Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/7fe015-5cd5-4429-8b7d-22d027197712/1/Jz3vO6ise1j7-gpQ21jNELBEkok.roa
File: Jz3vO6ise1j7-gpQ21jNELBEkok.roa (raw, json)
Hash identifier: W4or0V7Se2iC0i9nCSmlxwqSV6nrV4h/50OHHb14Eys=
Subject key identifier: 27:3D:EF:3B:A8:AC:7B:58:FB:FA:0A:50:DB:58:CD:10:B0:44:92:89
Certificate issuer: /CN=26c672da72a34cc282adc40f282676de75117654
Certificate serial: 019DD336F1899B3E753D45DDADCBDBC93FCB
Authority key identifier: 26:C6:72:DA:72:A3:4C:C2:82:AD:C4:0F:28:26:76:DE:75:11:76:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JsZy2nKjTMKCrcQPKCZ23nURdlQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/7fe015-5cd5-4429-8b7d-22d027197712/1/Jz3vO6ise1j7-gpQ21jNELBEkok.roa
Signing time: Tue 28 Apr 2026 08:31:26 +0000
ROA not before: Tue 28 Apr 2026 08:31:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 31.88.0.0/15 maxlen: 24
218.254.0.0/16 maxlen: 24
2a14:f180::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/7fe015-5cd5-4429-8b7d-22d027197712/1/JsZy2nKjTMKCrcQPKCZ23nURdlQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/7fe015-5cd5-4429-8b7d-22d027197712/1/JsZy2nKjTMKCrcQPKCZ23nURdlQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JsZy2nKjTMKCrcQPKCZ23nURdlQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d3:36:f1:89:9b:3e:75:3d:45:dd:ad:cb:db:c9:3f:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26c672da72a34cc282adc40f282676de75117654
Validity
Not Before: Apr 28 08:31:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=273def3ba8ac7b58fbfa0a50db58cd10b0449289
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:79:c8:c5:2a:e2:eb:d6:1b:72:7c:9c:e8:5d:
0c:6e:69:7c:8c:82:9a:27:5d:33:03:19:30:14:88:
31:1b:f2:29:2d:23:40:61:3d:65:53:55:dc:17:60:
42:fe:fd:4e:6e:d0:06:9a:89:7b:ba:f4:a2:d3:12:
0d:c4:af:83:44:21:fa:dd:e5:2e:52:de:3c:dd:f5:
c6:1d:dc:3e:28:8c:3b:76:26:7c:ac:d7:e1:08:a1:
f3:d4:8d:ac:92:38:86:ac:24:d4:cc:4d:83:58:f5:
f9:54:a4:c0:91:d6:dd:cb:11:d8:cc:46:62:27:fe:
76:93:53:dc:4b:df:7d:2f:9e:3a:47:2a:09:2a:05:
df:e9:7a:62:89:9a:2f:fc:1a:6e:04:5c:7b:e1:a0:
34:04:16:bb:c2:d4:22:cf:7b:39:9e:51:82:bb:df:
7d:a6:80:2b:a0:f8:fc:9b:f4:4a:1a:61:b7:e3:01:
51:2a:0d:42:d6:88:c8:cf:ca:ea:a7:7e:a8:1a:de:
57:b6:e2:1e:f2:71:f1:b4:c9:e0:55:2b:76:6c:76:
41:17:3c:63:d8:73:01:4f:a3:aa:9c:c2:fa:ea:a5:
c4:82:15:be:c8:c0:c5:a0:b8:c0:59:ba:d8:10:61:
ba:bd:a0:94:1d:ee:af:b1:40:9c:57:1d:6b:08:92:
fb:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:3D:EF:3B:A8:AC:7B:58:FB:FA:0A:50:DB:58:CD:10:B0:44:92:89
X509v3 Authority Key Identifier:
keyid:26:C6:72:DA:72:A3:4C:C2:82:AD:C4:0F:28:26:76:DE:75:11:76:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JsZy2nKjTMKCrcQPKCZ23nURdlQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7fe015-5cd5-4429-8b7d-22d027197712/1/Jz3vO6ise1j7-gpQ21jNELBEkok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7fe015-5cd5-4429-8b7d-22d027197712/1/JsZy2nKjTMKCrcQPKCZ23nURdlQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.88.0.0/15
218.254.0.0/16
IPv6:
2a14:f180::/29
Signature Algorithm: sha256WithRSAEncryption
72:96:e6:e0:c5:1f:e8:5e:ac:e4:25:76:c7:d8:81:82:28:fc:
dd:f3:41:b4:4c:3a:90:35:08:79:ad:4a:7d:a1:41:39:68:5a:
f7:35:a0:0e:44:41:2f:1a:ec:e3:e1:7d:12:bb:64:38:9d:5f:
7e:e9:02:7f:6f:7b:bc:d8:49:68:95:44:2b:95:9a:43:35:44:
63:94:ba:de:3b:cd:88:cf:bd:cd:e2:6e:52:ac:8f:20:e8:60:
ab:97:68:83:ba:76:a5:7a:8e:bd:74:b5:24:68:5e:0d:ce:8a:
cb:fd:fe:e3:24:76:cc:ff:47:9d:b0:4f:2d:73:00:bb:bf:5f:
7d:bf:90:ae:58:7b:94:20:b1:4e:f2:f5:ba:6c:8e:33:aa:b6:
dd:ae:9b:cc:c6:87:02:b6:60:f7:b1:9b:ce:48:28:93:78:49:
0b:79:65:99:47:9c:d0:64:dd:06:64:12:2f:2e:30:a9:96:a7:
a7:25:a5:91:b2:61:79:18:0f:0a:27:d5:32:94:d3:82:77:64:
9b:3e:9e:63:b3:25:02:a3:13:55:a8:27:5e:9a:a9:9a:d9:f6:
72:68:ec:13:72:e1:73:f4:3c:6a:e8:09:9e:e0:55:c4:b8:2e:
3e:40:15:85:b5:9b:e7:a9:71:90:2d:7e:58:9e:29:ef:a2:b5:
19:f6:43:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:50:17 2026 by rpki-client