Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/JpHy1IXUR9emW8WRyQ9wKWFBPHY.roa
File: JpHy1IXUR9emW8WRyQ9wKWFBPHY.roa (raw, json)
Hash identifier: C+pLi3vdcWv6cPyXKJcNebdYvfzTWmkMhrsFshVCZ5g=
Subject key identifier: 26:91:F2:D4:85:D4:47:D7:A6:5B:C5:91:C9:0F:70:29:61:41:3C:76
Certificate issuer: /CN=756127c6cd4e35d98f0a4ba362ce273164971942
Certificate serial: 019F236900410963D5BC91BF09FCC0EFA250
Authority key identifier: 75:61:27:C6:CD:4E:35:D9:8F:0A:4B:A3:62:CE:27:31:64:97:19:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dWEnxs1ONdmPCkujYs4nMWSXGUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/JpHy1IXUR9emW8WRyQ9wKWFBPHY.roa
Signing time: Thu 02 Jul 2026 15:18:31 +0000
ROA not before: Thu 02 Jul 2026 15:18:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209679
IP address blocks: 92.255.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/dWEnxs1ONdmPCkujYs4nMWSXGUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/dWEnxs1ONdmPCkujYs4nMWSXGUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dWEnxs1ONdmPCkujYs4nMWSXGUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:00:41:09:63:d5:bc:91:bf:09:fc:c0:ef:a2:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=756127c6cd4e35d98f0a4ba362ce273164971942
Validity
Not Before: Jul 2 15:18:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2691f2d485d447d7a65bc591c90f702961413c76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ee:92:7b:39:74:af:12:11:e0:03:dc:2b:98:
7d:d2:d6:b8:50:e6:65:38:e7:ca:b0:d3:21:56:15:
7d:c3:bb:b5:1a:4e:39:cd:17:a7:38:27:64:61:2e:
ee:10:ca:5b:1a:a0:dc:42:43:81:13:32:3a:6a:82:
be:da:df:5c:f8:b9:1d:3b:71:a8:91:7c:48:cf:cc:
86:aa:fc:ac:e5:1e:2d:20:3b:18:29:80:00:51:b4:
35:aa:3a:ee:7f:21:5a:1a:8b:37:d0:11:69:47:10:
75:d0:02:0f:c8:fd:7c:26:25:46:28:71:27:60:11:
48:14:66:11:32:03:d7:27:6a:db:d6:74:51:f6:9b:
81:8d:7e:30:dc:37:50:b6:87:bc:22:ad:a9:89:21:
5a:f7:c3:f6:08:72:27:5c:77:2a:6d:a6:12:2b:24:
28:43:d1:2a:73:4f:ec:74:c3:34:e8:f8:ca:8f:f6:
5d:50:4f:f7:96:fa:2f:89:6f:97:21:ab:39:c0:bf:
78:dd:9c:e9:ce:a0:b8:bd:d6:2e:0f:dc:e5:d7:35:
76:8c:1f:c0:8f:96:74:2b:a7:95:d7:ca:6b:7e:67:
c2:40:99:39:25:d2:90:76:3c:6f:b8:78:a7:e7:db:
c1:bd:f4:a8:ea:fd:99:32:fe:f0:4a:1f:3d:6e:fd:
9d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:91:F2:D4:85:D4:47:D7:A6:5B:C5:91:C9:0F:70:29:61:41:3C:76
X509v3 Authority Key Identifier:
keyid:75:61:27:C6:CD:4E:35:D9:8F:0A:4B:A3:62:CE:27:31:64:97:19:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dWEnxs1ONdmPCkujYs4nMWSXGUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/JpHy1IXUR9emW8WRyQ9wKWFBPHY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/dWEnxs1ONdmPCkujYs4nMWSXGUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.255.55.0/24
Signature Algorithm: sha256WithRSAEncryption
07:9a:b0:48:a8:07:71:08:17:3d:b8:ff:04:45:3c:ca:6c:59:
7e:c4:c9:f5:8b:3a:43:f5:e0:a2:d7:92:36:22:92:04:38:fb:
40:57:19:0b:31:c9:64:8d:7a:50:37:d5:83:9b:ae:55:a7:6d:
68:1a:87:6f:e9:2c:50:27:8b:02:22:43:d2:ac:2f:5b:9a:f5:
43:4a:ea:b6:08:d6:ad:1c:df:06:5f:24:68:ad:37:49:26:07:
c0:3d:45:d2:af:27:65:8f:02:f2:9f:03:7b:58:31:fc:06:43:
9f:60:51:8f:cf:c8:72:4b:d5:f3:f0:3a:65:2b:9a:0e:2b:36:
e8:e4:1e:7b:f3:06:d8:0a:01:ca:70:ce:ec:6d:8a:49:7c:0e:
9d:12:1d:8f:53:d7:3f:68:f4:cd:e3:29:87:04:72:a3:8f:7d:
9c:85:f4:df:1d:94:43:c9:42:32:ef:09:88:9b:2d:34:90:62:
1e:96:27:28:17:9c:fe:5a:44:56:55:33:17:de:e0:70:78:c7:
bf:81:5b:9e:b9:fe:b2:c4:da:2f:c8:bc:c2:e2:77:b2:cb:85:
4c:22:79:1c:d4:0e:85:ae:3d:2e:4b:7c:8e:f3:c5:0c:cd:e5:
19:b0:ac:9e:10:ab:af:f9:34:ed:81:c1:93:55:c8:c9:54:5f:
e1:ad:70:20
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaQBBCWPVvJG/CfzA76JQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1NjEyN2M2Y2Q0ZTM1ZDk4ZjBhNGJhMzYyY2UyNzMxNjQ5
NzE5NDIwHhcNMjYwNzAyMTUxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNjkxZjJkNDg1ZDQ0N2Q3YTY1YmM1OTFjOTBmNzAyOTYxNDEzYzc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAye6Sezl0rxIR4APcK5h90ta4UOZl
OOfKsNMhVhV9w7u1Gk45zRenOCdkYS7uEMpbGqDcQkOBEzI6aoK+2t9c+LkdO3Go
kXxIz8yGqvys5R4tIDsYKYAAUbQ1qjrufyFaGos30BFpRxB10AIPyP18JiVGKHEn
YBFIFGYRMgPXJ2rb1nRR9puBjX4w3DdQtoe8Iq2piSFa98P2CHInXHcqbaYSKyQo
Q9Eqc0/sdMM06PjKj/ZdUE/3lvoviW+XIas5wL943ZzpzqC4vdYuD9zl1zV2jB/A
j5Z0K6eV18prfmfCQJk5JdKQdjxvuHin59vBvfSo6v2ZMv7wSh89bv2dbwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCaR8tSF1EfXplvFkckPcClhQTx2MB8GA1UdIwQY
MBaAFHVhJ8bNTjXZjwpLo2LOJzFklxlCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFdFbnhzMU9OZG1QQ2t1allzNG5NV1NYR1VJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8zNDY1ZjMtMDNjMi00ZWFhLWE2NzQt
ODg2MmI1MTczMTdjLzEvSnBIeTFJWFVSOWVtVzhXUnlROXdLV0ZCUEhZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS8zNDY1ZjMtMDNjMi00ZWFhLWE2NzQtODg2MmI1MTczMTdj
LzEvZFdFbnhzMU9OZG1QQ2t1allzNG5NV1NYR1VJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXP83MA0G
CSqGSIb3DQEBCwUAA4IBAQAHmrBIqAdxCBc9uP8ERTzKbFl+xMn1izpD9eCi15I2
IpIEOPtAVxkLMclkjXpQN9WDm65Vp21oGodv6SxQJ4sCIkPSrC9bmvVDSuq2CNat
HN8GXyRorTdJJgfAPUXSrydljwLynwN7WDH8BkOfYFGPz8hyS9Xz8DplK5oOKzbo
5B578wbYCgHKcM7sbYpJfA6dEh2PU9c/aPTN4ymHBHKjj32chfTfHZRDyUIy7wmI
my00kGIelicoF5z+WkRWVTMX3uBweMe/gVueuf6yxNovyLzC4neyy4VMInkc1A6F
rj0uS3yO88UMzeUZsKyeEKuv+TTtgcGTVcjJVF/hrXAg
-----END CERTIFICATE-----
Generated at Fri Jul 24 19:39:02 2026 by rpki-client