Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/391fd1-63ef-44f3-98b7-47109f035207/1/JLLfHMatuxcdEQiT0UQSyxEk5Nw.roa
File: JLLfHMatuxcdEQiT0UQSyxEk5Nw.roa (raw, json)
Hash identifier: qBCZAB7xvXxou+T2GdjhZxyRoHv6x5IT+u6DzlaMiOg=
Subject key identifier: 24:B2:DF:1C:C6:AD:BB:17:1D:11:08:93:D1:44:12:CB:11:24:E4:DC
Certificate issuer: /CN=91ecc58407dc26d0b809dddb4c67d6755dff86fd
Certificate serial: 019F23683387039596D9F8AD9028B018F4D8
Authority key identifier: 91:EC:C5:84:07:DC:26:D0:B8:09:DD:DB:4C:67:D6:75:5D:FF:86:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kezFhAfcJtC4Cd3bTGfWdV3_hv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/391fd1-63ef-44f3-98b7-47109f035207/1/JLLfHMatuxcdEQiT0UQSyxEk5Nw.roa
Signing time: Thu 02 Jul 2026 15:17:39 +0000
ROA not before: Thu 02 Jul 2026 15:17:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15699
IP address blocks: 85.136.82.0/24 maxlen: 32
2a0b:d800::/32 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/391fd1-63ef-44f3-98b7-47109f035207/1/kezFhAfcJtC4Cd3bTGfWdV3_hv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/391fd1-63ef-44f3-98b7-47109f035207/1/kezFhAfcJtC4Cd3bTGfWdV3_hv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/kezFhAfcJtC4Cd3bTGfWdV3_hv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:33:87:03:95:96:d9:f8:ad:90:28:b0:18:f4:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91ecc58407dc26d0b809dddb4c67d6755dff86fd
Validity
Not Before: Jul 2 15:17:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=24b2df1cc6adbb171d110893d14412cb1124e4dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:30:45:07:8b:d4:ec:ea:37:c8:f1:3c:af:45:
d3:1f:56:ea:1d:07:e5:75:cf:20:0d:20:ab:1c:3b:
58:5a:59:94:70:70:ef:67:86:a1:dc:37:bf:db:db:
4b:31:b6:e0:bf:14:c0:c3:f0:fe:f5:e2:43:45:93:
83:9a:46:f4:15:9c:8f:be:1d:93:a8:91:ce:d7:b8:
ea:c1:24:80:04:03:dc:25:c5:ff:06:cd:df:15:07:
cd:83:6a:6f:fc:bb:98:0c:14:f7:7e:e1:9d:35:c8:
f8:d1:5d:f1:ba:9c:2b:14:8c:6e:16:75:9f:c8:14:
0f:50:bb:e4:1c:ef:ac:29:c1:ba:f2:0c:07:b4:aa:
48:4b:fc:7b:0d:ac:46:64:76:3c:53:e7:52:b3:42:
36:03:ae:7e:08:a1:76:95:81:1d:c5:74:ab:6e:af:
ea:58:37:a0:dd:8e:78:34:a3:00:43:20:6b:df:f7:
cd:c1:ae:4e:7f:35:e8:b1:e0:cc:5e:72:43:60:bd:
5d:01:38:81:18:9e:e4:08:2b:76:a8:d0:f9:c4:fa:
fe:55:e8:d8:25:7f:d1:a4:bd:ad:5e:26:3d:3a:57:
c5:fc:21:39:b4:d4:27:00:6a:2b:7f:82:84:9b:4c:
62:82:c9:ee:ab:ae:9e:36:85:2f:9e:fb:d2:66:e9:
43:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:B2:DF:1C:C6:AD:BB:17:1D:11:08:93:D1:44:12:CB:11:24:E4:DC
X509v3 Authority Key Identifier:
keyid:91:EC:C5:84:07:DC:26:D0:B8:09:DD:DB:4C:67:D6:75:5D:FF:86:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kezFhAfcJtC4Cd3bTGfWdV3_hv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/391fd1-63ef-44f3-98b7-47109f035207/1/JLLfHMatuxcdEQiT0UQSyxEk5Nw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/391fd1-63ef-44f3-98b7-47109f035207/1/kezFhAfcJtC4Cd3bTGfWdV3_hv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.136.82.0/24
IPv6:
2a0b:d800::/32
Signature Algorithm: sha256WithRSAEncryption
2f:34:5e:11:95:c4:f5:0c:09:94:14:65:60:36:22:51:86:d9:
bb:4a:dc:98:32:3b:fd:a7:45:2c:e9:c6:e5:c6:b6:6a:27:88:
be:b4:40:69:4d:b6:da:28:75:8a:fa:47:89:99:44:0b:b7:f3:
83:d1:35:16:6c:93:53:f8:5d:53:6a:08:7a:7e:a8:31:10:e1:
3e:65:f3:89:30:b2:9d:c4:5e:7e:1b:7c:8b:b4:a9:4e:55:76:
48:8c:30:1c:1c:57:6d:3a:47:db:ca:d3:57:b2:12:ee:16:e0:
e1:b9:0d:31:cd:5f:6f:f2:cc:20:ca:f2:fa:cc:3c:e1:4f:2f:
07:f5:c0:9a:91:ba:3c:45:4f:d2:a0:36:5a:9b:ed:6a:df:7d:
7a:a3:c4:ba:12:e4:94:43:1f:6a:c0:2a:31:b2:01:8c:17:40:
b6:a0:2e:d4:26:96:80:b4:08:26:5f:6c:be:3f:eb:a1:d4:cf:
51:be:38:57:66:a2:64:5b:1f:71:fd:5d:8d:56:94:b0:bd:d9:
57:80:8b:3c:99:f6:67:96:5c:3f:d6:a2:72:38:88:cc:da:03:
44:a6:ae:9c:84:fe:e9:ed:c6:cb:d5:61:ab:9b:c6:36:38:32:
d2:6b:77:b0:a4:12:a5:a7:2b:53:83:53:8c:ed:25:96:c4:97:
d0:ce:8a:10
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZ8jaDOHA5WW2fitkCiwGPTYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxZWNjNTg0MDdkYzI2ZDBiODA5ZGRkYjRjNjdkNjc1NWRm
Zjg2ZmQwHhcNMjYwNzAyMTUxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNGIyZGYxY2M2YWRiYjE3MWQxMTA4OTNkMTQ0MTJjYjExMjRlNGRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTBFB4vU7Oo3yPE8r0XTH1bqHQfl
dc8gDSCrHDtYWlmUcHDvZ4ah3De/29tLMbbgvxTAw/D+9eJDRZODmkb0FZyPvh2T
qJHO17jqwSSABAPcJcX/Bs3fFQfNg2pv/LuYDBT3fuGdNcj40V3xupwrFIxuFnWf
yBQPULvkHO+sKcG68gwHtKpIS/x7DaxGZHY8U+dSs0I2A65+CKF2lYEdxXSrbq/q
WDeg3Y54NKMAQyBr3/fNwa5OfzXoseDMXnJDYL1dATiBGJ7kCCt2qND5xPr+VejY
JX/RpL2tXiY9OlfF/CE5tNQnAGorf4KEm0xigsnuq66eNoUvnvvSZulDswIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFCSy3xzGrbsXHREIk9FEEssRJOTcMB8GA1UdIwQY
MBaAFJHsxYQH3CbQuAnd20xn1nVd/4b9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2V6RmhBZmNKdEM0Q2QzYlRHZldkVjNfaHYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi8zOTFmZDEtNjNlZi00NGYzLTk4Yjct
NDcxMDlmMDM1MjA3LzEvSkxMZkhNYXR1eGNkRVFpVDBVUVN5eEVrNU53LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi8zOTFmZDEtNjNlZi00NGYzLTk4YjctNDcxMDlmMDM1MjA3
LzEva2V6RmhBZmNKdEM0Q2QzYlRHZldkVjNfaHYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAVYhSMA0E
AgACMAcDBQAqC9gAMA0GCSqGSIb3DQEBCwUAA4IBAQAvNF4RlcT1DAmUFGVgNiJR
htm7StyYMjv9p0Us6cblxrZqJ4i+tEBpTbbaKHWK+keJmUQLt/OD0TUWbJNT+F1T
agh6fqgxEOE+ZfOJMLKdxF5+G3yLtKlOVXZIjDAcHFdtOkfbytNXshLuFuDhuQ0x
zV9v8swgyvL6zDzhTy8H9cCakbo8RU/SoDZam+1q3316o8S6EuSUQx9qwCoxsgGM
F0C2oC7UJpaAtAgmX2y+P+uh1M9RvjhXZqJkWx9x/V2NVpSwvdlXgIs8mfZnllw/
1qJyOIjM2gNEpq6chP7p7cbL1WGrm8Y2ODLSa3ewpBKlpytTg1OM7SWWxJfQzooQ
-----END CERTIFICATE-----
Generated at Fri Jul 24 10:41:54 2026 by rpki-client