Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/JqW1WPPSVZnz4iQHIwTn0BLYEKQ.roa
File: JqW1WPPSVZnz4iQHIwTn0BLYEKQ.roa (raw, json)
Hash identifier: 2KgOywV1woJUToJzdJgSMQbv7HQALViCU1GtkGFDSEk=
Subject key identifier: 26:A5:B5:58:F3:D2:55:99:F3:E2:24:07:23:04:E7:D0:12:D8:10:A4
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 019CDC400EE7D2A7DF75B1C961EB64DB51BD
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/JqW1WPPSVZnz4iQHIwTn0BLYEKQ.roa
Signing time: Wed 11 Mar 2026 09:35:11 +0000
ROA not before: Wed 11 Mar 2026 09:35:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 18186
IP address blocks: 2.58.244.0/22 maxlen: 24
2.58.248.0/24 maxlen: 24
5.183.116.0/24 maxlen: 24
5.183.120.0/22 maxlen: 24
45.8.32.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:dc:40:0e:e7:d2:a7:df:75:b1:c9:61:eb:64:db:51:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Mar 11 09:35:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=26a5b558f3d25599f3e224072304e7d012d810a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:6f:b2:5b:c0:92:e9:c1:12:95:c4:9e:24:27:
17:0b:12:d6:70:5c:d3:04:c2:83:fd:02:4d:9d:d3:
c2:16:af:a5:f6:78:88:0b:39:d2:a0:6c:70:5c:85:
66:71:b7:85:89:c6:5b:b0:56:e8:87:2b:d9:41:52:
3e:4d:de:b0:56:09:e4:f0:7d:84:f6:2f:2d:56:06:
b0:81:73:99:f5:f1:5d:a3:fb:26:a4:37:9c:83:b1:
c8:a4:d3:e4:fa:0a:08:cc:dd:1a:b6:b7:2d:62:b5:
23:83:22:9b:38:88:f0:87:78:a2:71:dd:d3:d3:96:
98:4c:ab:e4:86:d3:ec:1e:50:7f:38:6a:b1:41:e2:
54:14:f2:8e:24:39:7e:a2:d9:01:8f:6a:10:0a:87:
06:86:3b:48:d2:a3:b2:6f:05:39:9f:fe:da:62:17:
22:0c:00:ff:aa:c9:2a:74:37:a6:7d:88:8d:dc:6a:
40:99:7a:c5:4a:de:33:ec:46:82:1c:f5:3e:27:ba:
72:f4:88:b9:c8:ba:1a:b8:1b:c0:91:1f:29:33:96:
b9:35:99:52:e4:23:b7:f5:f3:d1:cd:54:2d:38:2b:
af:14:15:f5:9f:36:51:0f:32:eb:cc:e7:94:5a:84:
e9:58:cb:ef:4a:f8:67:1b:64:26:a9:c4:f6:ad:9e:
4d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:A5:B5:58:F3:D2:55:99:F3:E2:24:07:23:04:E7:D0:12:D8:10:A4
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/JqW1WPPSVZnz4iQHIwTn0BLYEKQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.244.0-2.58.248.255
5.183.116.0/24
5.183.120.0/22
45.8.32.0/22
Signature Algorithm: sha256WithRSAEncryption
61:49:3b:bf:ae:99:ca:2c:da:36:77:59:a9:6c:8e:4e:c7:29:
50:de:46:a0:f0:89:b1:95:6f:ea:c4:d8:2f:e2:ad:91:23:8e:
a9:72:1e:11:76:a8:32:33:a1:82:1c:4a:b5:d4:72:e7:74:c7:
2d:57:aa:42:e2:21:66:43:21:db:3e:31:89:8c:56:2a:fa:99:
bb:a6:96:af:7a:8a:ab:96:b6:2c:ce:46:ea:97:86:15:dd:01:
4b:6d:2c:cc:21:90:9f:35:68:4d:44:df:b6:bd:bc:23:f8:2b:
52:8d:d0:df:b4:d6:a4:ac:a8:56:06:ae:93:df:79:a7:82:8e:
9a:10:86:e4:17:eb:6e:fe:c1:bc:f0:7c:13:32:9d:f3:32:f4:
60:15:37:be:a0:63:78:45:5b:ce:80:0b:c3:e7:16:7d:53:5b:
57:81:29:48:4d:28:2d:dc:81:b7:ee:4c:14:b3:16:6d:70:95:
bb:2e:84:6a:ac:eb:3a:8e:a9:3f:34:23:66:7d:8c:01:69:eb:
1e:ee:25:3b:be:06:5f:f6:64:d5:02:7e:6e:b2:27:e5:6b:11:
e5:4c:5d:af:27:fe:3f:36:dc:6c:2f:d0:d6:f3:03:c2:8e:d1:
34:4a:fb:06:14:3c:9b:bf:db:4a:ab:c1:8c:6d:3a:6b:bc:91:
2c:25:b6:4d
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAZzcQA7n0qffdbHJYetk21G9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1NzZlYjJjYzQ2MmU2ZTRiZjBkZTY5YjlmNjM0ODc1ZGVi
YmFhZTIwHhcNMjYwMzExMDkzNTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNmE1YjU1OGYzZDI1NTk5ZjNlMjI0MDcyMzA0ZTdkMDEyZDgxMGE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmm+yW8CS6cESlcSeJCcXCxLWcFzT
BMKD/QJNndPCFq+l9niICznSoGxwXIVmcbeFicZbsFbohyvZQVI+Td6wVgnk8H2E
9i8tVgawgXOZ9fFdo/smpDecg7HIpNPk+goIzN0atrctYrUjgyKbOIjwh3iicd3T
05aYTKvkhtPsHlB/OGqxQeJUFPKOJDl+otkBj2oQCocGhjtI0qOybwU5n/7aYhci
DAD/qskqdDemfYiN3GpAmXrFSt4z7EaCHPU+J7py9Ii5yLoauBvAkR8pM5a5NZlS
5CO39fPRzVQtOCuvFBX1nzZRDzLrzOeUWoTpWMvvSvhnG2QmqcT2rZ5NDwIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFCaltVjz0lWZ8+IkByME59AS2BCkMB8GA1UdIwQY
MBaAFKV26yzEYubkvw3mm59jSHXeu6riMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFhickxNUmk1dVNfRGVhYm4yTklkZDY3cXVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85MzE5MjctOWYzOC00MWI2LTg3ZmEt
MjU0YWNkOTJiNGUxLzEvSnFXMVdQUFNWWm56NGlRSEl3VG4wQkxZRUtRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny85MzE5MjctOWYzOC00MWI2LTg3ZmEtMjU0YWNkOTJiNGUx
LzEvcFhickxNUmk1dVNfRGVhYm4yTklkZDY3cXVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgMAwDBAICOvQD
BAACOvgDBAAFt3QDBAIFt3gDBAItCCAwDQYJKoZIhvcNAQELBQADggEBAGFJO7+u
mcos2jZ3Walsjk7HKVDeRqDwibGVb+rE2C/irZEjjqlyHhF2qDIzoYIcSrXUcud0
xy1XqkLiIWZDIds+MYmMVir6mbumlq96iquWtizORuqXhhXdAUttLMwhkJ81aE1E
37a9vCP4K1KN0N+01qSsqFYGrpPfeaeCjpoQhuQX627+wbzwfBMynfMy9GAVN76g
Y3hFW86AC8PnFn1TW1eBKUhNKC3cgbfuTBSzFm1wlbsuhGqs6zqOqT80I2Z9jAFp
6x7uJTu+Bl/2ZNUCfm6yJ+VrEeVMXa8n/j823Gwv0NbzA8KO0TRK+wYUPJu/20qr
wYxtOmu8kSwltk0=
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:02:56 2026 by rpki-client