e1:1b:f8:b0:12:98:4b:
b1:24:ab:34:69:1d:bc:43:ea:af:3d:f5:6d:71:9f:8e:8c:43:
96:c2:08:c5:1b:a0:0d:13:ea:4a:90:87:7c:ac:2a:53:46:9a:
b2:77:a0:7b:d3:8f:07:c5:da:cc:fb:8c:3f:38:6a:eb:93:0e:
dc:9c:61:e5:8e:9c:69:a6:67:df:3f:5b:2d:2a:ba:bd:3b:74:
31:42:ab:ec:8e:81:22:e8:d9:c3:6c:e5:a0:ae:e3:6f:be:6f:
cd:c4:89:c4
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAaENVoZ42e9h9XDmqBwIfCocMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0
NmQxNzEwHhcNMjYxMDA1MTgzMjE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNDIzZmI3MzJjNWM2OGY2ZTI3NTVhYjBlZWQ5NWE4NDEwMWJlMTY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwoDR3ZWt5KllwkjFGTvqfcoRs5ks
+MfEEtNW06D5nMP0qBr3yfW/ltVmk4pzW2J1niGo0x9MkqOc6lmmeICsevhahUo7
897FHVxldp7nJP09YKN+y3FuzEDcqeu/RHSParE6VySbofMvukFmBvNZ9/v4N7YD
BvCQHU/sqAlA7YpLsgVXoR/h8osWae82K4DfzW50FodpNsj0OaOL5Myn2VUO7jIT
fgJd3fHZTzZa8C0SkEK7uB03oxkXd8ndEG92KpTlK4P5+yuC47v/+xfpJXXl9vnm
9fHr/M5xn1MCNDHuP8rv2bb8DbIrGNz0RuyUv7SvvkrupaiyItEZpnJWwwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFCQj+3MsXGj24nVasO7ZWoQQG+FpMB8GA1UdIwQY
MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt
MGNmMTA5M2Q0NTQ4LzEvSkNQN2N5eGNhUGJpZFZxdzd0bGFoQkFiNFdrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4
LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQATUMxAwQA
wk3IAwQA1L18MA0GCSqGSIb3DQEBCwUAA4IBAQAIqmRpZal5KcvHCKCUPFsQQo5a
Bdvce0nmatdS84qtKguA44NMD2ZuweILfoXBKMxVQ5VIM8GtlWQQLAoNUTQw6USN
5qhEd/fW9QalZpBD8iAmPMONVGmSYZAe4xttVdwMFLcE7n9r1BS1p4+TtgoiDE0E
ghwL1Je03jivxPQ+Sv+yyc42jIueGbwzTBj/Rgx7ZXv8vzVkSoY8TuEb+LASmEux
JKs0aR28Q+qvPfVtcZ+OjEOWwgjFG6ANE+pKkId8rCpTRpqyd6B7048HxdrM+4w/
OGrrkw7cnGHljpxppmffP1stKrq9O3QxQqvsjoEi6NnDbOWgruNvvm/NxInE
-----END CERTIFICATE-----
Generated at Sun Oct 11 06:19:48 2026 by rpki-client