Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/Jk_N7QSRVi_cTxcu3qy15ogPA68.roa
File: Jk_N7QSRVi_cTxcu3qy15ogPA68.roa (raw, json)
Hash identifier: Rmy9FhhubCl3WFg5IP5VOAwqyczxSE6B2MhGe3ccsM0=
Subject key identifier: 26:4F:CD:ED:04:91:56:2F:DC:4F:17:2E:DE:AC:B5:E6:88:0F:03:AF
Certificate issuer: /CN=29aeeca8aff099b2bae05781dca8dd9027f0da2b
Certificate serial: 019F236910DF60EF26B271031BE8E8C05364
Authority key identifier: 29:AE:EC:A8:AF:F0:99:B2:BA:E0:57:81:DC:A8:DD:90:27:F0:DA:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ka7sqK_wmbK64FeB3KjdkCfw2is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/Jk_N7QSRVi_cTxcu3qy15ogPA68.roa
Signing time: Thu 02 Jul 2026 15:18:35 +0000
ROA not before: Thu 02 Jul 2026 15:18:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202774
IP address blocks: 185.155.32.0/22 maxlen: 22
2a07:9100::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/Ka7sqK_wmbK64FeB3KjdkCfw2is.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/Ka7sqK_wmbK64FeB3KjdkCfw2is.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ka7sqK_wmbK64FeB3KjdkCfw2is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:10:df:60:ef:26:b2:71:03:1b:e8:e8:c0:53:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29aeeca8aff099b2bae05781dca8dd9027f0da2b
Validity
Not Before: Jul 2 15:18:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=264fcded0491562fdc4f172edeacb5e6880f03af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1a:80:ba:ac:0e:d5:01:08:32:29:fa:f3:75:
c5:e8:27:ce:71:43:08:45:65:4b:0a:51:b7:68:78:
1a:55:7b:48:6f:10:e0:36:b5:a9:2f:ab:a8:b1:93:
e6:8e:09:e0:51:dd:3d:11:b6:1e:43:6a:6d:73:87:
46:86:fb:35:70:9b:f0:11:b1:c1:ce:15:b6:b1:5b:
4a:8d:9a:f6:2e:2c:4a:7a:29:6e:6f:44:b5:0c:24:
5a:30:84:68:3e:dd:83:29:01:22:36:65:23:d9:5d:
6c:de:f1:72:c5:32:5c:eb:0d:fb:1e:3e:99:ff:d2:
12:e4:ca:7c:bf:29:19:12:0e:8e:96:ac:1e:83:c6:
c6:89:2e:1d:b9:b7:5e:45:3b:f7:4d:39:8f:57:28:
57:8b:bd:7c:5e:1a:a4:6c:d8:a2:60:35:bf:fd:79:
36:09:a5:a4:09:43:70:d6:a7:0a:05:2a:29:11:3b:
7a:4e:a8:d8:e4:0b:01:4d:90:d4:72:45:c7:bd:3e:
40:10:01:62:1b:1c:ef:66:9b:75:f6:6f:bd:9c:54:
8a:a8:39:c4:8b:45:47:13:31:e3:60:b5:01:07:f7:
e2:96:ce:eb:9d:5b:e8:b3:fc:1d:b7:a0:a7:94:af:
8f:1f:57:a4:8e:17:c0:78:52:c8:dc:c2:7f:20:19:
fa:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:4F:CD:ED:04:91:56:2F:DC:4F:17:2E:DE:AC:B5:E6:88:0F:03:AF
X509v3 Authority Key Identifier:
keyid:29:AE:EC:A8:AF:F0:99:B2:BA:E0:57:81:DC:A8:DD:90:27:F0:DA:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ka7sqK_wmbK64FeB3KjdkCfw2is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/Jk_N7QSRVi_cTxcu3qy15ogPA68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/Ka7sqK_wmbK64FeB3KjdkCfw2is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.155.32.0/22
IPv6:
2a07:9100::/29
Signature Algorithm: sha256WithRSAEncryption
0a:92:b2:78:b2:73:61:0f:2c:73:6b:0b:39:97:65:37:b7:08:
45:f6:61:89:f6:a0:95:84:bd:8a:51:2b:44:24:96:7b:e2:a2:
dc:d6:a0:e4:e7:9f:f1:f9:69:5e:b4:c4:87:87:de:af:09:8c:
c0:27:55:b4:c8:f3:f0:36:a2:39:f2:db:cb:dd:0e:ca:10:51:
f2:3f:ce:79:fb:f5:8c:8b:93:22:d9:7f:3a:d8:6d:ff:ad:3a:
c9:fe:98:59:68:82:af:81:68:6b:e0:6a:e0:3f:62:7c:ec:46:
0c:6f:cc:3a:6d:c4:98:03:54:c5:c5:2a:9f:26:18:76:d9:1f:
b3:27:d7:92:54:ff:be:03:c1:94:d5:92:29:85:a6:98:89:a2:
03:11:6b:1c:5c:5c:d8:de:3a:76:f7:02:b8:8d:4b:b7:34:53:
02:97:1c:6c:b1:28:e8:f3:c3:96:f0:37:ce:05:48:b0:7e:e2:
a9:8a:be:0b:54:34:7e:23:c9:75:00:a7:e0:25:d9:8d:27:a1:
90:d8:b3:54:2d:d1:0d:1a:2d:14:8b:f5:0d:7e:63:f0:ec:d8:
39:82:f5:a4:57:48:e7:4c:a3:58:de:04:42:f0:c6:d3:20:e0:
b3:f6:25:81:0c:a9:94:04:ce:43:92:c8:41:04:72:24:0c:20:
78:79:13:ae
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZ8jaRDfYO8msnEDG+jowFNkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5YWVlY2E4YWZmMDk5YjJiYWUwNTc4MWRjYThkZDkwMjdm
MGRhMmIwHhcNMjYwNzAyMTUxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNjRmY2RlZDA0OTE1NjJmZGM0ZjE3MmVkZWFjYjVlNjg4MGYwM2FmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhqAuqwO1QEIMin683XF6CfOcUMI
RWVLClG3aHgaVXtIbxDgNrWpL6uosZPmjgngUd09EbYeQ2ptc4dGhvs1cJvwEbHB
zhW2sVtKjZr2LixKeilub0S1DCRaMIRoPt2DKQEiNmUj2V1s3vFyxTJc6w37Hj6Z
/9IS5Mp8vykZEg6Olqweg8bGiS4dubdeRTv3TTmPVyhXi718XhqkbNiiYDW//Xk2
CaWkCUNw1qcKBSopETt6TqjY5AsBTZDUckXHvT5AEAFiGxzvZpt19m+9nFSKqDnE
i0VHEzHjYLUBB/fils7rnVvos/wdt6CnlK+PH1ekjhfAeFLI3MJ/IBn6qwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFCZPze0EkVYv3E8XLt6steaIDwOvMB8GA1UdIwQY
MBaAFCmu7Kiv8JmyuuBXgdyo3ZAn8NorMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2E3c3FLX3dtYks2NEZlQjNLamRrQ2Z3MmlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS80MGQ5YTUtMjU2Ni00OWUxLWE1N2It
ZDFhYmY0ZWUzMmNiLzEvSmtfTjdRU1JWaV9jVHhjdTNxeTE1b2dQQTY4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS80MGQ5YTUtMjU2Ni00OWUxLWE1N2ItZDFhYmY0ZWUzMmNi
LzEvS2E3c3FLX3dtYks2NEZlQjNLamRrQ2Z3MmlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuZsgMA0E
AgACMAcDBQMqB5EAMA0GCSqGSIb3DQEBCwUAA4IBAQAKkrJ4snNhDyxzaws5l2U3
twhF9mGJ9qCVhL2KUStEJJZ74qLc1qDk55/x+WletMSHh96vCYzAJ1W0yPPwNqI5
8tvL3Q7KEFHyP855+/WMi5Mi2X862G3/rTrJ/phZaIKvgWhr4GrgP2J87EYMb8w6
bcSYA1TFxSqfJhh22R+zJ9eSVP++A8GU1ZIphaaYiaIDEWscXFzY3jp29wK4jUu3
NFMClxxssSjo88OW8DfOBUiwfuKpir4LVDR+I8l1AKfgJdmNJ6GQ2LNULdENGi0U
i/UNfmPw7Ng5gvWkV0jnTKNY3gRC8MbTIOCz9iWBDKmUBM5DkshBBHIkDCB4eROu
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:59:59 2026 by rpki-client