Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/087a56-0c63-4738-99fc-e3c55bb7728e/1/JsCad4FCyfVUBF2WY6yR_DCWBVw.roa
File: JsCad4FCyfVUBF2WY6yR_DCWBVw.roa (raw, json)
Hash identifier: pEHKwoBlBoQLwZMsVB7ZRqvnfjBWmWm2YEzrTvzWI9I=
Subject key identifier: 26:C0:9A:77:81:42:C9:F5:54:04:5D:96:63:AC:91:FC:30:96:05:5C
Certificate issuer: /CN=eb27fd6a984be8b191364bec8ec538dda4d107c0
Certificate serial: 019F2368676DFD982E637D84E697014E7630
Authority key identifier: EB:27:FD:6A:98:4B:E8:B1:91:36:4B:EC:8E:C5:38:DD:A4:D1:07:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6yf9aphL6LGRNkvsjsU43aTRB8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/087a56-0c63-4738-99fc-e3c55bb7728e/1/JsCad4FCyfVUBF2WY6yR_DCWBVw.roa
Signing time: Thu 02 Jul 2026 15:17:52 +0000
ROA not before: Thu 02 Jul 2026 15:17:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211914
IP address blocks: 94.158.208.0/21 maxlen: 21
94.158.209.0/24 maxlen: 24
94.158.210.0/24 maxlen: 24
94.158.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/087a56-0c63-4738-99fc-e3c55bb7728e/1/6yf9aphL6LGRNkvsjsU43aTRB8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/087a56-0c63-4738-99fc-e3c55bb7728e/1/6yf9aphL6LGRNkvsjsU43aTRB8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/6yf9aphL6LGRNkvsjsU43aTRB8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:67:6d:fd:98:2e:63:7d:84:e6:97:01:4e:76:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb27fd6a984be8b191364bec8ec538dda4d107c0
Validity
Not Before: Jul 2 15:17:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=26c09a778142c9f554045d9663ac91fc3096055c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:45:96:d6:fa:28:5c:d4:11:01:11:e3:b3:d3:
81:ad:f9:54:56:5f:de:cd:3e:90:02:c0:93:5b:c5:
50:c2:08:6b:23:79:51:a6:29:6d:b7:92:b3:14:aa:
f3:0d:cd:a4:b6:73:a9:1f:e4:61:1f:65:89:20:c6:
84:db:d5:89:16:7f:e0:ff:42:1f:f8:1f:61:41:be:
a1:6e:36:56:d8:ba:79:6c:7b:d9:44:18:40:82:e1:
16:f6:48:ec:86:8f:68:2c:03:a0:e9:f7:44:3e:83:
47:9d:62:22:ba:ab:b7:18:f3:aa:ad:82:80:89:cc:
c6:54:86:47:21:fb:14:f8:dd:ca:ea:ea:8a:55:ea:
7d:60:f6:e3:1b:be:a3:ff:4b:36:db:97:a7:85:e2:
1a:1d:b2:95:0d:68:9c:ff:51:d1:ce:b7:f2:49:74:
c8:b4:86:93:e9:38:d0:3e:e3:3a:b6:2e:8e:e4:5f:
72:4a:49:53:46:11:9d:97:f4:d4:3e:ea:11:14:9f:
a3:b4:1a:28:a8:be:2b:62:a9:4b:e1:50:1e:40:1f:
fb:70:ca:0a:e3:ed:0e:5d:be:9a:a9:79:11:02:fa:
a2:51:0b:29:50:0a:7e:0b:c4:4c:b8:e2:83:52:0e:
54:e4:ec:07:ae:b0:2a:00:dd:b0:18:8e:ea:ab:9f:
b5:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:C0:9A:77:81:42:C9:F5:54:04:5D:96:63:AC:91:FC:30:96:05:5C
X509v3 Authority Key Identifier:
keyid:EB:27:FD:6A:98:4B:E8:B1:91:36:4B:EC:8E:C5:38:DD:A4:D1:07:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6yf9aphL6LGRNkvsjsU43aTRB8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/087a56-0c63-4738-99fc-e3c55bb7728e/1/JsCad4FCyfVUBF2WY6yR_DCWBVw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/087a56-0c63-4738-99fc-e3c55bb7728e/1/6yf9aphL6LGRNkvsjsU43aTRB8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.158.208.0/21
Signature Algorithm: sha256WithRSAEncryption
1d:e0:15:78:53:98:eb:31:1b:75:6e:f8:96:c3:72:74:8a:78:
27:2e:b0:fd:96:4c:50:de:99:79:54:d7:f4:d2:de:c3:af:8f:
0a:52:e8:6d:cc:4b:fb:13:73:99:17:cd:3b:e0:82:76:c0:33:
7f:f7:6a:b3:41:be:82:95:46:7f:61:b4:a5:fa:c7:85:72:0b:
ff:f3:3f:05:e1:ab:82:74:2e:25:35:45:2a:f8:5f:16:dc:56:
e0:50:67:a4:d5:0b:13:ee:70:fb:c0:09:46:35:38:18:c5:af:
81:82:b2:65:8b:f6:73:b4:00:e9:9e:55:31:31:88:b6:13:66:
15:e0:39:41:9f:ba:0d:32:ca:c3:f7:ef:5d:d9:7a:18:bb:d2:
73:47:e5:f0:f7:00:ad:1f:6f:3a:40:ab:69:10:ef:d4:82:a5:
92:22:86:fd:d3:f1:a2:10:5e:e1:b4:b9:17:26:95:8a:03:8f:
03:ee:8f:8b:20:cf:98:72:94:32:b0:ad:fc:18:62:03:20:ce:
9e:f5:a7:71:3c:63:2a:fb:40:7a:04:ee:d2:7d:31:87:86:b5:
d8:0f:44:91:c6:54:2e:49:89:7d:64:82:fa:cb:5d:2c:e6:15:
80:af:36:95:a5:4f:82:15:9b:49:63:61:bb:8e:f8:f1:eb:87:
a4:59:a5:4f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaGdt/ZguY32E5pcBTnYwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViMjdmZDZhOTg0YmU4YjE5MTM2NGJlYzhlYzUzOGRkYTRk
MTA3YzAwHhcNMjYwNzAyMTUxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNmMwOWE3NzgxNDJjOWY1NTQwNDVkOTY2M2FjOTFmYzMwOTYwNTVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkWW1vooXNQRARHjs9OBrflUVl/e
zT6QAsCTW8VQwghrI3lRpiltt5KzFKrzDc2ktnOpH+RhH2WJIMaE29WJFn/g/0If
+B9hQb6hbjZW2Lp5bHvZRBhAguEW9kjsho9oLAOg6fdEPoNHnWIiuqu3GPOqrYKA
iczGVIZHIfsU+N3K6uqKVep9YPbjG76j/0s225enheIaHbKVDWic/1HRzrfySXTI
tIaT6TjQPuM6ti6O5F9ySklTRhGdl/TUPuoRFJ+jtBooqL4rYqlL4VAeQB/7cMoK
4+0OXb6aqXkRAvqiUQspUAp+C8RMuOKDUg5U5OwHrrAqAN2wGI7qq5+1hwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCbAmneBQsn1VARdlmOskfwwlgVcMB8GA1UdIwQY
MBaAFOsn/WqYS+ixkTZL7I7FON2k0QfAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnlmOWFwaEw2TEdSTmt2c2pzVTQzYVRSQjhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8wODdhNTYtMGM2My00NzM4LTk5ZmMt
ZTNjNTViYjc3MjhlLzEvSnNDYWQ0RkN5ZlZVQkYyV1k2eVJfRENXQlZ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC8wODdhNTYtMGM2My00NzM4LTk5ZmMtZTNjNTViYjc3Mjhl
LzEvNnlmOWFwaEw2TEdSTmt2c2pzVTQzYVRSQjhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDXp7QMA0G
CSqGSIb3DQEBCwUAA4IBAQAd4BV4U5jrMRt1bviWw3J0ingnLrD9lkxQ3pl5VNf0
0t7Dr48KUuhtzEv7E3OZF8074IJ2wDN/92qzQb6ClUZ/YbSl+seFcgv/8z8F4auC
dC4lNUUq+F8W3FbgUGek1QsT7nD7wAlGNTgYxa+BgrJli/ZztADpnlUxMYi2E2YV
4DlBn7oNMsrD9+9d2XoYu9JzR+Xw9wCtH286QKtpEO/UgqWSIob90/GiEF7htLkX
JpWKA48D7o+LIM+YcpQysK38GGIDIM6e9adxPGMq+0B6BO7SfTGHhrXYD0SRxlQu
SYl9ZIL6y10s5hWArzaVpU+CFZtJY2G7jvjx64ekWaVP
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:36:55 2026 by rpki-client