Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/4be222-6482-4db9-9a5f-752e9b8b0756/1/Jm4VZ_ajKf-z3s5007EZo3CyBug.roa
File: Jm4VZ_ajKf-z3s5007EZo3CyBug.roa (raw, json)
Hash identifier: BNpXWO9BS+t8TQvigfGwewJsLpM7EQ8w2ZKtyKnHpRI=
Subject key identifier: 26:6E:15:67:F6:A3:29:FF:B3:DE:CE:74:D3:B1:19:A3:70:B2:06:E8
Certificate issuer: /CN=57619321cbc5d73babc2a9423a8f4ee3480f27f4
Certificate serial: 019F2368A69659F9FD3B0CD794967AF28B86
Authority key identifier: 57:61:93:21:CB:C5:D7:3B:AB:C2:A9:42:3A:8F:4E:E3:48:0F:27:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V2GTIcvF1zurwqlCOo9O40gPJ_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/4be222-6482-4db9-9a5f-752e9b8b0756/1/Jm4VZ_ajKf-z3s5007EZo3CyBug.roa
Signing time: Thu 02 Jul 2026 15:18:08 +0000
ROA not before: Thu 02 Jul 2026 15:18:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208802
IP address blocks: 185.85.184.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/4be222-6482-4db9-9a5f-752e9b8b0756/1/V2GTIcvF1zurwqlCOo9O40gPJ_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/4be222-6482-4db9-9a5f-752e9b8b0756/1/V2GTIcvF1zurwqlCOo9O40gPJ_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/V2GTIcvF1zurwqlCOo9O40gPJ_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:a6:96:59:f9:fd:3b:0c:d7:94:96:7a:f2:8b:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57619321cbc5d73babc2a9423a8f4ee3480f27f4
Validity
Not Before: Jul 2 15:18:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=266e1567f6a329ffb3dece74d3b119a370b206e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ac:1b:cd:d8:b4:d7:54:2c:f7:7c:7f:b7:58:
85:21:67:37:c2:bd:f4:cc:ae:31:2f:bc:0e:62:53:
97:39:46:d6:05:d6:4d:8a:82:2c:76:40:4e:84:37:
ec:de:18:8d:4d:66:c5:13:ea:3e:80:c7:58:08:78:
25:d6:ce:65:86:b3:88:dd:c4:9d:47:b3:ef:2c:3c:
16:ae:98:f7:4f:56:dd:95:e6:e4:dd:cd:1d:9d:95:
81:f0:00:da:d6:0a:e4:40:a1:4a:64:5f:9f:0b:cd:
70:90:b6:dd:5d:a3:94:b9:4c:f9:c5:49:f5:20:5a:
52:a3:84:f0:da:2c:76:7d:0d:33:f7:e4:57:54:60:
5a:68:be:9b:ba:fa:21:9d:88:ec:4c:6b:74:af:47:
25:5d:28:4f:e8:68:b2:b3:a0:90:36:27:5b:35:40:
31:ea:45:26:a9:11:2e:c8:49:ec:b4:4b:a3:eb:01:
b1:e8:20:b0:3b:b7:a7:b3:94:00:86:22:98:83:bf:
10:8e:2f:f1:d4:3d:bb:51:a2:64:e2:00:68:3c:2e:
92:d5:e6:77:a1:44:d7:9c:08:06:21:53:07:ba:53:
cc:d9:58:32:e9:5d:44:bb:d7:e3:42:8b:67:3b:f4:
f5:29:13:4c:99:bf:39:ea:56:a9:bf:87:5a:27:49:
29:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:6E:15:67:F6:A3:29:FF:B3:DE:CE:74:D3:B1:19:A3:70:B2:06:E8
X509v3 Authority Key Identifier:
keyid:57:61:93:21:CB:C5:D7:3B:AB:C2:A9:42:3A:8F:4E:E3:48:0F:27:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V2GTIcvF1zurwqlCOo9O40gPJ_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/4be222-6482-4db9-9a5f-752e9b8b0756/1/Jm4VZ_ajKf-z3s5007EZo3CyBug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/4be222-6482-4db9-9a5f-752e9b8b0756/1/V2GTIcvF1zurwqlCOo9O40gPJ_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.85.184.0/22
Signature Algorithm: sha256WithRSAEncryption
30:a9:3e:e3:53:f1:9f:0f:38:c0:3f:99:53:77:b2:e1:92:49:
1c:ef:51:f5:57:18:32:3c:8c:d6:df:b0:6a:28:c3:56:61:bc:
fa:cd:f4:7f:a9:39:41:de:cf:a9:b2:31:03:be:e3:ce:a4:85:
dc:a1:45:6b:47:77:5b:20:25:20:f3:4f:24:d5:e9:a2:9d:89:
5f:25:f7:8f:c5:59:d6:94:68:91:d1:7a:90:87:05:66:59:7a:
a5:20:13:3d:15:1e:1d:b9:ea:0d:22:61:fe:60:31:da:b9:a9:
11:f7:ff:80:5b:bd:80:4a:b5:25:aa:c8:9d:2b:fb:68:e2:78:
00:ee:a7:9d:c8:d6:70:51:f4:7d:57:48:f1:d4:ed:10:aa:da:
9f:07:f8:2d:0a:db:d4:24:0e:a3:8a:6e:80:52:7b:94:ea:65:
f6:97:4d:e0:80:4b:44:72:de:a6:07:8c:6f:39:41:b4:d4:72:
e7:e2:b2:bc:bc:df:fd:d9:1f:97:2e:77:01:03:74:0f:45:07:
2e:8c:42:87:87:bb:ad:dc:80:85:97:41:fe:ab:e8:48:cb:5d:
41:eb:f0:c9:b8:fd:2c:36:89:67:a1:2a:4c:9f:e9:76:97:16:
a9:cd:dc:37:75:c9:1e:0c:5c:eb:96:7f:a3:11:73:17:6e:36:
48:1e:b9:e4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaKaWWfn9OwzXlJZ68ouGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3NjE5MzIxY2JjNWQ3M2JhYmMyYTk0MjNhOGY0ZWUzNDgw
ZjI3ZjQwHhcNMjYwNzAyMTUxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNjZlMTU2N2Y2YTMyOWZmYjNkZWNlNzRkM2IxMTlhMzcwYjIwNmU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6wbzdi011Qs93x/t1iFIWc3wr30
zK4xL7wOYlOXOUbWBdZNioIsdkBOhDfs3hiNTWbFE+o+gMdYCHgl1s5lhrOI3cSd
R7PvLDwWrpj3T1bdlebk3c0dnZWB8ADa1grkQKFKZF+fC81wkLbdXaOUuUz5xUn1
IFpSo4Tw2ix2fQ0z9+RXVGBaaL6buvohnYjsTGt0r0clXShP6Giys6CQNidbNUAx
6kUmqREuyEnstEuj6wGx6CCwO7ens5QAhiKYg78Qji/x1D27UaJk4gBoPC6S1eZ3
oUTXnAgGIVMHulPM2Vgy6V1Eu9fjQotnO/T1KRNMmb856lapv4daJ0kptwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCZuFWf2oyn/s97OdNOxGaNwsgboMB8GA1UdIwQY
MBaAFFdhkyHLxdc7q8KpQjqPTuNIDyf0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjJHVEljdkYxenVyd3FsQ09vOU80MGdQSl9RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS80YmUyMjItNjQ4Mi00ZGI5LTlhNWYt
NzUyZTliOGIwNzU2LzEvSm00VlpfYWpLZi16M3M1MDA3RVpvM0N5QnVnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS80YmUyMjItNjQ4Mi00ZGI5LTlhNWYtNzUyZTliOGIwNzU2
LzEvVjJHVEljdkYxenVyd3FsQ09vOU80MGdQSl9RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuVW4MA0G
CSqGSIb3DQEBCwUAA4IBAQAwqT7jU/GfDzjAP5lTd7Lhkkkc71H1VxgyPIzW37Bq
KMNWYbz6zfR/qTlB3s+psjEDvuPOpIXcoUVrR3dbICUg808k1eminYlfJfePxVnW
lGiR0XqQhwVmWXqlIBM9FR4dueoNImH+YDHauakR9/+AW72ASrUlqsidK/to4ngA
7qedyNZwUfR9V0jx1O0QqtqfB/gtCtvUJA6jim6AUnuU6mX2l03ggEtEct6mB4xv
OUG01HLn4rK8vN/92R+XLncBA3QPRQcujEKHh7ut3ICFl0H+q+hIy11B6/DJuP0s
NolnoSpMn+l2lxapzdw3dckeDFzrln+jEXMXbjZIHrnk
-----END CERTIFICATE-----
Generated at Fri Jul 24 13:45:54 2026 by rpki-client