Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/2418fe-7819-48ff-9fc6-e50031c6b2c5/1/JWfknnBNHDqUE3M6T3I9yPrA24o.roa
File: JWfknnBNHDqUE3M6T3I9yPrA24o.roa (raw, json)
Hash identifier: IOoAUOjkIl51WKcsbMSHfbV6UaLjPVCL/lOBBYW1YHk=
Subject key identifier: 25:67:E4:9E:70:4D:1C:3A:94:13:73:3A:4F:72:3D:C8:FA:C0:DB:8A
Certificate issuer: /CN=16f13701f64a3116dcb5bb29c55965e4e865272e
Certificate serial: 019F57A475F76072C17965D3CAA6E1045563
Authority key identifier: 16:F1:37:01:F6:4A:31:16:DC:B5:BB:29:C5:59:65:E4:E8:65:27:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FvE3AfZKMRbctbspxVll5OhlJy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/2418fe-7819-48ff-9fc6-e50031c6b2c5/1/JWfknnBNHDqUE3M6T3I9yPrA24o.roa
Signing time: Sun 12 Jul 2026 18:43:43 +0000
ROA not before: Sun 12 Jul 2026 18:43:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 185.60.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/2418fe-7819-48ff-9fc6-e50031c6b2c5/1/FvE3AfZKMRbctbspxVll5OhlJy4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/2418fe-7819-48ff-9fc6-e50031c6b2c5/1/FvE3AfZKMRbctbspxVll5OhlJy4.mft
rsync://rpki.ripe.net/repository/DEFAULT/FvE3AfZKMRbctbspxVll5OhlJy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:57:a4:75:f7:60:72:c1:79:65:d3:ca:a6:e1:04:55:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16f13701f64a3116dcb5bb29c55965e4e865272e
Validity
Not Before: Jul 12 18:43:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2567e49e704d1c3a9413733a4f723dc8fac0db8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:dc:7f:b4:14:8b:2a:9e:30:e1:25:71:03:4f:
45:f5:43:b2:61:86:c7:2a:fc:a2:cf:b2:2d:96:e6:
5f:fb:30:0e:9c:d2:7e:4d:50:da:41:a5:14:fa:25:
b0:dc:97:97:ce:4e:5b:cf:ea:6f:69:c9:6e:9a:51:
57:69:80:b9:cf:50:2e:1b:36:aa:4d:9a:94:6b:e2:
37:1c:be:48:8e:d3:fc:bc:f3:28:86:b3:90:43:0e:
d7:47:dc:80:59:18:c7:2c:55:6c:ba:2a:56:24:cf:
75:99:56:d7:32:8e:2c:cd:87:d5:04:59:ba:d1:1d:
ab:5f:53:c6:15:f8:ff:64:13:4b:c8:11:8e:49:b6:
60:a0:6c:bd:ee:c6:79:9b:e7:92:55:a5:fc:84:b0:
4a:f5:e3:34:51:39:a5:a0:a5:6c:b8:aa:d0:ad:74:
d2:31:c6:ee:49:51:8a:19:2a:3a:7b:73:88:3e:e8:
a1:86:8b:bc:4a:c2:e5:87:9e:97:99:8e:6c:37:ce:
50:d6:5b:62:83:ef:ac:8e:f3:c9:ae:ef:61:5e:b3:
52:c6:2e:a2:f4:6e:b4:2b:74:ca:1c:c4:d6:64:34:
1e:38:65:df:7e:79:48:37:cb:a8:99:3a:5a:fa:08:
04:b2:8b:2f:2e:25:62:a8:5f:41:81:66:1a:43:64:
9b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:67:E4:9E:70:4D:1C:3A:94:13:73:3A:4F:72:3D:C8:FA:C0:DB:8A
X509v3 Authority Key Identifier:
keyid:16:F1:37:01:F6:4A:31:16:DC:B5:BB:29:C5:59:65:E4:E8:65:27:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FvE3AfZKMRbctbspxVll5OhlJy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/2418fe-7819-48ff-9fc6-e50031c6b2c5/1/JWfknnBNHDqUE3M6T3I9yPrA24o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/2418fe-7819-48ff-9fc6-e50031c6b2c5/1/FvE3AfZKMRbctbspxVll5OhlJy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.60.223.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:88:78:e9:b9:63:fd:c5:93:84:89:f9:47:1d:65:0b:eb:35:
09:45:89:3d:23:69:ee:f4:e6:50:92:19:f4:db:6c:7f:a2:6f:
4a:01:bb:59:02:c1:2e:7d:e4:e6:df:e6:8c:73:2f:86:b2:d7:
c5:5b:7a:c2:0b:d7:83:a6:29:9d:f6:55:3f:0f:47:d6:66:0e:
7d:f9:96:94:f1:8b:e0:93:0d:c5:38:6c:ae:71:16:b5:e8:27:
0a:0f:97:59:81:15:00:17:46:42:c4:3f:cc:36:93:4d:2f:88:
56:26:ce:5d:b6:e7:51:4d:49:b8:cc:80:f4:a1:71:ce:87:9e:
4d:f1:18:83:35:93:fe:6c:e1:a8:64:0f:b4:d5:d6:1f:30:c5:
03:7a:33:33:7b:a8:0b:ab:63:88:d7:5f:e4:9f:32:da:9b:50:
0c:ae:5d:eb:88:35:ca:16:59:b4:07:6c:f9:31:f3:d5:80:77:
ea:c3:e4:27:5f:7e:b6:f4:94:30:c1:34:70:58:09:7b:0d:ed:
3c:f5:d9:5f:53:08:76:0d:30:74:b0:1a:b5:5e:81:08:f1:b5:
75:45:8d:b2:ef:0f:c6:83:2f:27:1c:a4:94:e8:e5:69:c5:c6:
9a:d5:83:89:86:b9:77:4f:d1:8d:d1:43:5e:3a:05:c9:c4:ea:
da:f2:00:37
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ9XpHX3YHLBeWXTyqbhBFVjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2ZjEzNzAxZjY0YTMxMTZkY2I1YmIyOWM1NTk2NWU0ZTg2
NTI3MmUwHhcNMjYwNzEyMTg0MzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNTY3ZTQ5ZTcwNGQxYzNhOTQxMzczM2E0ZjcyM2RjOGZhYzBkYjhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxtx/tBSLKp4w4SVxA09F9UOyYYbH
Kvyiz7ItluZf+zAOnNJ+TVDaQaUU+iWw3JeXzk5bz+pvaclumlFXaYC5z1AuGzaq
TZqUa+I3HL5IjtP8vPMohrOQQw7XR9yAWRjHLFVsuipWJM91mVbXMo4szYfVBFm6
0R2rX1PGFfj/ZBNLyBGOSbZgoGy97sZ5m+eSVaX8hLBK9eM0UTmloKVsuKrQrXTS
McbuSVGKGSo6e3OIPuihhou8SsLlh56XmY5sN85Q1ltig++sjvPJru9hXrNSxi6i
9G60K3TKHMTWZDQeOGXffnlIN8uomTpa+ggEsosvLiViqF9BgWYaQ2SbqQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCVn5J5wTRw6lBNzOk9yPcj6wNuKMB8GA1UdIwQY
MBaAFBbxNwH2SjEW3LW7KcVZZeToZScuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnZFM0FmWktNUmJjdGJzcHhWbGw1T2hsSnk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi8yNDE4ZmUtNzgxOS00OGZmLTlmYzYt
ZTUwMDMxYzZiMmM1LzEvSldma25uQk5IRHFVRTNNNlQzSTl5UHJBMjRvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi8yNDE4ZmUtNzgxOS00OGZmLTlmYzYtZTUwMDMxYzZiMmM1
LzEvRnZFM0FmWktNUmJjdGJzcHhWbGw1T2hsSnk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuTzfMA0G
CSqGSIb3DQEBCwUAA4IBAQA6iHjpuWP9xZOEiflHHWUL6zUJRYk9I2nu9OZQkhn0
22x/om9KAbtZAsEufeTm3+aMcy+GstfFW3rCC9eDpimd9lU/D0fWZg59+ZaU8Yvg
kw3FOGyucRa16CcKD5dZgRUAF0ZCxD/MNpNNL4hWJs5dtudRTUm4zID0oXHOh55N
8RiDNZP+bOGoZA+01dYfMMUDejMze6gLq2OI11/knzLam1AMrl3riDXKFlm0B2z5
MfPVgHfqw+QnX3629JQwwTRwWAl7De089dlfUwh2DTB0sBq1XoEI8bV1RY2y7w/G
gy8nHKSU6OVpxcaa1YOJhrl3T9GN0UNeOgXJxOra8gA3
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:26:39 2026 by rpki-client