Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/JpERTOszM2iXzKPMVo88c1fQ8kw.roa
File: JpERTOszM2iXzKPMVo88c1fQ8kw.roa (raw, json)
Hash identifier: zxFEM19QdkWki8EEdG5/tqBnyQKCPahNBvcguMN9hvc=
Subject key identifier: 26:91:11:4C:EB:33:33:68:97:CC:A3:CC:56:8F:3C:73:57:D0:F2:4C
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019EF8C87AD481CD5631AA01FB1B5CB516BD
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/JpERTOszM2iXzKPMVo88c1fQ8kw.roa
Signing time: Wed 24 Jun 2026 08:39:08 +0000
ROA not before: Wed 24 Jun 2026 08:39:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197646
IP address blocks: 194.77.204.0/22 maxlen: 24
194.77.208.0/21 maxlen: 24
194.77.224.0/22 maxlen: 24
212.189.64.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:13:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f8:c8:7a:d4:81:cd:56:31:aa:01:fb:1b:5c:b5:16:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jun 24 08:39:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2691114ceb33336897cca3cc568f3c7357d0f24c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b7:60:0b:75:ac:6d:3f:49:41:a6:75:b5:60:
52:b2:75:78:6b:43:d7:1b:f4:73:b0:fc:a8:23:e0:
59:01:4b:7d:45:ff:3d:f4:3c:5a:8d:f9:93:3e:70:
ab:9b:b8:a9:e4:6b:d0:d5:33:dd:7d:a2:97:c9:4e:
99:ed:88:ee:82:2a:bc:ee:c1:63:5f:e4:4b:fe:50:
c6:a0:61:80:d0:57:ed:c7:5e:c2:aa:0a:af:2d:8a:
d2:00:14:95:f5:75:a8:93:d8:61:5b:b4:7a:f1:fc:
05:9c:47:26:49:32:8d:f5:9c:2d:e0:6c:8b:fa:cf:
14:8e:3b:d5:17:5b:98:f7:fd:e3:d7:61:77:57:b4:
b9:87:d5:b0:e6:f0:01:39:35:59:fa:7d:9d:74:8c:
61:fd:7d:dd:c8:65:e0:f4:87:d7:c7:e1:32:78:7d:
9e:11:9e:0e:07:e4:25:39:de:15:67:80:5d:9e:d3:
a1:8d:a8:c4:84:1d:48:fe:74:64:41:ac:c1:88:10:
70:8e:09:93:e0:53:6a:fe:33:4a:83:5c:a1:ce:33:
d2:62:a4:09:1f:2e:e7:93:7c:69:11:90:18:32:34:
72:61:be:a7:db:5b:60:f1:fa:b3:e3:1e:ce:5a:ce:
63:ca:e3:a0:67:ca:f8:09:10:41:0d:02:b6:08:1e:
29:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:91:11:4C:EB:33:33:68:97:CC:A3:CC:56:8F:3C:73:57:D0:F2:4C
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/JpERTOszM2iXzKPMVo88c1fQ8kw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.77.204.0-194.77.215.255
194.77.224.0/22
212.189.64.0/23
Signature Algorithm: sha256WithRSAEncryption
26:83:db:87:41:d1:8e:05:e4:82:62:4a:06:5c:74:9c:16:9a:
40:ca:81:03:6d:91:c7:51:94:1e:45:8e:db:82:d1:b6:2d:5a:
37:08:2e:85:99:87:53:71:7d:c0:9b:38:61:57:87:88:82:f1:
fd:4b:7b:de:5f:83:73:96:52:71:9a:d7:0c:a1:f1:87:60:89:
1d:1e:a4:27:e9:2f:50:ec:e3:53:1f:79:82:ab:55:e6:db:5b:
4a:7b:68:52:7f:52:40:a7:c2:2c:02:4e:be:2b:f4:05:78:7b:
76:bd:5d:88:21:4c:08:ee:63:6e:79:0f:2b:6f:99:78:67:d7:
64:73:24:60:44:1b:4e:76:3b:59:f4:93:1a:57:6f:4b:0d:90:
b2:20:d4:99:46:d2:d0:42:cf:cc:a7:e0:f0:ca:73:3b:e7:82:
cf:1a:eb:71:1e:0b:e7:76:92:da:1b:3c:dc:62:4c:08:99:4a:
f2:34:84:09:ad:5c:d2:2c:35:1d:1b:30:c4:70:62:23:f0:1c:
43:67:d2:15:3c:a5:38:c8:59:25:47:5c:17:bb:1c:ff:31:62:
27:09:d3:d3:6c:60:31:34:20:ec:fb:bf:aa:b0:e9:f9:d3:0b:
cd:60:1c:d5:f6:bb:6e:7d:9b:83:7d:b0:59:07:a2:28:2c:c1:
4e:6b:ec:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:17:39 2026 by rpki-client