Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/034971-b4da-4ba4-8d6e-d3c8a48f7a32/1/JFTKbrvSx8hQYYmhuRWLC11Qx6o.roa
File: JFTKbrvSx8hQYYmhuRWLC11Qx6o.roa (raw, json)
Hash identifier: inpmEMVjUYq75BC2Yk5/Bo+3xgJpxNf8ZrqO7+7gONE=
Subject key identifier: 24:54:CA:6E:BB:D2:C7:C8:50:61:89:A1:B9:15:8B:0B:5D:50:C7:AA
Certificate issuer: /CN=183ebf07f9e8a6a309dfe6c8a2f63520f2a1afbb
Certificate serial: 019F23690177759D143D9D9294E453975551
Authority key identifier: 18:3E:BF:07:F9:E8:A6:A3:09:DF:E6:C8:A2:F6:35:20:F2:A1:AF:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GD6_B_nopqMJ3-bIovY1IPKhr7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/034971-b4da-4ba4-8d6e-d3c8a48f7a32/1/JFTKbrvSx8hQYYmhuRWLC11Qx6o.roa
Signing time: Thu 02 Jul 2026 15:18:31 +0000
ROA not before: Thu 02 Jul 2026 15:18:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42510
IP address blocks: 176.103.64.0/21 maxlen: 21
176.103.64.0/22 maxlen: 22
176.103.64.0/23 maxlen: 23
176.103.66.0/23 maxlen: 23
176.103.68.0/22 maxlen: 22
176.103.68.0/23 maxlen: 23
176.103.70.0/23 maxlen: 23
193.200.68.0/23 maxlen: 23
193.200.68.0/24 maxlen: 24
193.200.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/034971-b4da-4ba4-8d6e-d3c8a48f7a32/1/GD6_B_nopqMJ3-bIovY1IPKhr7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/034971-b4da-4ba4-8d6e-d3c8a48f7a32/1/GD6_B_nopqMJ3-bIovY1IPKhr7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/GD6_B_nopqMJ3-bIovY1IPKhr7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:01:77:75:9d:14:3d:9d:92:94:e4:53:97:55:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=183ebf07f9e8a6a309dfe6c8a2f63520f2a1afbb
Validity
Not Before: Jul 2 15:18:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2454ca6ebbd2c7c8506189a1b9158b0b5d50c7aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:06:28:64:27:90:e9:44:9b:80:e6:f9:0a:49:
f7:3a:d1:42:a1:03:dd:74:c3:b3:4b:05:0e:54:e9:
b3:1b:81:7a:7d:cd:d4:a7:be:fc:54:5a:bf:b2:67:
d7:f8:0e:68:48:84:1b:62:cf:8d:ad:78:89:24:a3:
93:cd:31:1a:c8:c3:9c:2f:eb:ed:0d:7d:9c:db:1f:
b9:d6:eb:73:b1:ec:52:6a:06:1a:1b:fa:26:31:9c:
3f:b3:ac:a7:3d:de:c6:e5:67:fd:b0:86:45:6f:9c:
71:47:38:22:34:7a:45:2b:22:22:d0:7f:c4:b8:b8:
0e:6e:80:82:94:6b:73:5a:a9:95:39:9f:c3:27:95:
e8:ae:cf:c4:00:3b:26:b4:52:5e:ec:32:83:5e:1d:
b3:3b:74:a6:12:72:cf:57:14:f5:9c:59:3d:95:9f:
95:c2:d4:fd:c6:fa:21:b5:12:39:ba:a1:94:7a:d7:
c7:c1:70:e2:8b:ec:e6:3e:a8:4b:dc:3b:07:ff:fb:
90:29:77:b9:de:97:2a:d2:e9:50:a1:70:81:c3:d1:
7c:5e:44:ca:6b:73:72:91:7b:4e:e2:e4:5e:23:3d:
1e:da:94:44:1f:5d:0e:36:cb:17:3a:6e:cf:98:5b:
08:4d:1f:de:59:79:97:e6:65:5f:e8:22:02:96:5b:
96:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:54:CA:6E:BB:D2:C7:C8:50:61:89:A1:B9:15:8B:0B:5D:50:C7:AA
X509v3 Authority Key Identifier:
keyid:18:3E:BF:07:F9:E8:A6:A3:09:DF:E6:C8:A2:F6:35:20:F2:A1:AF:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GD6_B_nopqMJ3-bIovY1IPKhr7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/034971-b4da-4ba4-8d6e-d3c8a48f7a32/1/JFTKbrvSx8hQYYmhuRWLC11Qx6o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/034971-b4da-4ba4-8d6e-d3c8a48f7a32/1/GD6_B_nopqMJ3-bIovY1IPKhr7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.103.64.0/21
193.200.68.0/23
Signature Algorithm: sha256WithRSAEncryption
39:66:59:f0:7c:57:52:88:41:b6:1b:68:8c:fb:5b:76:cf:eb:
eb:69:64:0f:a6:b8:b9:ec:81:07:86:28:5f:d9:84:9c:6c:d1:
9c:ef:de:cc:48:d0:91:64:35:df:c1:6e:ec:63:1e:36:3f:94:
c7:a1:e4:c0:a7:6e:01:28:09:92:e5:a4:88:ef:03:a8:5a:7e:
81:1a:14:30:c1:c1:e8:dc:99:22:b8:46:f6:b9:fe:56:d3:a8:
77:de:e8:4a:70:60:e7:2b:b7:5f:46:83:36:75:0e:66:a4:bf:
29:6e:f3:ed:a3:3e:8f:53:e0:90:40:64:de:80:00:9f:8d:a8:
4a:b3:f3:16:9c:10:e1:73:ae:43:b0:2c:7c:17:d8:91:e1:08:
2e:18:dd:71:ad:fe:d4:34:66:53:d1:ba:9a:e5:1e:9c:0b:52:
f6:f1:2a:ed:ab:c0:dc:5f:b2:47:74:4a:51:7f:38:fd:8b:5e:
e8:c5:09:3f:b7:4e:19:ef:93:19:cf:89:e1:7c:c8:75:5b:97:
40:69:a4:8d:76:5f:e5:04:59:91:33:6f:09:c7:bd:d8:3a:3d:
95:7b:96:ce:6b:29:3d:9c:be:b1:02:fe:78:7f:63:35:e3:4f:
b5:7e:8f:a9:c1:8d:db:88:39:5c:eb:38:dd:a6:38:4c:4d:c7:
3b:53:a8:38
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ8jaQF3dZ0UPZ2SlORTl1VRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4M2ViZjA3ZjllOGE2YTMwOWRmZTZjOGEyZjYzNTIwZjJh
MWFmYmIwHhcNMjYwNzAyMTUxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNDU0Y2E2ZWJiZDJjN2M4NTA2MTg5YTFiOTE1OGIwYjVkNTBjN2FhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQYoZCeQ6USbgOb5Ckn3OtFCoQPd
dMOzSwUOVOmzG4F6fc3Up778VFq/smfX+A5oSIQbYs+NrXiJJKOTzTEayMOcL+vt
DX2c2x+51utzsexSagYaG/omMZw/s6ynPd7G5Wf9sIZFb5xxRzgiNHpFKyIi0H/E
uLgOboCClGtzWqmVOZ/DJ5Xors/EADsmtFJe7DKDXh2zO3SmEnLPVxT1nFk9lZ+V
wtT9xvohtRI5uqGUetfHwXDii+zmPqhL3DsH//uQKXe53pcq0ulQoXCBw9F8XkTK
a3NykXtO4uReIz0e2pREH10ONssXOm7PmFsITR/eWXmX5mVf6CIClluWRwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFCRUym670sfIUGGJobkViwtdUMeqMB8GA1UdIwQY
MBaAFBg+vwf56KajCd/myKL2NSDyoa+7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0Q2X0Jfbm9wcU1KMy1iSW92WTFJUEtocjdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi8wMzQ5NzEtYjRkYS00YmE0LThkNmUt
ZDNjOGE0OGY3YTMyLzEvSkZUS2JydlN4OGhRWVltaHVSV0xDMTFReDZvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi8wMzQ5NzEtYjRkYS00YmE0LThkNmUtZDNjOGE0OGY3YTMy
LzEvR0Q2X0Jfbm9wcU1KMy1iSW92WTFJUEtocjdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDsGdAAwQB
wchEMA0GCSqGSIb3DQEBCwUAA4IBAQA5ZlnwfFdSiEG2G2iM+1t2z+vraWQPpri5
7IEHhihf2YScbNGc797MSNCRZDXfwW7sYx42P5THoeTAp24BKAmS5aSI7wOoWn6B
GhQwwcHo3JkiuEb2uf5W06h33uhKcGDnK7dfRoM2dQ5mpL8pbvPtoz6PU+CQQGTe
gACfjahKs/MWnBDhc65DsCx8F9iR4QguGN1xrf7UNGZT0bqa5R6cC1L28Srtq8Dc
X7JHdEpRfzj9i17oxQk/t04Z75MZz4nhfMh1W5dAaaSNdl/lBFmRM28Jx73YOj2V
e5bOayk9nL6xAv54f2M140+1fo+pwY3biDlc6zjdpjhMTcc7U6g4
-----END CERTIFICATE-----
Generated at Fri Jul 24 14:52:19 2026 by rpki-client