Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/32e925-6fe6-4b26-a498-75304f9f5c24/1/jvM4PnIsoK-M1fMYfByGiC5thx0.roa
File: jvM4PnIsoK-M1fMYfByGiC5thx0.roa (raw, json)
Hash identifier: 8SuPOUTpaRe3fwMYlvBgvK2dTEPcw/0mWRCq/h+2VGY=
Subject key identifier: 8E:F3:38:3E:72:2C:A0:AF:8C:D5:F3:18:7C:1C:86:88:2E:6D:87:1D
Certificate issuer: /CN=d49d708388ff0328689311da19da7fef7f56d8b6
Certificate serial: 019F23684441824B2ECBF15F7C45D0843C4C
Authority key identifier: D4:9D:70:83:88:FF:03:28:68:93:11:DA:19:DA:7F:EF:7F:56:D8:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1J1wg4j_AyhokxHaGdp_739W2LY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/32e925-6fe6-4b26-a498-75304f9f5c24/1/jvM4PnIsoK-M1fMYfByGiC5thx0.roa
Signing time: Thu 02 Jul 2026 15:17:43 +0000
ROA not before: Thu 02 Jul 2026 15:17:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204453
IP address blocks: 91.199.54.0/24 maxlen: 24
91.214.126.0/24 maxlen: 24
193.104.170.0/24 maxlen: 24
194.145.202.0/24 maxlen: 24
194.242.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/32e925-6fe6-4b26-a498-75304f9f5c24/1/1J1wg4j_AyhokxHaGdp_739W2LY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/32e925-6fe6-4b26-a498-75304f9f5c24/1/1J1wg4j_AyhokxHaGdp_739W2LY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1J1wg4j_AyhokxHaGdp_739W2LY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:44:41:82:4b:2e:cb:f1:5f:7c:45:d0:84:3c:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d49d708388ff0328689311da19da7fef7f56d8b6
Validity
Not Before: Jul 2 15:17:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8ef3383e722ca0af8cd5f3187c1c86882e6d871d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:f7:fe:01:5c:b9:41:b7:ef:dc:4b:d0:d1:0e:
d8:fa:0f:37:48:76:bb:d2:f0:21:0b:98:86:a2:db:
6c:8d:2f:cf:fc:7d:b7:05:58:d8:23:0f:ee:32:c3:
e2:c3:ea:37:b0:29:00:c5:d5:25:fb:28:8f:d3:b4:
4c:7e:3b:46:b4:45:22:fb:e1:99:27:cb:8e:27:23:
d3:b6:1e:a2:6e:fc:ea:e3:b1:12:48:65:49:42:b9:
b8:2d:6f:64:52:5c:a3:67:7a:6a:75:86:a1:dc:44:
64:57:3b:84:1e:8e:cf:07:f2:cf:28:6f:8b:77:98:
5f:5a:88:b7:08:94:ab:84:d4:da:36:65:53:c3:3d:
03:c9:d4:a3:aa:5b:ae:ea:2d:c0:3d:25:1a:71:c2:
da:45:e4:44:70:ad:a0:47:65:6a:93:9f:8c:0f:ad:
bb:d2:7f:d4:a5:b1:ee:db:13:89:83:cc:3d:15:8e:
96:c2:f1:27:ce:c3:f7:44:b4:75:cd:12:4c:b4:b4:
36:7e:49:14:17:8c:6c:2c:8c:96:47:ce:f1:7a:5d:
38:64:b0:5e:76:21:2a:32:fa:55:b3:0d:a6:70:a5:
b9:70:c7:5c:29:4a:54:96:72:c0:ac:df:db:b1:59:
7d:68:03:5d:89:a9:c7:78:e4:4c:34:f6:2c:e2:ff:
df:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:F3:38:3E:72:2C:A0:AF:8C:D5:F3:18:7C:1C:86:88:2E:6D:87:1D
X509v3 Authority Key Identifier:
keyid:D4:9D:70:83:88:FF:03:28:68:93:11:DA:19:DA:7F:EF:7F:56:D8:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1J1wg4j_AyhokxHaGdp_739W2LY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/32e925-6fe6-4b26-a498-75304f9f5c24/1/jvM4PnIsoK-M1fMYfByGiC5thx0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/32e925-6fe6-4b26-a498-75304f9f5c24/1/1J1wg4j_AyhokxHaGdp_739W2LY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.54.0/24
91.214.126.0/24
193.104.170.0/24
194.145.202.0/24
194.242.59.0/24
Signature Algorithm: sha256WithRSAEncryption
83:ce:d8:ef:34:64:e7:2c:d5:a7:f2:6f:a0:ac:d1:ef:8f:59:
a6:75:ab:12:c5:c1:d3:e3:77:f0:2c:42:ac:0b:74:2f:64:00:
1d:da:ce:e7:5d:9b:ad:f3:a6:9b:ad:23:4c:09:4f:3a:c2:50:
f8:5a:9e:08:47:7a:b8:fb:69:15:9f:5a:2e:c4:02:ac:c0:a8:
30:e5:1f:19:c4:2c:5a:e6:76:c1:06:ea:4e:db:29:bc:7e:17:
26:c4:c5:37:ea:1f:56:7e:d8:47:02:3f:cf:83:00:cb:19:38:
e6:fb:d5:e2:82:d9:e9:a6:81:91:e0:f7:d2:8e:27:3e:8f:26:
21:de:c2:be:fd:26:07:80:a3:9d:4f:28:c1:61:c7:b2:5e:f9:
e4:ec:1f:fe:1d:68:e3:e2:c7:7f:39:50:84:4f:bd:c6:5f:09:
8b:1a:5f:32:36:d5:3e:f9:cd:c4:a0:a4:5f:c1:0b:fd:e8:25:
cf:69:2d:16:45:13:8a:a9:37:db:22:73:b4:8f:f3:42:80:f5:
ee:b8:21:b1:97:f5:d1:d6:24:3c:6c:dc:19:7b:ad:05:cd:65:
74:f7:fb:5e:d8:bc:60:2a:04:15:07:1a:45:81:93:bd:9f:33:
c9:b2:8b:dc:fb:55:0d:97:51:10:98:4c:c9:d4:f3:61:1d:e3:
f3:58:28:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:30:49 2026 by rpki-client