Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/jJWl15wqYo7fAX2mieRMcRNKpwc.roa
File: jJWl15wqYo7fAX2mieRMcRNKpwc.roa (raw, json)
Hash identifier: 6k0SbOKQgeP3398DXBEapDI32YYnnGFAuSFvT82tyQ4=
Subject key identifier: 8C:95:A5:D7:9C:2A:62:8E:DF:01:7D:A6:89:E4:4C:71:13:4A:A7:07
Certificate issuer: /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Certificate serial: 019F3C9FA807C1A32764B19F3009DD6DFD55
Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/jJWl15wqYo7fAX2mieRMcRNKpwc.roa
Signing time: Tue 07 Jul 2026 12:48:43 +0000
ROA not before: Tue 07 Jul 2026 12:48:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207590
IP address blocks: 150.107.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3c:9f:a8:07:c1:a3:27:64:b1:9f:30:09:dd:6d:fd:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Validity
Not Before: Jul 7 12:48:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8c95a5d79c2a628edf017da689e44c71134aa707
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7a:fc:30:9a:ef:aa:5e:cf:e7:72:82:3a:22:
c7:c2:5b:0b:71:40:76:73:68:00:20:10:a5:dc:4a:
0e:09:e3:42:0c:2a:c1:33:42:39:ac:86:62:f8:06:
f4:5a:03:1f:28:cd:c7:c4:34:20:b7:29:08:0a:2d:
c3:52:19:11:f9:50:e7:2d:48:2c:7f:f4:98:29:5f:
78:aa:bc:4b:c8:76:cd:46:ca:1f:0f:40:bc:b2:3e:
88:55:b2:f5:26:3c:4d:6d:72:66:56:e1:1a:4c:e8:
55:06:79:cb:7d:e7:ba:ff:85:61:84:bd:19:79:18:
2b:8b:a9:4f:48:48:d0:24:17:3c:1b:4e:cb:1b:27:
0e:6c:ed:93:22:82:09:4c:50:6c:23:16:91:d8:72:
65:17:9d:78:55:ac:cf:5c:64:a7:a4:77:c3:58:0c:
e2:06:fd:cd:a6:49:39:63:1d:df:24:56:57:73:1b:
89:ea:9e:42:dc:bf:c6:42:a4:87:1b:14:7f:7e:c1:
01:f9:23:41:b0:0b:2e:a3:c4:36:41:28:e7:ba:b9:
68:69:ec:07:e4:9f:9f:8a:f1:b9:d1:33:28:35:f6:
0f:ba:ca:22:9a:eb:e7:26:9a:e1:a4:de:a5:61:67:
c5:96:97:d0:82:a4:eb:8f:5c:94:f5:a7:df:39:25:
23:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:95:A5:D7:9C:2A:62:8E:DF:01:7D:A6:89:E4:4C:71:13:4A:A7:07
X509v3 Authority Key Identifier:
keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/jJWl15wqYo7fAX2mieRMcRNKpwc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.107.49.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:0a:ae:9f:3f:b3:00:24:f1:16:cb:c1:82:8e:ce:74:53:65:
61:71:b7:8b:10:4d:0b:25:2a:8b:ec:6a:f5:f5:9f:04:de:95:
b2:94:14:09:59:da:22:1b:6d:82:03:a3:f5:60:46:dd:2b:9f:
7b:13:c4:da:57:cd:af:ad:5f:1e:22:f8:18:bc:eb:85:67:5e:
2f:25:6a:b2:9e:36:62:ca:b8:4c:68:69:43:a0:f4:33:60:92:
85:d8:2b:b0:2c:d7:ca:1b:e1:3c:b4:85:7b:b4:f3:c6:96:d7:
13:d2:79:b8:07:49:be:44:9f:44:fa:48:9d:a8:63:5e:45:f6:
0b:31:e0:bb:e7:71:e8:60:92:70:75:eb:f3:40:1d:db:9a:93:
80:30:c5:8b:3f:82:92:06:fd:bd:83:96:09:1b:0e:7b:7a:1b:
96:7c:55:92:c4:4e:8b:c9:d8:95:e2:b5:49:65:4c:a6:6a:93:
cb:92:d5:43:9d:32:e2:65:79:48:a6:7d:c9:55:7a:5c:b0:07:
3d:af:1d:11:3e:a0:39:04:ab:03:55:69:7e:ce:e5:4c:fe:3c:
b4:d5:c6:35:aa:ff:65:93:f4:ed:84:c1:b9:13:5d:00:14:76:
15:cd:e4:8e:bf:d9:ba:3b:91:44:6f:d3:7e:5c:73:69:b8:ba:
37:4f:ff:55
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ88n6gHwaMnZLGfMAndbf1VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxNGFhNTU3YzNkM2QxZTZiN2YwNTI1YzM0Y2MxZDQ4OGE1
YTkyOTQwHhcNMjYwNzA3MTI0ODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4Yzk1YTVkNzljMmE2MjhlZGYwMTdkYTY4OWU0NGM3MTEzNGFhNzA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3r8MJrvql7P53KCOiLHwlsLcUB2
c2gAIBCl3EoOCeNCDCrBM0I5rIZi+Ab0WgMfKM3HxDQgtykICi3DUhkR+VDnLUgs
f/SYKV94qrxLyHbNRsofD0C8sj6IVbL1JjxNbXJmVuEaTOhVBnnLfee6/4VhhL0Z
eRgri6lPSEjQJBc8G07LGycObO2TIoIJTFBsIxaR2HJlF514VazPXGSnpHfDWAzi
Bv3Npkk5Yx3fJFZXcxuJ6p5C3L/GQqSHGxR/fsEB+SNBsAsuo8Q2QSjnurloaewH
5J+fivG50TMoNfYPusoimuvnJprhpN6lYWfFlpfQgqTrj1yU9affOSUjLwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIyVpdecKmKO3wF9ponkTHETSqcHMB8GA1UdIwQY
MBaAFJFKpVfD09Hmt/BSXDTMHUiKWpKUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1VxbFY4UFQwZWEzOEZKY05Nd2RTSXBha3BRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9kYjk3ZDAtMjhmMi00MzI5LWI4NTYt
NGEzNDhlN2JlNDQxLzEvakpXbDE1d3FZbzdmQVgybWllUk1jUk5LcHdjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS9kYjk3ZDAtMjhmMi00MzI5LWI4NTYtNGEzNDhlN2JlNDQx
LzEva1VxbFY4UFQwZWEzOEZKY05Nd2RTSXBha3BRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlmsxMA0G
CSqGSIb3DQEBCwUAA4IBAQCsCq6fP7MAJPEWy8GCjs50U2VhcbeLEE0LJSqL7Gr1
9Z8E3pWylBQJWdoiG22CA6P1YEbdK597E8TaV82vrV8eIvgYvOuFZ14vJWqynjZi
yrhMaGlDoPQzYJKF2CuwLNfKG+E8tIV7tPPGltcT0nm4B0m+RJ9E+kidqGNeRfYL
MeC753HoYJJwdevzQB3bmpOAMMWLP4KSBv29g5YJGw57ehuWfFWSxE6LydiV4rVJ
ZUymapPLktVDnTLiZXlIpn3JVXpcsAc9rx0RPqA5BKsDVWl+zuVM/jy01cY1qv9l
k/TthMG5E10AFHYVzeSOv9m6O5FEb9N+XHNpuLo3T/9V
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:26:49 2026 by rpki-client