Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/5d6e29-942f-4caf-98a8-fd5d55b61ec4/1/ju68EpXZevf4Hb2wWFqdPmV352k.roa
File: ju68EpXZevf4Hb2wWFqdPmV352k.roa (raw, json)
Hash identifier: Ck2VmIwjqmui7Sus7741mQyUCGm4+who9Co6bDTtcl4=
Subject key identifier: 8E:EE:BC:12:95:D9:7A:F7:F8:1D:BD:B0:58:5A:9D:3E:65:77:E7:69
Certificate issuer: /CN=287b8e2b920bff440a8f518744527146fb87e930
Certificate serial: 019F23689D7A5E68194622F5CD3C35D98F94
Authority key identifier: 28:7B:8E:2B:92:0B:FF:44:0A:8F:51:87:44:52:71:46:FB:87:E9:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KHuOK5IL_0QKj1GHRFJxRvuH6TA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/5d6e29-942f-4caf-98a8-fd5d55b61ec4/1/ju68EpXZevf4Hb2wWFqdPmV352k.roa
Signing time: Thu 02 Jul 2026 15:18:06 +0000
ROA not before: Thu 02 Jul 2026 15:18:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214507
IP address blocks: 185.227.77.0/24 maxlen: 24
2a13:a1c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/5d6e29-942f-4caf-98a8-fd5d55b61ec4/1/KHuOK5IL_0QKj1GHRFJxRvuH6TA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/5d6e29-942f-4caf-98a8-fd5d55b61ec4/1/KHuOK5IL_0QKj1GHRFJxRvuH6TA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KHuOK5IL_0QKj1GHRFJxRvuH6TA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:9d:7a:5e:68:19:46:22:f5:cd:3c:35:d9:8f:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=287b8e2b920bff440a8f518744527146fb87e930
Validity
Not Before: Jul 2 15:18:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8eeebc1295d97af7f81dbdb0585a9d3e6577e769
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3d:84:e2:b7:0c:27:10:df:f0:6e:25:e9:95:
10:c1:61:64:a4:63:32:01:ec:d9:4c:32:85:c6:55:
52:b2:78:f8:a5:88:f4:3b:1e:7a:e7:b2:d1:37:1e:
d1:ce:1d:19:b3:e2:f7:e5:76:5f:c9:90:6a:49:69:
14:e7:62:f4:a4:26:90:66:3a:4b:bf:d4:f2:da:95:
d3:17:5f:40:5e:a9:d9:59:99:3d:c8:d9:7f:c8:ab:
ec:07:5b:b3:55:19:bf:11:81:e5:23:f2:fa:b0:a7:
ae:df:77:15:e7:f6:b5:2c:94:b4:47:c6:e1:c2:2c:
4e:45:9f:1d:78:cf:fd:3f:1b:8c:fc:4f:80:ca:4a:
64:65:db:8a:cb:52:50:5b:47:cb:73:fe:51:e1:8e:
8f:c4:74:ba:d9:56:8a:a0:21:0b:28:fd:04:2b:ae:
8c:51:30:e2:30:fe:18:43:a5:9e:f3:41:e8:72:b8:
57:b1:ae:ea:5a:55:41:05:df:8d:b8:64:6c:26:db:
d0:fe:4d:9d:87:4b:99:7f:86:93:b4:4d:9e:3e:d7:
36:c9:ed:9d:07:92:4b:5c:fd:5a:20:03:ae:24:06:
c0:d5:1f:8b:6a:77:c9:50:80:6b:d7:b7:77:69:7e:
ec:29:dd:33:e9:45:7f:fc:62:5b:45:d0:8f:80:a0:
2e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:EE:BC:12:95:D9:7A:F7:F8:1D:BD:B0:58:5A:9D:3E:65:77:E7:69
X509v3 Authority Key Identifier:
keyid:28:7B:8E:2B:92:0B:FF:44:0A:8F:51:87:44:52:71:46:FB:87:E9:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KHuOK5IL_0QKj1GHRFJxRvuH6TA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5d6e29-942f-4caf-98a8-fd5d55b61ec4/1/ju68EpXZevf4Hb2wWFqdPmV352k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5d6e29-942f-4caf-98a8-fd5d55b61ec4/1/KHuOK5IL_0QKj1GHRFJxRvuH6TA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.227.77.0/24
IPv6:
2a13:a1c0::/32
Signature Algorithm: sha256WithRSAEncryption
50:9b:81:10:77:5f:6f:3e:eb:f2:de:e9:ba:5f:e5:19:7c:9a:
c5:e8:da:29:1a:25:4b:6c:da:f0:71:5c:6f:f3:32:60:26:40:
80:44:b3:2a:4b:a7:f1:23:68:ae:22:3f:e6:5d:1f:94:71:a2:
ac:7e:48:5f:08:0f:de:58:8c:a8:47:20:9c:e6:09:12:c2:4b:
5a:e4:95:3e:bf:79:22:16:30:d0:64:b2:c1:89:fc:c5:40:05:
8e:cd:f7:b1:27:a7:2d:67:97:00:da:7a:fd:7e:40:82:37:da:
ad:95:8c:c6:37:f5:5e:1a:93:bb:30:89:fe:c4:2c:ac:5e:87:
a4:8c:52:c6:57:c0:78:37:31:5c:3c:f8:c1:a0:96:99:c2:15:
a5:d9:50:68:67:fe:81:f1:c1:4c:6b:21:d4:bd:aa:58:10:15:
99:e3:bb:2c:27:71:3f:ca:67:79:56:d7:67:50:97:c8:e4:59:
f7:8d:fc:0a:94:3b:d9:8b:ea:9d:4e:c1:0c:22:9b:75:60:64:
ca:e8:a7:b1:16:f3:d2:12:0b:5b:99:5d:71:cf:30:80:5b:fd:
f6:06:4e:58:8a:a5:b2:4a:75:aa:4d:92:e8:c5:ce:1a:5f:04:
38:95:23:10:a4:6b:89:c0:b2:20:f3:94:de:e0:3b:5d:9a:0f:
70:de:15:6a
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZ8jaJ16XmgZRiL1zTw12Y+UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4N2I4ZTJiOTIwYmZmNDQwYThmNTE4NzQ0NTI3MTQ2ZmI4
N2U5MzAwHhcNMjYwNzAyMTUxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZWVlYmMxMjk1ZDk3YWY3ZjgxZGJkYjA1ODVhOWQzZTY1NzdlNzY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApj2E4rcMJxDf8G4l6ZUQwWFkpGMy
AezZTDKFxlVSsnj4pYj0Ox5657LRNx7Rzh0Zs+L35XZfyZBqSWkU52L0pCaQZjpL
v9Ty2pXTF19AXqnZWZk9yNl/yKvsB1uzVRm/EYHlI/L6sKeu33cV5/a1LJS0R8bh
wixORZ8deM/9PxuM/E+AykpkZduKy1JQW0fLc/5R4Y6PxHS62VaKoCELKP0EK66M
UTDiMP4YQ6We80HocrhXsa7qWlVBBd+NuGRsJtvQ/k2dh0uZf4aTtE2ePtc2ye2d
B5JLXP1aIAOuJAbA1R+LanfJUIBr17d3aX7sKd0z6UV//GJbRdCPgKAufQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFI7uvBKV2Xr3+B29sFhanT5ld+dpMB8GA1UdIwQY
MBaAFCh7jiuSC/9ECo9Rh0RScUb7h+kwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0h1T0s1SUxfMFFLajFHSFJGSnhSdnVINlRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy81ZDZlMjktOTQyZi00Y2FmLTk4YTgt
ZmQ1ZDU1YjYxZWM0LzEvanU2OEVwWFpldmY0SGIyd1dGcWRQbVYzNTJrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy81ZDZlMjktOTQyZi00Y2FmLTk4YTgtZmQ1ZDU1YjYxZWM0
LzEvS0h1T0s1SUxfMFFLajFHSFJGSnhSdnVINlRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAueNNMA0E
AgACMAcDBQAqE6HAMA0GCSqGSIb3DQEBCwUAA4IBAQBQm4EQd19vPuvy3um6X+UZ
fJrF6NopGiVLbNrwcVxv8zJgJkCARLMqS6fxI2iuIj/mXR+UcaKsfkhfCA/eWIyo
RyCc5gkSwkta5JU+v3kiFjDQZLLBifzFQAWOzfexJ6ctZ5cA2nr9fkCCN9qtlYzG
N/VeGpO7MIn+xCysXoekjFLGV8B4NzFcPPjBoJaZwhWl2VBoZ/6B8cFMayHUvapY
EBWZ47ssJ3E/ymd5VtdnUJfI5Fn3jfwKlDvZi+qdTsEMIpt1YGTK6KexFvPSEgtb
mV1xzzCAW/32Bk5YiqWySnWqTZLoxc4aXwQ4lSMQpGuJwLIg85Te4Dtdmg9w3hVq
-----END CERTIFICATE-----
Generated at Thu Jul 23 20:08:56 2026 by rpki-client