Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/jrDvIitTTp2csJXmN4U5yDIh1Ig.roa
File: jrDvIitTTp2csJXmN4U5yDIh1Ig.roa (raw, json)
Hash identifier: 8PD2ZwLgEn9XtBCyz3p6oHJr5sV0d/32a2kxt+VQ99k=
Subject key identifier: 8E:B0:EF:22:2B:53:4E:9D:9C:B0:95:E6:37:85:39:C8:32:21:D4:88
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 019E06D7AA20AC243E555E50D321A00FD07F
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/jrDvIitTTp2csJXmN4U5yDIh1Ig.roa
Signing time: Fri 08 May 2026 09:07:37 +0000
ROA not before: Fri 08 May 2026 09:07:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201604
IP address blocks: 193.183.113.0/24 maxlen: 24
193.183.114.0/24 maxlen: 24
194.71.146.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:06:d7:aa:20:ac:24:3e:55:5e:50:d3:21:a0:0f:d0:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: May 8 09:07:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8eb0ef222b534e9d9cb095e6378539c83221d488
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:07:5c:bc:92:a6:a2:fd:cf:c6:c4:b2:53:ae:
d9:20:fe:3e:9c:41:31:ac:54:c3:69:77:b1:f8:6f:
33:f5:05:b1:9b:a1:06:8c:70:91:8e:bc:38:65:9f:
24:29:c6:ac:ac:b1:d0:4d:5d:30:b0:71:97:8b:5f:
da:22:79:0a:a7:43:e0:12:e5:94:75:02:0f:4f:b4:
ca:06:20:00:92:d8:a9:b1:de:93:f0:59:1c:e8:0d:
e0:42:7e:65:5b:11:03:2e:0f:0a:b8:9a:82:86:f3:
81:8a:4c:12:c1:64:b0:a5:f4:88:37:3f:48:46:f4:
b0:71:ce:22:52:38:ff:80:eb:14:2b:a5:a3:be:bd:
21:8e:f7:a6:b4:6b:9f:ac:dd:0f:4c:1e:e0:47:e1:
ff:c0:47:03:e7:79:ba:01:74:7f:07:8a:b8:fa:54:
ab:da:e6:fd:68:53:2a:89:80:65:44:9e:37:96:ca:
e5:aa:21:09:ed:13:6a:8a:aa:91:b0:b5:2b:55:b3:
7d:54:2f:bc:85:41:7f:45:26:33:94:c2:c1:4e:5a:
92:92:0a:9c:9b:ca:19:49:18:dd:86:98:54:98:7e:
85:97:21:5b:c9:e8:4f:ff:c6:cf:12:f0:e3:02:b5:
46:0e:d7:4f:b5:fa:96:c0:83:2e:9f:d8:54:c1:76:
c5:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:B0:EF:22:2B:53:4E:9D:9C:B0:95:E6:37:85:39:C8:32:21:D4:88
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/jrDvIitTTp2csJXmN4U5yDIh1Ig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.183.113.0-193.183.114.255
194.71.146.0/23
Signature Algorithm: sha256WithRSAEncryption
4a:11:14:1d:c9:4d:55:f5:45:2c:c9:a2:61:77:9c:c1:34:e8:
07:a7:da:e7:7d:ec:cf:96:6c:95:5e:d6:c6:94:ee:17:2a:c4:
85:c6:ca:23:62:fb:46:8a:b9:0d:7f:0f:c1:dc:fb:52:9f:40:
f2:d7:e0:d2:84:d4:2f:37:c0:ad:af:e4:4f:f3:05:77:a2:e1:
a3:15:fe:9d:13:52:1d:55:52:16:2a:6c:ba:4d:e4:19:66:33:
a3:dd:fd:f1:a7:80:3a:f0:20:6a:54:fc:28:0f:64:e8:42:eb:
88:f1:8b:b8:fc:42:e4:d8:31:f1:09:3c:11:f1:0c:2e:2a:07:
0a:95:c3:ab:b3:ac:1f:dd:ca:71:29:eb:bc:eb:fe:48:b2:5b:
7d:2e:9b:c5:64:3e:39:bc:17:f3:4a:56:a5:5b:b5:78:db:fd:
20:2c:87:da:b6:22:3b:e9:71:58:59:fb:23:6a:7f:a1:5e:0f:
10:62:90:d2:a9:8b:49:bc:11:95:6c:e1:b5:7f:d6:9e:54:1f:
3b:75:81:1c:72:46:d0:e1:61:93:d7:4f:7e:54:73:1c:99:c9:
56:38:cf:c9:c3:f1:df:16:3b:0b:31:d5:7f:62:f3:b7:80:80:
5d:76:21:53:54:95:19:f2:db:07:e2:78:54:05:e9:b0:d5:18:
03:6b:15:07
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 13:31:29 2026 by rpki-client