Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/jCz481zfmQ_DeWoLmOeVds2jCtE.roa
File: jCz481zfmQ_DeWoLmOeVds2jCtE.roa (raw, json)
Hash identifier: G9WptQWbGC7cI9LhoyR1jJFec1Zkxapn6cgdLqgqmow=
Subject key identifier: 8C:2C:F8:F3:5C:DF:99:0F:C3:79:6A:0B:98:E7:95:76:CD:A3:0A:D1
Certificate issuer: /CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Certificate serial: 019DD83F7003FDBEBEF5969B356470447281
Authority key identifier: 12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/jCz481zfmQ_DeWoLmOeVds2jCtE.roa
Signing time: Wed 29 Apr 2026 07:58:49 +0000
ROA not before: Wed 29 Apr 2026 07:58:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41457
IP address blocks: 89.36.33.0/24 maxlen: 24
192.40.69.0/24 maxlen: 24
194.46.60.0/24 maxlen: 24
2a0c:2505:1000::/48 maxlen: 48
2a14:6780::/32 maxlen: 32
2a14:6780:2::/48 maxlen: 48
2a14:6780:3::/48 maxlen: 48
2a14:6780:4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft
rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d8:3f:70:03:fd:be:be:f5:96:9b:35:64:70:44:72:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Validity
Not Before: Apr 29 07:58:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8c2cf8f35cdf990fc3796a0b98e79576cda30ad1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e4:8b:99:d7:3e:d0:b7:c3:69:cb:b3:af:ca:
15:bd:dd:0f:e1:69:66:0e:06:4a:d4:cd:26:c3:71:
cb:10:56:42:6d:c2:43:04:73:da:80:81:a3:38:ec:
30:a3:32:92:1e:70:b9:e1:c1:83:2a:d4:01:73:3f:
f7:82:e5:03:07:8c:7b:09:ea:30:ae:fa:ee:75:c8:
4e:76:d5:b3:cb:ba:97:c9:e7:d1:01:cf:ca:b1:fa:
ae:79:c0:8d:f0:2d:89:40:91:da:c9:08:17:42:3a:
39:76:f7:b0:ad:7c:bd:f7:ba:ec:4d:ef:d6:eb:9c:
8d:8c:63:bf:d4:a5:c2:49:9c:02:af:6f:9d:df:61:
b8:a0:21:24:4e:f1:62:9e:44:30:b3:3b:59:92:b3:
f8:85:03:f7:ce:d9:5c:40:c7:9b:c0:6c:f4:c0:48:
2a:65:96:77:ca:57:af:2d:b4:45:d4:74:c0:78:a2:
ea:7c:27:6f:00:b2:86:a8:3c:7d:64:66:64:b5:3b:
e4:9f:5b:48:87:85:54:a1:a0:f6:c6:56:2c:68:7e:
49:15:dd:b7:9c:1e:47:93:8d:36:d6:fe:65:c6:ff:
89:fa:50:7d:af:1d:09:8e:93:07:24:0a:8e:c2:7c:
50:8f:20:e2:1b:0a:f7:d3:be:3b:ba:bd:ff:78:d5:
0e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:2C:F8:F3:5C:DF:99:0F:C3:79:6A:0B:98:E7:95:76:CD:A3:0A:D1
X509v3 Authority Key Identifier:
keyid:12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/jCz481zfmQ_DeWoLmOeVds2jCtE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.36.33.0/24
192.40.69.0/24
194.46.60.0/24
IPv6:
2a0c:2505:1000::/48
2a14:6780::/32
Signature Algorithm: sha256WithRSAEncryption
86:17:2d:3b:e0:5a:87:32:83:7d:e9:c8:08:31:88:8a:23:71:
ce:23:97:19:f8:90:50:1f:e8:b1:a7:37:b7:d5:bc:62:26:a3:
9a:bf:ac:2c:fe:70:15:14:9a:17:c2:fb:68:6b:7b:af:89:64:
ef:04:a2:f8:1e:4b:43:08:83:d4:df:63:12:e8:79:a1:a5:5a:
37:9d:55:88:9e:60:af:7c:c4:30:c9:f2:6f:c1:d8:fa:18:5c:
17:1a:c7:93:e2:e8:e2:7c:63:da:ba:99:7b:f2:c7:86:b9:c6:
1b:a2:c1:1d:cb:10:10:b0:e3:30:06:37:f2:7b:a1:2a:3f:f6:
4a:2e:3b:ee:9f:f5:af:61:42:e2:19:47:55:8b:a1:95:d4:96:
74:40:b0:11:d0:9a:37:3e:c8:12:65:df:31:4b:d3:d7:24:b4:
89:ae:5f:2a:4a:d0:88:e0:fe:6f:d6:b3:6e:0e:62:88:b8:09:
78:d1:05:90:57:f8:54:19:39:c0:ef:91:83:09:ba:9f:4b:2d:
ab:4b:9e:2b:76:4a:e9:b5:f8:6c:ad:e7:6d:3f:d2:7d:90:5d:
70:a6:5c:15:64:12:15:1c:63:a8:2c:ae:65:7f:31:d9:d4:53:
f7:2c:5e:1c:0d:87:c5:c0:54:d4:29:0f:79:eb:e8:56:42:d5:
94:d8:47:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:31:58 2026 by rpki-client