Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/JVgD87VrB3I3B1RI_QRymmGn7SA.roa
File: JVgD87VrB3I3B1RI_QRymmGn7SA.roa (raw, json)
Hash identifier: F5b1PPhQTronM+RJBcmWCczkWXAqsUY1bb/t+Vvj6js=
Subject key identifier: 25:58:03:F3:B5:6B:07:72:37:07:54:48:FD:04:72:9A:61:A7:ED:20
Certificate issuer: /CN=eac2c1afd4bdec980506fa07df7c8662d554fa46
Certificate serial: 019D07C90C382D3D7F7A13CC29BE40EFB4A1
Authority key identifier: EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/JVgD87VrB3I3B1RI_QRymmGn7SA.roa
Signing time: Thu 19 Mar 2026 20:28:29 +0000
ROA not before: Thu 19 Mar 2026 20:28:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 395374
IP address blocks: 202.50.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:07:c9:0c:38:2d:3d:7f:7a:13:cc:29:be:40:ef:b4:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eac2c1afd4bdec980506fa07df7c8662d554fa46
Validity
Not Before: Mar 19 20:28:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=255803f3b56b077237075448fd04729a61a7ed20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b6:1d:09:d1:ae:48:84:70:c6:2e:30:cf:59:
82:ac:71:4b:20:26:77:4a:ea:0b:0e:09:09:6a:f1:
27:0a:aa:75:1e:79:c5:ec:c5:d3:55:3d:cd:73:1e:
97:3d:03:36:47:1f:08:df:d6:87:27:43:a8:cb:dc:
bd:5e:b5:d8:e6:a7:c8:fe:11:d0:5d:44:ef:a3:93:
5a:11:c2:46:1a:0a:52:0b:24:bc:c5:3e:ab:e0:a3:
d1:9b:7f:e1:d5:66:6d:e3:60:c7:98:9c:07:7b:3d:
bc:00:e5:59:69:3e:d1:a4:62:c6:7a:fc:8f:1f:09:
88:93:db:87:ba:c0:00:2d:4e:c7:c4:0b:b8:63:1b:
99:9d:10:bc:ee:43:51:e8:4b:f3:43:4e:ba:58:18:
74:b5:99:15:34:4e:f5:74:dc:5e:96:37:b9:2b:ef:
8a:2b:90:a7:0a:f2:78:fd:95:e5:bd:90:8a:7a:2f:
8b:c2:c6:33:e7:df:4b:d1:df:e5:37:cd:8f:ac:c0:
e0:2b:e7:be:08:34:ba:1b:d7:68:8b:22:d0:9e:38:
a3:60:40:3a:6f:0e:59:b1:d3:92:27:fd:66:56:02:
0b:1f:53:0d:ff:aa:94:e3:9b:aa:02:b2:7e:fd:7c:
11:d1:e5:12:49:a9:88:f7:8c:77:a2:bf:82:d5:2d:
44:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:58:03:F3:B5:6B:07:72:37:07:54:48:FD:04:72:9A:61:A7:ED:20
X509v3 Authority Key Identifier:
keyid:EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/JVgD87VrB3I3B1RI_QRymmGn7SA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.50.253.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:e2:ff:02:41:af:2a:28:f0:a1:01:db:82:b0:97:88:a0:2e:
8c:d5:01:00:74:2e:98:c7:24:8d:af:3f:d1:c4:e6:df:e5:12:
99:1f:2a:1b:5a:2f:95:9f:e3:a1:6d:32:d8:31:84:52:6e:9b:
bf:66:ae:db:3f:99:3d:80:ff:09:10:e0:e8:c8:6f:1d:b4:56:
e2:f1:87:25:57:d4:a0:b8:09:ac:eb:85:a7:2d:23:61:65:ee:
41:57:8b:87:77:fa:06:8d:0a:1d:f6:ec:99:de:61:f7:32:5c:
4e:c9:97:ff:50:1b:66:15:df:44:0b:6d:b3:7c:93:e1:13:e5:
d9:1a:ca:9e:98:e4:e2:fc:15:ab:7b:bf:a5:38:1a:2c:98:f5:
a2:8b:d9:09:92:50:86:19:87:78:fd:57:6b:f7:ba:3a:ea:c1:
70:38:47:47:36:44:27:a4:70:26:c1:02:8f:49:0b:92:6c:82:
f1:d7:d4:68:79:56:9e:66:7a:34:f2:9b:6d:c4:85:d2:36:42:
9f:8d:ee:d5:1b:3c:5d:e1:cd:68:55:e5:10:4f:02:2c:eb:55:
4c:f3:df:8f:b3:e9:03:85:81:09:16:f1:3e:ff:79:7b:96:72:
0b:d3:ae:55:de:ee:bc:99:ba:96:4b:65:73:71:30:d0:3a:8e:
fd:21:8f:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:05:55 2026 by rpki-client