Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/50663b-84b7-4ea6-80d4-5f9e7ab5b2c3/1/JBmrghiTDzjDVafNtUXpcpiVMDA.roa
File: JBmrghiTDzjDVafNtUXpcpiVMDA.roa (raw, json)
Hash identifier: ytVgRgTltCnzpOMTVkA88MbE1jIuSsREsUuIGqNHZ00=
Subject key identifier: 24:19:AB:82:18:93:0F:38:C3:55:A7:CD:B5:45:E9:72:98:95:30:30
Certificate issuer: /CN=cec87345742b9d5801b25323c827275ae0f94ad9
Certificate serial: 019F65EB4A9D3A2C627F08F86483E14DA88E
Authority key identifier: CE:C8:73:45:74:2B:9D:58:01:B2:53:23:C8:27:27:5A:E0:F9:4A:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zshzRXQrnVgBslMjyCcnWuD5Stk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/50663b-84b7-4ea6-80d4-5f9e7ab5b2c3/1/JBmrghiTDzjDVafNtUXpcpiVMDA.roa
Signing time: Wed 15 Jul 2026 13:15:46 +0000
ROA not before: Wed 15 Jul 2026 13:15:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3215
IP address blocks: 91.212.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/50663b-84b7-4ea6-80d4-5f9e7ab5b2c3/1/zshzRXQrnVgBslMjyCcnWuD5Stk.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/50663b-84b7-4ea6-80d4-5f9e7ab5b2c3/1/zshzRXQrnVgBslMjyCcnWuD5Stk.mft
rsync://rpki.ripe.net/repository/DEFAULT/zshzRXQrnVgBslMjyCcnWuD5Stk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 19:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:65:eb:4a:9d:3a:2c:62:7f:08:f8:64:83:e1:4d:a8:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec87345742b9d5801b25323c827275ae0f94ad9
Validity
Not Before: Jul 15 13:15:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2419ab8218930f38c355a7cdb545e97298953030
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2b:9b:f8:c6:e2:5b:ae:d2:3e:21:67:eb:10:
c9:32:9b:be:28:54:d8:47:a2:19:e7:cf:98:6f:1c:
dc:ed:08:0e:2f:b5:23:3c:a9:38:5f:c4:85:d4:e2:
99:f3:ea:f9:29:a9:19:3f:68:f0:0e:55:79:0d:95:
e2:13:1b:a1:69:69:ba:2e:f5:be:4a:76:a5:49:cb:
4c:86:52:84:ba:fd:4d:f2:21:e5:cc:b6:e9:fb:e0:
43:22:b0:0b:90:79:58:e0:00:1c:94:97:7b:af:df:
f0:59:8e:1f:76:54:bf:df:e4:ef:71:b6:be:57:a7:
24:e8:bf:6a:32:aa:47:3e:7b:81:b8:9b:24:3f:1b:
2a:fd:82:6e:08:87:e5:77:4d:a0:75:a6:a9:96:f4:
19:4f:14:04:64:8e:01:91:8d:64:74:c7:be:bf:68:
e9:39:1c:7f:d2:ae:6d:ab:9a:8d:b4:41:3f:ff:ca:
8e:be:31:f3:1a:25:52:ef:50:68:1d:b5:ed:14:66:
0a:89:e3:32:b3:66:bd:48:9f:1a:30:1c:57:e7:03:
e8:8c:a5:fa:50:83:51:e5:40:92:6f:65:1d:2e:c4:
93:07:eb:6a:4c:10:56:ed:a6:0d:d4:b4:dd:5c:35:
6d:5a:98:e2:bb:6c:00:cf:78:74:8c:76:94:67:96:
e0:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:19:AB:82:18:93:0F:38:C3:55:A7:CD:B5:45:E9:72:98:95:30:30
X509v3 Authority Key Identifier:
keyid:CE:C8:73:45:74:2B:9D:58:01:B2:53:23:C8:27:27:5A:E0:F9:4A:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zshzRXQrnVgBslMjyCcnWuD5Stk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/50663b-84b7-4ea6-80d4-5f9e7ab5b2c3/1/JBmrghiTDzjDVafNtUXpcpiVMDA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/50663b-84b7-4ea6-80d4-5f9e7ab5b2c3/1/zshzRXQrnVgBslMjyCcnWuD5Stk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.128.0/24
Signature Algorithm: sha256WithRSAEncryption
21:04:27:4e:3b:74:77:f6:f3:67:30:1c:3e:60:8e:9d:41:7a:
ea:62:e4:1e:19:68:14:34:1c:c9:3a:dc:76:ec:3d:3e:93:62:
67:c7:ca:f0:80:ec:25:59:ed:06:af:63:8a:9c:d5:50:73:15:
20:7f:17:e8:82:9c:c2:f8:9c:60:fb:a2:cf:85:07:4f:6c:79:
8f:3f:53:ae:e6:af:d6:97:64:2d:f3:91:09:c8:10:ed:c3:3f:
74:8c:a4:ad:da:94:f8:ad:6c:8e:73:76:33:c3:34:77:a1:d4:
bd:04:a4:5f:0e:d0:a3:33:a6:4e:87:0c:6e:46:a9:57:4d:10:
e4:04:c2:af:4b:2e:a1:26:ff:35:66:48:eb:a3:ca:e3:dd:83:
5d:5f:be:ce:a4:7a:61:c9:44:7f:ee:80:f8:c1:c4:2e:9b:bd:
a4:0e:a8:e4:a9:37:b4:83:4b:a4:46:e9:7c:cf:29:2b:65:68:
ce:59:80:c2:c3:a3:a8:6a:a2:0f:66:7f:84:1b:5f:c3:bc:53:
5d:ff:79:74:2e:6c:e1:2d:58:b2:9b:a2:94:91:95:29:44:c6:
9b:5d:b5:fb:18:24:16:af:10:b4:0a:91:cd:c5:53:a8:93:af:
97:3d:c7:d4:92:ee:0e:7f:fd:b8:17:89:1f:8f:5c:7a:1d:9b:
3b:c0:70:26
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ9l60qdOixifwj4ZIPhTaiOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlYzg3MzQ1NzQyYjlkNTgwMWIyNTMyM2M4MjcyNzVhZTBm
OTRhZDkwHhcNMjYwNzE1MTMxNTQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNDE5YWI4MjE4OTMwZjM4YzM1NWE3Y2RiNTQ1ZTk3Mjk4OTUzMDMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCub+MbiW67SPiFn6xDJMpu+KFTY
R6IZ58+Ybxzc7QgOL7UjPKk4X8SF1OKZ8+r5KakZP2jwDlV5DZXiExuhaWm6LvW+
SnalSctMhlKEuv1N8iHlzLbp++BDIrALkHlY4AAclJd7r9/wWY4fdlS/3+Tvcba+
V6ck6L9qMqpHPnuBuJskPxsq/YJuCIfld02gdaaplvQZTxQEZI4BkY1kdMe+v2jp
ORx/0q5tq5qNtEE//8qOvjHzGiVS71BoHbXtFGYKieMys2a9SJ8aMBxX5wPojKX6
UINR5UCSb2UdLsSTB+tqTBBW7aYN1LTdXDVtWpjiu2wAz3h0jHaUZ5bgqQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCQZq4IYkw84w1WnzbVF6XKYlTAwMB8GA1UdIwQY
MBaAFM7Ic0V0K51YAbJTI8gnJ1rg+UrZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenNoelJYUXJuVmdCc2xNanlDY25XdUQ1U3RrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC81MDY2M2ItODRiNy00ZWE2LTgwZDQt
NWY5ZTdhYjViMmMzLzEvSkJtcmdoaVREempEVmFmTnRVWHBjcGlWTURBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC81MDY2M2ItODRiNy00ZWE2LTgwZDQtNWY5ZTdhYjViMmMz
LzEvenNoelJYUXJuVmdCc2xNanlDY25XdUQ1U3RrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9SAMA0G
CSqGSIb3DQEBCwUAA4IBAQAhBCdOO3R39vNnMBw+YI6dQXrqYuQeGWgUNBzJOtx2
7D0+k2Jnx8rwgOwlWe0Gr2OKnNVQcxUgfxfogpzC+Jxg+6LPhQdPbHmPP1Ou5q/W
l2Qt85EJyBDtwz90jKSt2pT4rWyOc3YzwzR3odS9BKRfDtCjM6ZOhwxuRqlXTRDk
BMKvSy6hJv81Zkjro8rj3YNdX77OpHphyUR/7oD4wcQum72kDqjkqTe0g0ukRul8
zykrZWjOWYDCw6OoaqIPZn+EG1/DvFNd/3l0LmzhLViym6KUkZUpRMabXbX7GCQW
rxC0CpHNxVOok6+XPcfUku4Of/24F4kfj1x6HZs7wHAm
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:46:33 2026 by rpki-client