Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/JVFZhRwUm5AzKUHRTK8KA5ERW7c.roa
File: JVFZhRwUm5AzKUHRTK8KA5ERW7c.roa (raw, json)
Hash identifier: GyhDJmFQCDzUgwg/YVLMov5lqPzGc1kg2Dx51IyQvak=
Subject key identifier: 25:51:59:85:1C:14:9B:90:33:29:41:D1:4C:AF:0A:03:91:11:5B:B7
Certificate issuer: /CN=213e1d50d52288bee80eea435577018712409bbe
Certificate serial: 019F1D9B48AE86D0ED23D99CA999292A4176
Authority key identifier: 21:3E:1D:50:D5:22:88:BE:E8:0E:EA:43:55:77:01:87:12:40:9B:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IT4dUNUiiL7oDupDVXcBhxJAm74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/JVFZhRwUm5AzKUHRTK8KA5ERW7c.roa
Signing time: Wed 01 Jul 2026 12:15:43 +0000
ROA not before: Wed 01 Jul 2026 12:15:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211496
IP address blocks: 131.222.255.0/24 maxlen: 24
185.130.90.0/24 maxlen: 24
185.195.252.0/24 maxlen: 24
193.22.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.mft
rsync://rpki.ripe.net/repository/DEFAULT/IT4dUNUiiL7oDupDVXcBhxJAm74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1d:9b:48:ae:86:d0:ed:23:d9:9c:a9:99:29:2a:41:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=213e1d50d52288bee80eea435577018712409bbe
Validity
Not Before: Jul 1 12:15:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=255159851c149b90332941d14caf0a0391115bb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:97:28:49:f6:b6:9d:68:44:0b:f1:9a:e7:b9:
43:4b:3f:42:6c:cf:0b:00:08:6e:10:07:41:c7:52:
26:a9:22:a7:49:5c:f1:d0:df:05:10:5b:09:5b:6a:
fa:cf:09:c0:20:25:60:27:db:3d:72:5d:f5:eb:a4:
34:29:3e:07:1a:3d:14:0f:25:99:c8:b1:8f:a8:6e:
30:18:e9:21:7f:32:cc:a2:01:3e:6c:26:0c:72:98:
73:6d:db:9e:2e:f4:f1:85:ad:c6:7e:39:c2:81:e7:
e9:5e:c8:e7:ea:2c:0c:9c:73:e4:a5:32:ae:66:b8:
26:85:32:c0:17:7c:39:6c:92:e0:13:8e:f4:f3:ae:
ab:66:00:0c:cb:80:96:d1:4e:cf:59:b6:90:5c:b7:
c8:b3:ad:d5:ee:a6:20:86:81:b7:21:d6:20:d4:f2:
aa:c0:21:3c:ca:3c:89:db:a3:5e:0f:3a:0c:fe:91:
e6:1b:5b:64:f1:90:f3:12:4f:ac:23:47:ad:b5:a9:
4b:e7:e2:a8:08:5f:86:7f:26:2d:59:ad:ba:14:d0:
41:b4:f1:8d:a9:d0:04:f5:93:59:ee:ba:2b:21:d9:
4c:fd:69:b7:79:ae:e4:41:2d:14:a0:82:e1:12:58:
7c:aa:78:01:53:05:5c:84:91:18:a3:8b:e4:ea:4c:
39:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:51:59:85:1C:14:9B:90:33:29:41:D1:4C:AF:0A:03:91:11:5B:B7
X509v3 Authority Key Identifier:
keyid:21:3E:1D:50:D5:22:88:BE:E8:0E:EA:43:55:77:01:87:12:40:9B:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IT4dUNUiiL7oDupDVXcBhxJAm74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/JVFZhRwUm5AzKUHRTK8KA5ERW7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.222.255.0/24
185.130.90.0/24
185.195.252.0/24
193.22.12.0/24
Signature Algorithm: sha256WithRSAEncryption
26:50:61:89:3e:04:e8:32:e7:51:9c:84:81:c5:2b:dd:3b:5c:
dc:26:44:42:ff:19:5b:55:d2:83:27:f1:5a:5d:2d:ee:5a:7a:
eb:17:38:8a:51:ee:1b:39:a9:e6:11:4e:bd:b7:8a:a1:cf:ef:
d2:98:07:60:f6:c0:55:8b:63:33:24:23:68:af:21:ea:58:93:
3a:ba:f2:f8:65:4b:26:08:b7:f5:cc:f5:9b:d0:dc:5f:3b:ab:
2c:ab:b0:4a:c9:d4:3a:d6:da:05:f8:6a:b2:f8:81:73:e3:10:
3e:b9:de:68:27:cb:65:f1:99:d5:c3:c6:96:11:be:03:0d:17:
a8:03:3a:ef:35:88:ac:24:f9:45:11:da:0b:38:7d:dc:ab:91:
57:2f:e4:cf:4a:1d:5e:2a:16:8f:04:ed:03:09:d6:a0:b8:33:
5f:7e:a0:c2:8a:ca:bd:e0:7b:74:44:c6:d4:12:0b:d6:2d:25:
42:d4:42:4f:65:db:2f:76:ad:8f:fb:63:a9:5e:69:6a:70:bb:
3d:27:70:2d:97:b5:ea:06:a7:32:8e:4d:2f:d7:34:84:ba:0b:
56:ec:58:49:93:48:17:35:b4:d4:7f:40:a7:3c:aa:5f:0a:84:
cc:40:26:aa:fb:7c:42:e5:59:93:2e:90:5b:90:f5:22:ea:8a:
28:63:9e:ec
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZ8dm0iuhtDtI9mcqZkpKkF2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxM2UxZDUwZDUyMjg4YmVlODBlZWE0MzU1NzcwMTg3MTI0
MDliYmUwHhcNMjYwNzAxMTIxNTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNTUxNTk4NTFjMTQ5YjkwMzMyOTQxZDE0Y2FmMGEwMzkxMTE1YmI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpcoSfa2nWhEC/Ga57lDSz9CbM8L
AAhuEAdBx1ImqSKnSVzx0N8FEFsJW2r6zwnAICVgJ9s9cl3166Q0KT4HGj0UDyWZ
yLGPqG4wGOkhfzLMogE+bCYMcphzbdueLvTxha3GfjnCgefpXsjn6iwMnHPkpTKu
ZrgmhTLAF3w5bJLgE470866rZgAMy4CW0U7PWbaQXLfIs63V7qYghoG3IdYg1PKq
wCE8yjyJ26NeDzoM/pHmG1tk8ZDzEk+sI0ettalL5+KoCF+GfyYtWa26FNBBtPGN
qdAE9ZNZ7rorIdlM/Wm3ea7kQS0UoILhElh8qngBUwVchJEYo4vk6kw5swIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFCVRWYUcFJuQMylB0UyvCgOREVu3MB8GA1UdIwQY
MBaAFCE+HVDVIoi+6A7qQ1V3AYcSQJu+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVQ0ZFVOVWlpTDdvRHVwRFZYY0JoeEpBbTc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8yYTFjZTktZmI0Yy00MWVlLTlmZjYt
MzE2ZWYyNjFmNGE1LzEvSlZGWmhSd1VtNUF6S1VIUlRLOEtBNUVSVzdjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy8yYTFjZTktZmI0Yy00MWVlLTlmZjYtMzE2ZWYyNjFmNGE1
LzEvSVQ0ZFVOVWlpTDdvRHVwRFZYY0JoeEpBbTc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAg97/AwQA
uYJaAwQAucP8AwQAwRYMMA0GCSqGSIb3DQEBCwUAA4IBAQAmUGGJPgToMudRnISB
xSvdO1zcJkRC/xlbVdKDJ/FaXS3uWnrrFziKUe4bOanmEU69t4qhz+/SmAdg9sBV
i2MzJCNoryHqWJM6uvL4ZUsmCLf1zPWb0NxfO6ssq7BKydQ61toF+Gqy+IFz4xA+
ud5oJ8tl8ZnVw8aWEb4DDReoAzrvNYisJPlFEdoLOH3cq5FXL+TPSh1eKhaPBO0D
CdaguDNffqDCisq94Ht0RMbUEgvWLSVC1EJPZdsvdq2P+2OpXmlqcLs9J3Atl7Xq
Bqcyjk0v1zSEugtW7FhJk0gXNbTUf0CnPKpfCoTMQCaq+3xC5VmTLpBbkPUi6ooo
Y57s
-----END CERTIFICATE-----
Generated at Fri Jul 24 15:24:09 2026 by rpki-client