Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/juRzxVJwarhIfSklgOiQQRJcr-Q.roa
File: juRzxVJwarhIfSklgOiQQRJcr-Q.roa (raw, json)
Hash identifier: MRCpSk5iY23hustIzHxvVTRKj+fIV+g79/vD2SakhjU=
Subject key identifier: 8E:E4:73:C5:52:70:6A:B8:48:7D:29:25:80:E8:90:41:12:5C:AF:E4
Certificate issuer: /CN=de12eb9c75d359d25137b5ef4e176f5eeb6c4342
Certificate serial: 019F13CCCB956DE5FADE8BEE2EFEAC8DEB62
Authority key identifier: DE:12:EB:9C:75:D3:59:D2:51:37:B5:EF:4E:17:6F:5E:EB:6C:43:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/juRzxVJwarhIfSklgOiQQRJcr-Q.roa
Signing time: Mon 29 Jun 2026 14:33:36 +0000
ROA not before: Mon 29 Jun 2026 14:33:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197170
IP address blocks: 94.26.36.0/24 maxlen: 24
94.26.106.0/24 maxlen: 24
192.109.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:13:cc:cb:95:6d:e5:fa:de:8b:ee:2e:fe:ac:8d:eb:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de12eb9c75d359d25137b5ef4e176f5eeb6c4342
Validity
Not Before: Jun 29 14:33:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8ee473c552706ab8487d292580e89041125cafe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:8e:1b:81:19:89:ba:7c:86:ce:7a:51:22:ca:
30:2a:60:f7:98:1a:a7:6d:4c:e1:9b:e5:2f:4b:39:
cc:70:0f:d2:67:e1:11:bc:a8:b8:8a:a4:26:94:7c:
63:7a:7a:80:fd:fe:10:07:7a:f2:6a:fe:f9:b2:f5:
58:55:ea:57:e4:7d:a0:1a:b3:86:d9:0d:c0:13:51:
60:6f:81:ef:2c:a6:09:84:be:40:78:e4:79:53:cf:
a7:36:60:56:b6:1b:3d:68:a3:d7:73:d6:2d:6e:be:
ef:3a:c8:d1:aa:0e:88:d4:33:e3:5f:e4:a9:6a:b3:
00:cb:cd:3d:24:96:2d:15:a2:35:3a:25:60:31:a5:
bc:73:f0:c8:a6:75:12:7f:da:2b:14:46:a9:79:0c:
70:c3:76:3d:c6:86:3c:d0:bb:f6:e7:8b:70:b0:21:
5a:1a:07:3c:d1:b7:e7:82:14:79:a2:6b:4e:6e:e0:
2b:53:cc:36:0f:c5:ac:30:6e:26:9e:fe:c8:57:61:
10:f7:0d:9d:9f:5c:de:16:be:a3:fb:32:7e:22:9c:
a5:47:f1:35:c2:1e:a0:0e:27:bf:52:3a:9b:fa:11:
6e:44:fa:39:d7:3d:85:d6:7d:74:43:68:36:90:c7:
28:78:ad:70:9d:b6:56:6c:80:23:f4:b2:a1:fc:bc:
2f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:E4:73:C5:52:70:6A:B8:48:7D:29:25:80:E8:90:41:12:5C:AF:E4
X509v3 Authority Key Identifier:
keyid:DE:12:EB:9C:75:D3:59:D2:51:37:B5:EF:4E:17:6F:5E:EB:6C:43:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/juRzxVJwarhIfSklgOiQQRJcr-Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.26.36.0/24
94.26.106.0/24
192.109.200.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:95:2a:58:5a:56:0b:62:88:67:ef:b0:99:a0:8c:1f:3b:ce:
2a:78:75:dc:a7:3f:96:b2:e2:a5:f4:bc:c4:e6:8f:60:05:ba:
be:d9:7f:f4:eb:ee:e7:47:88:3b:4e:6c:4a:03:a7:28:43:6a:
9e:af:16:1e:77:97:a8:1d:1c:cd:da:e8:b8:07:e0:3f:06:fe:
bd:7a:02:2d:a4:0a:a5:43:9e:46:b0:08:99:bc:51:12:a1:c9:
0d:d5:ba:17:a5:8f:36:00:24:a6:3a:01:d8:9f:2c:6d:13:08:
ac:96:6e:58:67:81:31:b0:d9:23:b6:e9:c8:5e:04:24:75:b5:
09:79:7f:8a:99:4d:e7:ea:85:c8:19:d5:46:16:07:15:e3:ed:
f8:23:a6:75:b5:01:ad:8c:ae:14:b9:5b:9f:0c:b6:16:a4:b7:
c4:c3:a1:50:9e:87:2d:3b:a1:30:17:2f:0f:ee:d8:e9:c7:f9:
28:08:81:e4:8f:95:6a:d4:90:02:76:4e:35:d3:52:c3:5c:68:
8b:f8:59:14:c0:de:c0:e7:75:17:24:46:d5:5e:b8:9a:17:73:
17:25:85:fa:3e:06:32:40:95:77:d1:5e:d9:cd:21:07:3f:22:
ae:c7:56:d1:33:7c:32:22:ba:12:11:f0:2e:d5:1c:d6:05:fe:
4e:b9:05:c1
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZ8TzMuVbeX63ovuLv6sjetiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlMTJlYjljNzVkMzU5ZDI1MTM3YjVlZjRlMTc2ZjVlZWI2
YzQzNDIwHhcNMjYwNjI5MTQzMzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZWU0NzNjNTUyNzA2YWI4NDg3ZDI5MjU4MGU4OTA0MTEyNWNhZmU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApo4bgRmJunyGznpRIsowKmD3mBqn
bUzhm+UvSznMcA/SZ+ERvKi4iqQmlHxjenqA/f4QB3ryav75svVYVepX5H2gGrOG
2Q3AE1Fgb4HvLKYJhL5AeOR5U8+nNmBWths9aKPXc9Ytbr7vOsjRqg6I1DPjX+Sp
arMAy809JJYtFaI1OiVgMaW8c/DIpnUSf9orFEapeQxww3Y9xoY80Lv254twsCFa
Ggc80bfnghR5omtObuArU8w2D8WsMG4mnv7IV2EQ9w2dn1zeFr6j+zJ+IpylR/E1
wh6gDie/Ujqb+hFuRPo51z2F1n10Q2g2kMcoeK1wnbZWbIAj9LKh/LwvTwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFI7kc8VScGq4SH0pJYDokEESXK/kMB8GA1UdIwQY
MBaAFN4S65x101nSUTe1704Xb17rbENCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2hMcm5IWFRXZEpSTjdYdlRoZHZYdXRzUTBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC8yNjlhMDQtNzdiNC00ZWU3LWIxNjQt
YzE2Nzg3MjcyMDQ5LzEvanVSenhWSndhcmhJZlNrbGdPaVFRUkpjci1RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC8yNjlhMDQtNzdiNC00ZWU3LWIxNjQtYzE2Nzg3MjcyMDQ5
LzEvM2hMcm5IWFRXZEpSTjdYdlRoZHZYdXRzUTBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAXhokAwQA
XhpqAwQAwG3IMA0GCSqGSIb3DQEBCwUAA4IBAQBulSpYWlYLYohn77CZoIwfO84q
eHXcpz+WsuKl9LzE5o9gBbq+2X/06+7nR4g7TmxKA6coQ2qerxYed5eoHRzN2ui4
B+A/Bv69egItpAqlQ55GsAiZvFESockN1boXpY82ACSmOgHYnyxtEwislm5YZ4Ex
sNkjtunIXgQkdbUJeX+KmU3n6oXIGdVGFgcV4+34I6Z1tQGtjK4UuVufDLYWpLfE
w6FQnoctO6EwFy8P7tjpx/koCIHkj5Vq1JACdk4101LDXGiL+FkUwN7A53UXJEbV
XriaF3MXJYX6PgYyQJV30V7ZzSEHPyKux1bRM3wyIroSEfAu1RzWBf5OuQXB
-----END CERTIFICATE-----
Generated at Fri Jul 24 06:24:57 2026 by rpki-client