Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/JmfbQWLhMhHD6vzCCUZTbXfxwPo.roa
File: JmfbQWLhMhHD6vzCCUZTbXfxwPo.roa (raw, json)
Hash identifier: J6SZ6CwHT/ttaM4R0MJDUWGLar2oDPboiySCdpUzHnc=
Subject key identifier: 26:67:DB:41:62:E1:32:11:C3:EA:FC:C2:09:46:53:6D:77:F1:C0:FA
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 019F02BEA71FE3845146EFD2690DC1D153AF
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/JmfbQWLhMhHD6vzCCUZTbXfxwPo.roa
Signing time: Fri 26 Jun 2026 07:04:36 +0000
ROA not before: Fri 26 Jun 2026 07:04:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203788
IP address blocks: 192.165.107.0/24 maxlen: 24
192.165.224.0/22 maxlen: 22
192.165.224.0/24 maxlen: 24
192.165.225.0/24 maxlen: 24
192.165.226.0/24 maxlen: 24
192.165.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:02:be:a7:1f:e3:84:51:46:ef:d2:69:0d:c1:d1:53:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jun 26 07:04:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2667db4162e13211c3eafcc20946536d77f1c0fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:6f:65:05:60:38:1a:ae:a1:29:57:fe:88:4b:
a1:c8:d7:dc:26:9e:82:7c:b9:e9:d6:e2:01:be:fc:
bc:e2:b3:5a:7d:be:8c:aa:bd:77:e8:29:84:c3:0e:
83:0b:c5:a5:cb:98:af:ac:0b:d5:7b:74:e0:fc:71:
f6:73:ee:86:8e:bd:e2:35:3f:dd:dd:5b:49:15:6d:
fc:33:26:24:b1:fb:e8:36:7d:27:21:0c:f0:3b:27:
cf:eb:06:e5:08:04:29:d5:85:c4:ea:b1:a6:d0:f2:
c1:3b:db:80:53:65:9b:b4:d5:ee:9b:1e:17:b2:89:
fe:d1:38:28:7c:08:8b:fe:92:f3:87:68:9f:af:66:
ac:fa:a0:f4:99:e6:6c:2e:1b:f4:78:c8:a8:d8:e5:
4e:1d:ce:3a:de:ce:45:24:04:16:34:f1:71:46:4b:
76:98:a9:84:8e:71:e5:4a:82:a9:7a:62:e6:d5:6e:
22:3e:f1:16:85:5b:8a:0c:7c:ff:2f:2b:84:3b:dd:
f0:b0:8d:68:00:71:21:bf:5d:89:c7:32:77:b7:e5:
97:dd:e0:92:15:af:fc:0a:31:96:77:63:ee:2d:30:
30:a2:be:4f:ed:e3:e3:50:cc:aa:ae:47:aa:29:33:
bb:14:f1:42:fb:e7:a3:20:6c:b3:56:22:99:f9:ce:
90:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:67:DB:41:62:E1:32:11:C3:EA:FC:C2:09:46:53:6D:77:F1:C0:FA
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/JmfbQWLhMhHD6vzCCUZTbXfxwPo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.165.107.0/24
192.165.224.0/22
Signature Algorithm: sha256WithRSAEncryption
56:fc:1d:ca:09:d6:3f:b6:a4:22:9c:5e:f0:e7:8a:b5:23:a4:
70:17:b9:35:18:19:53:c9:38:e3:66:6c:71:9b:ba:24:bb:2b:
05:20:3d:c3:87:60:da:fc:15:3e:dc:2c:c8:93:7b:31:cb:d1:
78:e7:c0:86:9c:d4:b5:a6:75:4b:75:5d:f7:aa:b9:cd:b5:29:
ee:68:81:b2:e0:ee:e4:c8:8e:7a:5d:44:73:e5:e0:81:0f:64:
13:32:14:11:72:bb:5c:b5:e1:db:1d:38:eb:ca:68:bd:23:de:
1a:8b:0e:6a:75:95:07:ee:74:65:e5:cc:51:88:8d:77:cc:f5:
71:2a:f8:c5:6b:12:de:b1:bd:01:bf:c8:b1:65:49:20:58:94:
29:b7:6e:c2:54:6d:d3:85:65:be:7e:fb:b3:70:9c:14:14:9b:
b6:9d:07:0e:44:c9:8d:c7:bb:ef:e5:84:cf:11:b0:f8:da:07:
de:da:9f:8e:6f:72:e3:4f:02:a7:84:dd:d7:41:89:6a:c1:0b:
76:7c:f8:92:44:f2:5b:ba:04:ea:6b:d1:62:25:03:81:f2:09:
7a:c7:1b:f5:60:3c:cf:bc:f8:54:da:5e:61:c5:b6:0d:2b:28:
ca:b9:22:e8:7b:3b:2e:ed:a4:99:14:20:15:07:4c:b1:a8:15:
2c:22:ca:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:31:36 2026 by rpki-client