Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/605f1c-0d7a-4bd3-88b6-2f0a6bdbbe51/1/JzWGsDffl9qf2AiMf1YAzKEytoQ.roa
File: JzWGsDffl9qf2AiMf1YAzKEytoQ.roa (raw, json)
Hash identifier: 6DFZRSTQ0FFBQOu6f+OJdswaZAy8UME/OaSysUNj6dc=
Subject key identifier: 27:35:86:B0:37:DF:97:DA:9F:D8:08:8C:7F:56:00:CC:A1:32:B6:84
Certificate issuer: /CN=10f1d0dbe093c722350618f4045c25ba94317f87
Certificate serial: 019F7012E7269DD3691C9D74868C542EECC9
Authority key identifier: 10:F1:D0:DB:E0:93:C7:22:35:06:18:F4:04:5C:25:BA:94:31:7F:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/605f1c-0d7a-4bd3-88b6-2f0a6bdbbe51/1/JzWGsDffl9qf2AiMf1YAzKEytoQ.roa
Signing time: Fri 17 Jul 2026 12:35:14 +0000
ROA not before: Fri 17 Jul 2026 12:35:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9120
IP address blocks: 80.70.8.0/21 maxlen: 21
92.43.88.0/21 maxlen: 21
92.43.89.0/24 maxlen: 24
92.43.90.0/23 maxlen: 23
92.43.92.0/22 maxlen: 22
185.221.247.0/24 maxlen: 24
185.238.192.0/22 maxlen: 22
212.97.136.0/22 maxlen: 22
212.97.144.0/20 maxlen: 20
2a04:3f80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/605f1c-0d7a-4bd3-88b6-2f0a6bdbbe51/1/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/605f1c-0d7a-4bd3-88b6-2f0a6bdbbe51/1/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.mft
rsync://rpki.ripe.net/repository/DEFAULT/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 12:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:70:12:e7:26:9d:d3:69:1c:9d:74:86:8c:54:2e:ec:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10f1d0dbe093c722350618f4045c25ba94317f87
Validity
Not Before: Jul 17 12:35:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=273586b037df97da9fd8088c7f5600cca132b684
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:f4:93:cf:89:fc:24:17:26:10:6e:60:69:83:
a6:60:4d:b4:5a:ae:a4:a7:34:6a:a6:19:f3:8d:fc:
3b:75:30:08:94:30:1d:77:07:87:08:8b:9b:9c:a4:
f6:f4:f8:e1:fb:1f:01:d4:84:ad:47:d7:68:ed:29:
25:7a:a5:69:1c:55:c7:d2:a2:f4:15:e5:52:3a:1b:
b8:4f:66:8e:f6:24:f2:84:73:12:a4:58:b5:db:aa:
b6:4f:c2:4f:61:91:3b:56:c7:c2:b0:de:ba:19:f5:
33:08:0d:76:b6:ed:cc:d1:fe:eb:51:c4:ab:43:e7:
b5:d0:ee:38:d7:bf:28:76:3d:75:b9:8d:26:c3:f1:
2b:54:c0:bc:bf:e0:f8:ec:36:da:18:af:17:d3:60:
0d:e8:6a:17:28:36:23:8e:94:80:61:d8:43:b1:8a:
f6:8e:7b:71:75:ff:ee:ac:96:66:61:5a:a4:44:49:
e8:d2:b8:e3:7c:d0:fa:7a:d1:c0:ba:bd:e4:94:ff:
bc:0d:c5:61:a1:2c:08:e3:33:ad:40:43:a6:80:6b:
e2:5c:66:07:f2:c9:17:5b:e3:42:df:75:16:bf:7c:
e5:09:aa:5d:06:2f:d1:4e:9a:24:7f:af:21:9e:6a:
97:db:c9:a0:30:ef:d4:cb:48:8e:1d:8d:11:d5:b8:
93:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:35:86:B0:37:DF:97:DA:9F:D8:08:8C:7F:56:00:CC:A1:32:B6:84
X509v3 Authority Key Identifier:
keyid:10:F1:D0:DB:E0:93:C7:22:35:06:18:F4:04:5C:25:BA:94:31:7F:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/605f1c-0d7a-4bd3-88b6-2f0a6bdbbe51/1/JzWGsDffl9qf2AiMf1YAzKEytoQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/605f1c-0d7a-4bd3-88b6-2f0a6bdbbe51/1/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.70.8.0/21
92.43.88.0/21
185.221.247.0/24
185.238.192.0/22
212.97.136.0/22
212.97.144.0/20
IPv6:
2a04:3f80::/29
Signature Algorithm: sha256WithRSAEncryption
7c:4a:23:93:46:16:55:84:75:6c:25:be:65:c7:a7:33:ae:d9:
e5:0e:87:19:40:7e:ed:ad:d5:85:83:35:1b:bd:06:b1:38:19:
73:9b:47:b1:e0:20:07:fe:58:35:f5:aa:f4:6a:34:da:1f:be:
24:79:b5:1d:7b:5f:a7:1b:76:47:7e:7b:a5:36:8c:b7:d3:32:
48:fd:80:05:7b:e4:90:04:2b:ac:4a:b0:3e:02:f3:2f:a3:c8:
eb:08:a0:1c:f4:00:ce:f4:ed:e3:e8:45:f8:93:00:6c:e9:90:
64:91:14:cd:e4:55:c6:db:0e:2e:02:c5:c5:89:86:72:6c:ba:
3b:cc:23:d0:48:6b:e0:bb:a3:3c:17:dd:c2:f2:dd:08:fc:d7:
7d:1e:d9:31:50:db:80:75:4f:4d:57:88:9c:50:14:a9:94:d0:
a6:f3:37:c3:03:ee:65:03:f2:ac:6d:dd:57:5d:9d:39:77:9a:
29:85:d4:cf:7d:28:83:f5:fb:53:45:95:44:01:d8:c0:a1:34:
6e:64:e0:de:e9:66:96:bd:8b:4a:85:2f:97:5a:ef:aa:e0:63:
4b:ea:7f:04:fd:aa:39:41:41:9b:e3:74:71:d5:53:d4:29:86:
8a:9c:7c:fd:07:db:75:aa:d3:7b:89:9f:b7:e2:53:82:48:bd:
5f:b8:b4:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:08:37 2026 by rpki-client