Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/Ja7OoCl-OtZdnZSUJ-uTPFvH1Qo.roa
File: Ja7OoCl-OtZdnZSUJ-uTPFvH1Qo.roa (raw, json)
Hash identifier: TYDH5coqqN7vBlTwIJM37WvbHu4Y3+YdwZk0vCbc/PI=
Subject key identifier: 25:AE:CE:A0:29:7E:3A:D6:5D:9D:94:94:27:EB:93:3C:5B:C7:D5:0A
Certificate issuer: /CN=1e36de27974727aa0046b3e9c8d0624674541255
Certificate serial: 019ED03729D9B3411590902D05CFBB57E280
Authority key identifier: 1E:36:DE:27:97:47:27:AA:00:46:B3:E9:C8:D0:62:46:74:54:12:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/Ja7OoCl-OtZdnZSUJ-uTPFvH1Qo.roa
Signing time: Tue 16 Jun 2026 11:35:36 +0000
ROA not before: Tue 16 Jun 2026 11:35:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39707
IP address blocks: 92.39.96.0/21 maxlen: 24
92.39.96.0/24 maxlen: 24
92.39.97.0/24 maxlen: 24
92.39.98.0/24 maxlen: 24
92.39.99.0/24 maxlen: 24
92.39.100.0/24 maxlen: 24
92.39.101.0/24 maxlen: 24
92.39.102.0/24 maxlen: 24
92.39.103.0/24 maxlen: 24
213.234.24.0/21 maxlen: 21
213.234.24.0/24 maxlen: 24
213.234.25.0/24 maxlen: 24
213.234.26.0/24 maxlen: 24
213.234.27.0/24 maxlen: 24
213.234.28.0/24 maxlen: 24
213.234.29.0/24 maxlen: 24
213.234.30.0/24 maxlen: 24
213.234.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft
rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d0:37:29:d9:b3:41:15:90:90:2d:05:cf:bb:57:e2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e36de27974727aa0046b3e9c8d0624674541255
Validity
Not Before: Jun 16 11:35:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=25aecea0297e3ad65d9d949427eb933c5bc7d50a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fb:aa:2c:81:3c:cf:e1:ab:c7:f4:e0:8f:4a:
2f:da:e3:fa:62:66:88:f0:71:b7:bb:9e:bb:0d:4e:
60:bd:a3:f4:d4:08:84:6e:60:fe:bc:8e:c5:65:95:
8a:64:54:00:35:e9:3f:61:3d:7f:53:c4:30:e4:69:
28:ce:ad:33:4a:92:d9:23:74:56:a5:25:e4:76:02:
26:3b:37:19:87:3f:3d:61:8b:c9:44:ac:ae:65:72:
4c:fc:1b:81:50:d1:1e:20:da:a6:e1:e1:fa:84:be:
bb:58:6f:8c:98:c4:9e:da:5b:02:40:82:97:3e:f8:
e5:20:22:14:27:6e:76:66:9a:cf:6d:af:58:69:3c:
76:6d:3e:8a:2e:0d:49:01:ca:c7:90:92:f1:de:79:
15:ad:08:a8:98:f9:cf:3b:7e:9d:62:86:0a:de:ce:
d2:d1:2b:04:6f:05:b5:78:32:95:fa:13:11:3e:64:
5a:1e:07:fd:a8:02:57:ae:1b:58:ad:00:04:bd:66:
7f:24:02:39:70:5f:95:0d:d6:8f:ea:e1:f3:98:c3:
a2:06:94:d5:0a:e5:d5:c6:d7:7e:45:ce:c2:ae:5d:
3e:75:1f:45:15:a0:5b:5e:c6:6d:1a:65:b6:ea:7d:
5c:17:05:b4:91:ae:fb:42:76:59:a4:0d:43:95:be:
e5:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:AE:CE:A0:29:7E:3A:D6:5D:9D:94:94:27:EB:93:3C:5B:C7:D5:0A
X509v3 Authority Key Identifier:
keyid:1E:36:DE:27:97:47:27:AA:00:46:B3:E9:C8:D0:62:46:74:54:12:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/Ja7OoCl-OtZdnZSUJ-uTPFvH1Qo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.39.96.0/21
213.234.24.0/21
Signature Algorithm: sha256WithRSAEncryption
7b:93:31:12:88:e3:97:80:e6:7c:c0:36:89:c9:38:7c:cc:4e:
0e:0d:e0:b4:6f:3d:81:77:ea:af:9e:91:e7:75:f1:6e:e9:7d:
d3:f4:ea:73:4b:fb:46:c7:bd:81:98:e4:6c:3d:5e:1d:86:6d:
cf:bf:4c:75:c2:73:23:52:88:5b:f0:aa:45:53:f7:d6:ba:b9:
b4:88:cc:d2:dc:f8:5c:71:72:85:5b:d7:ce:30:ec:bc:02:80:
24:e9:b2:db:90:56:e7:00:ab:d1:5b:06:fc:74:f4:f2:d4:ae:
e3:a4:d3:cc:1c:a0:e0:31:58:d8:60:af:50:14:79:8e:3f:99:
d5:f3:dc:76:0e:da:4c:cd:c7:a6:d2:04:e1:d5:ab:db:3b:d7:
f2:38:14:d3:5b:13:c1:b9:dc:24:81:3b:71:31:45:32:ad:4e:
cc:bc:3f:a2:3b:7d:de:58:be:8d:87:24:fa:00:61:65:48:00:
e0:f9:e9:9a:9d:13:f6:33:9e:64:bd:1d:64:b6:74:5c:5c:29:
8c:e6:d4:34:83:46:1b:50:3d:f3:cf:1b:4a:aa:fa:e7:77:4b:
89:2a:1d:cc:3c:fb:14:8f:53:bf:1e:fa:17:84:d8:1d:86:ca:
bc:51:18:e1:d7:5b:ce:45:8e:4b:05:e9:c9:c7:8c:03:a9:1e:
17:8d:69:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:38:40 2026 by rpki-client