Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/66acb4-7a0c-41a5-95ad-123bf1f0a9c1/1/juXMUNSkgVRHC-QWuh1lWh6LqUQ.roa
File: juXMUNSkgVRHC-QWuh1lWh6LqUQ.roa (raw, json)
Hash identifier: G2J2/mfpur3sKwCS1/C2FhNoDBroP3jXOvZUErd5avQ=
Subject key identifier: 8E:E5:CC:50:D4:A4:81:54:47:0B:E4:16:BA:1D:65:5A:1E:8B:A9:44
Certificate issuer: /CN=f9da2957f30444f01a4be79fd5ec7b9247b7a425
Certificate serial: 019F23687D22B87A9D4AAA832F4DC60F7797
Authority key identifier: F9:DA:29:57:F3:04:44:F0:1A:4B:E7:9F:D5:EC:7B:92:47:B7:A4:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-dopV_MERPAaS-ef1ex7kke3pCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/66acb4-7a0c-41a5-95ad-123bf1f0a9c1/1/juXMUNSkgVRHC-QWuh1lWh6LqUQ.roa
Signing time: Thu 02 Jul 2026 15:17:58 +0000
ROA not before: Thu 02 Jul 2026 15:17:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215221
IP address blocks: 195.20.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/66acb4-7a0c-41a5-95ad-123bf1f0a9c1/1/1-dopV_MERPAaS-ef1ex7kke3pCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/66acb4-7a0c-41a5-95ad-123bf1f0a9c1/1/1-dopV_MERPAaS-ef1ex7kke3pCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-dopV_MERPAaS-ef1ex7kke3pCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:7d:22:b8:7a:9d:4a:aa:83:2f:4d:c6:0f:77:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9da2957f30444f01a4be79fd5ec7b9247b7a425
Validity
Not Before: Jul 2 15:17:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8ee5cc50d4a48154470be416ba1d655a1e8ba944
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a2:e3:b0:b1:af:e6:25:a9:34:e1:b0:08:73:
09:53:2c:81:14:5b:14:04:9b:88:db:46:be:53:b6:
28:7f:28:cb:2b:bb:11:72:8d:5c:bb:05:a9:0c:bb:
02:c7:2a:e4:2c:51:82:f8:c2:b5:8f:eb:70:f4:a8:
f2:c4:e2:04:09:b1:ac:86:15:97:93:6d:21:48:e4:
91:d1:b9:0c:9e:32:17:b0:46:0b:44:f9:e9:8e:e7:
80:97:6f:33:af:94:2b:24:f0:4d:ab:a7:8e:64:8b:
dc:90:05:bf:b5:cf:63:25:1d:80:a1:e7:3c:16:7c:
98:e5:d4:4f:a3:e5:3f:b9:66:6e:75:ff:1c:3f:c2:
82:3a:be:73:86:f3:d1:a6:66:6a:15:3b:d0:f2:b9:
07:6b:64:79:a6:d8:06:f9:25:a2:9c:05:6d:43:7f:
8a:e2:32:23:fa:24:b3:7e:e3:e8:da:41:0a:7f:81:
9d:1b:6a:71:2f:ae:be:53:e7:27:19:c0:40:83:76:
ac:5d:54:0e:c0:15:ff:56:59:eb:2d:e5:92:6d:0f:
54:68:90:a5:a8:a2:f0:a4:6c:c0:5c:ab:46:15:05:
44:cd:2b:00:c0:64:ea:e9:51:b0:c4:b0:e3:4f:d2:
dc:c2:db:ed:c6:e6:2f:8e:ef:97:f6:f7:fd:c8:e0:
ae:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:E5:CC:50:D4:A4:81:54:47:0B:E4:16:BA:1D:65:5A:1E:8B:A9:44
X509v3 Authority Key Identifier:
keyid:F9:DA:29:57:F3:04:44:F0:1A:4B:E7:9F:D5:EC:7B:92:47:B7:A4:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-dopV_MERPAaS-ef1ex7kke3pCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/66acb4-7a0c-41a5-95ad-123bf1f0a9c1/1/juXMUNSkgVRHC-QWuh1lWh6LqUQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/66acb4-7a0c-41a5-95ad-123bf1f0a9c1/1/1-dopV_MERPAaS-ef1ex7kke3pCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.20.142.0/24
Signature Algorithm: sha256WithRSAEncryption
69:74:1d:fc:d9:ab:c6:66:7b:e3:6c:40:c2:92:7f:27:91:d3:
e9:95:7f:79:4e:6f:1f:ac:ce:aa:d7:27:1d:ca:12:3e:46:86:
6e:d7:43:b9:f1:74:44:27:86:ee:87:eb:92:8b:46:92:a8:fa:
83:27:27:48:1c:88:de:da:fc:10:ea:4c:7d:97:ff:3e:b3:81:
ed:b6:11:16:8c:58:ca:15:cd:bc:1f:0d:19:a9:a8:ee:5a:1c:
8d:63:74:87:fe:4f:ab:26:98:17:01:1b:c2:e8:22:30:54:49:
c8:d0:aa:f9:ec:fe:23:ee:4c:1e:7a:89:c3:1a:d8:0c:70:17:
ae:cc:cc:fe:49:51:4d:2c:af:28:d4:1d:27:20:a4:16:93:1b:
c0:eb:ea:4e:c0:6d:d1:f6:bb:aa:aa:ad:b4:67:10:a0:f4:a4:
54:be:aa:12:84:25:2b:b0:31:a5:8d:8e:71:33:0a:c1:ec:87:
7e:4f:f1:d5:5b:42:32:88:9a:6a:e5:b6:69:9e:57:c4:e8:55:
32:e3:7c:dc:cc:69:ec:ea:10:56:b8:fe:c7:bd:1d:7c:51:f5:
64:c2:d7:2a:df:9a:5d:f5:d1:09:ff:5d:2e:66:2a:a5:67:83:
6b:fc:13:10:99:81:9d:2d:92:15:9b:fe:16:b0:d0:ac:3a:72:
e3:a9:2c:dd
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAZ8jaH0iuHqdSqqDL03GD3eXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5ZGEyOTU3ZjMwNDQ0ZjAxYTRiZTc5ZmQ1ZWM3YjkyNDdi
N2E0MjUwHhcNMjYwNzAyMTUxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZWU1Y2M1MGQ0YTQ4MTU0NDcwYmU0MTZiYTFkNjU1YTFlOGJhOTQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqLjsLGv5iWpNOGwCHMJUyyBFFsU
BJuI20a+U7YofyjLK7sRco1cuwWpDLsCxyrkLFGC+MK1j+tw9KjyxOIECbGshhWX
k20hSOSR0bkMnjIXsEYLRPnpjueAl28zr5QrJPBNq6eOZIvckAW/tc9jJR2Aoec8
FnyY5dRPo+U/uWZudf8cP8KCOr5zhvPRpmZqFTvQ8rkHa2R5ptgG+SWinAVtQ3+K
4jIj+iSzfuPo2kEKf4GdG2pxL66+U+cnGcBAg3asXVQOwBX/VlnrLeWSbQ9UaJCl
qKLwpGzAXKtGFQVEzSsAwGTq6VGwxLDjT9LcwtvtxuYvju+X9vf9yOCuoQIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFI7lzFDUpIFURwvkFrodZVoei6lEMB8GA1UdIwQY
MBaAFPnaKVfzBETwGkvnn9Xse5JHt6QlMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1kb3BWX01FUlBBYVMtZWYxZXg3a2tlM3BDVS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2MvNjZhY2I0LTdhMGMtNDFhNS05NWFk
LTEyM2JmMWYwYTljMS8xL2p1WE1VTlNrZ1ZSSEMtUVd1aDFsV2g2THFVUS5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvN2MvNjZhY2I0LTdhMGMtNDFhNS05NWFkLTEyM2JmMWYwYTlj
MS8xLzEtZG9wVl9NRVJQQWFTLWVmMWV4N2trZTNwQ1UuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADDFI4w
DQYJKoZIhvcNAQELBQADggEBAGl0HfzZq8Zme+NsQMKSfyeR0+mVf3lObx+szqrX
Jx3KEj5Ghm7XQ7nxdEQnhu6H65KLRpKo+oMnJ0gciN7a/BDqTH2X/z6zge22ERaM
WMoVzbwfDRmpqO5aHI1jdIf+T6smmBcBG8LoIjBUScjQqvns/iPuTB56icMa2Axw
F67MzP5JUU0sryjUHScgpBaTG8Dr6k7AbdH2u6qqrbRnEKD0pFS+qhKEJSuwMaWN
jnEzCsHsh35P8dVbQjKImmrltmmeV8ToVTLjfNzMaezqEFa4/se9HXxR9WTC1yrf
ml310Qn/XS5mKqVng2v8ExCZgZ0tkhWb/haw0Kw6cuOpLN0=
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:56:18 2026 by rpki-client