Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/JKntl0lE4Llv5JSHqq0ebMhz1gw.roa
File: JKntl0lE4Llv5JSHqq0ebMhz1gw.roa (raw, json)
Hash identifier: z+ETdiwBgtgBMRmUJl0EwbepoBHBWs+SUhOGYSF0hsU=
Subject key identifier: 24:A9:ED:97:49:44:E0:B9:6F:E4:94:87:AA:AD:1E:6C:C8:73:D6:0C
Certificate issuer: /CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Certificate serial: 01A1975AB1DFE933965E97CB4AB6E5F93EFD
Authority key identifier: 97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/JKntl0lE4Llv5JSHqq0ebMhz1gw.roa
Signing time: Sun 01 Nov 2026 13:44:25 +0000
ROA not before: Sun 01 Nov 2026 13:44:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 82.206.2.0/23 maxlen: 24
82.206.4.0/22 maxlen: 24
82.206.8.0/23 maxlen: 24
82.206.14.0/23 maxlen: 24
82.206.16.0/22 maxlen: 24
82.206.72.0/21 maxlen: 21
82.206.76.0/22 maxlen: 24
82.206.80.0/21 maxlen: 21
82.206.88.0/21 maxlen: 24
82.206.96.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft
rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:97:5a:b1:df:e9:33:96:5e:97:cb:4a:b6:e5:f9:3e:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Validity
Not Before: Nov 1 13:44:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=24a9ed974944e0b96fe49487aaad1e6cc873d60c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:6b:9d:49:82:d8:5c:e4:6d:fa:5b:98:49:14:
cd:6a:14:fc:89:bf:37:67:1e:7f:ad:6f:42:64:25:
2a:f0:02:d4:4a:52:ff:83:78:1f:1c:e7:33:06:c7:
b3:c9:e7:f2:bf:05:7c:b1:07:b5:6b:9f:45:7e:f6:
a3:09:d2:86:b3:de:d9:d0:ca:53:bd:d2:ed:dc:79:
db:b8:cd:5a:d3:7d:dd:4a:65:39:29:09:ed:c4:82:
4b:ac:51:48:01:72:6c:93:be:14:ea:51:54:d6:da:
3b:4f:f4:fc:b7:bb:0a:d3:e1:9b:66:2f:0c:9c:34:
1b:0e:d0:9f:18:d5:2f:b2:1f:6f:c0:08:eb:c4:00:
9e:4b:12:f8:ab:66:c5:e9:78:6f:6d:9e:d7:50:a9:
54:94:2e:b6:01:61:1f:2e:35:dd:37:f9:38:7d:90:
fc:a7:08:81:6c:d7:f0:5e:96:de:dc:dc:0d:4a:b5:
3b:c9:d6:f0:d8:e8:9e:bc:7f:45:48:2a:4c:ea:5e:
d9:c4:bc:3f:65:19:c9:e2:67:ac:bc:18:6b:be:12:
3e:2f:66:2f:6f:c9:10:60:e4:60:01:0a:44:80:74:
47:31:fa:42:4e:09:b3:fd:3c:67:6a:f8:1d:96:09:
e4:d1:c7:f1:94:91:d3:a7:27:02:39:d9:5e:82:8e:
a1:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:A9:ED:97:49:44:E0:B9:6F:E4:94:87:AA:AD:1E:6C:C8:73:D6:0C
X509v3 Authority Key Identifier:
keyid:97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/JKntl0lE4Llv5JSHqq0ebMhz1gw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.206.2.0-82.206.9.255
82.206.14.0-82.206.19.255
82.206.72.0-82.206.127.255
Signature Algorithm: sha256WithRSAEncryption
41:1c:a8:47:96:d5:87:a5:79:16:e6:08:42:2b:3b:36:ea:05:
c0:bc:42:8c:30:06:22:7d:7b:1f:35:ef:b3:76:c7:f6:7d:34:
29:40:d4:7b:fe:48:99:fd:58:c6:d5:c8:16:b0:88:8e:0a:d0:
e1:5e:d4:41:14:e5:bc:de:7f:c5:3b:e7:55:73:1d:3c:4d:6c:
ec:78:04:7d:e9:ec:37:6d:0f:5f:be:12:4e:be:eb:8d:fa:ea:
35:4d:b1:d1:74:82:5a:f9:f3:41:bf:a4:c0:a7:74:3b:9e:36:
f1:ce:06:08:6c:bc:80:6b:c6:7e:77:e6:d9:a0:26:ae:7b:df:
5b:b5:81:6e:64:18:38:74:c5:5e:a1:ca:7a:a0:17:1c:cd:de:
0e:ef:10:0d:12:41:11:e9:dd:6d:54:31:b9:7f:95:09:cc:de:
5a:70:d7:a6:73:8e:e6:be:c3:af:2d:03:b0:16:7f:c8:c2:29:
34:b6:20:8c:08:a5:a4:a0:35:51:23:e4:00:90:17:42:f9:d2:
48:06:fc:94:c8:06:80:6d:c1:59:f1:98:94:e5:ea:d0:21:c7:
1a:d0:4d:47:01:88:22:0f:dd:0c:1a:4e:23:22:8a:76:19:e8:
61:bd:2b:73:bf:8d:dd:df:61:99:6b:bc:b0:11:e3:e9:49:93:
4e:bb:42:42
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAaGXWrHf6TOWXpfLSrbl+T79MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3OTkxNDBiNDJkYjZjYjZiZjhjNmRkNDEzNzQ3ZmNmNGE2
ZmQ5YjUwHhcNMjYxMTAxMTM0NDI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNGE5ZWQ5NzQ5NDRlMGI5NmZlNDk0ODdhYWFkMWU2Y2M4NzNkNjBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomudSYLYXORt+luYSRTNahT8ib83
Zx5/rW9CZCUq8ALUSlL/g3gfHOczBsezyefyvwV8sQe1a59FfvajCdKGs97Z0MpT
vdLt3HnbuM1a033dSmU5KQntxIJLrFFIAXJsk74U6lFU1to7T/T8t7sK0+GbZi8M
nDQbDtCfGNUvsh9vwAjrxACeSxL4q2bF6XhvbZ7XUKlUlC62AWEfLjXdN/k4fZD8
pwiBbNfwXpbe3NwNSrU7ydbw2OievH9FSCpM6l7ZxLw/ZRnJ4mesvBhrvhI+L2Yv
b8kQYORgAQpEgHRHMfpCTgmz/Txnavgdlgnk0cfxlJHTpycCOdlego6hswIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFCSp7ZdJROC5b+SUh6qtHmzIc9YMMB8GA1UdIwQY
MBaAFJeZFAtC22y2v4xt1BN0f89Kb9m1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDVrVUMwTGJiTGFfakczVUUzUl96MHB2MmJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS80ZWVmMDMtOTFmZS00NDVhLWE3Y2Qt
NTk1OTE5YmUwZjUyLzEvSktudGwwbEU0TGx2NUpTSHFxMGViTWh6MWd3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS80ZWVmMDMtOTFmZS00NDVhLWE3Y2QtNTk1OTE5YmUwZjUy
LzEvbDVrVUMwTGJiTGFfakczVUUzUl96MHB2MmJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqMAwDBAFSzgID
BAFSzggwDAMEAVLODgMEAlLOEDAMAwQDUs5IAwQHUs4AMA0GCSqGSIb3DQEBCwUA
A4IBAQBBHKhHltWHpXkW5ghCKzs26gXAvEKMMAYifXsfNe+zdsf2fTQpQNR7/kiZ
/VjG1cgWsIiOCtDhXtRBFOW83n/FO+dVcx08TWzseAR96ew3bQ9fvhJOvuuN+uo1
TbHRdIJa+fNBv6TAp3Q7njbxzgYIbLyAa8Z+d+bZoCaue99btYFuZBg4dMVeocp6
oBcczd4O7xANEkER6d1tVDG5f5UJzN5acNemc47mvsOvLQOwFn/Iwik0tiCMCKWk
oDVRI+QAkBdC+dJIBvyUyAaAbcFZ8ZiU5erQIcca0E1HAYgiD90MGk4jIop2Gehh
vStzv43d32GZa7ywEePpSZNOu0JC
-----END CERTIFICATE-----
Generated at Sun Nov 15 12:41:24 2026 by rpki-client