Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/JNtINXdphOTbO4iskyGPH_VuIks.roa
File: JNtINXdphOTbO4iskyGPH_VuIks.roa (raw, json)
Hash identifier: NN2JsXnSppDpEcAl5C3/gtPvDxz/VnRmnxMooC0SiXs=
Subject key identifier: 24:DB:48:35:77:69:84:E4:DB:3B:88:AC:93:21:8F:1F:F5:6E:22:4B
Certificate issuer: /CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Certificate serial: 019F6A9477173BA9903D414257CA59EB299E
Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/JNtINXdphOTbO4iskyGPH_VuIks.roa
Signing time: Thu 16 Jul 2026 10:59:02 +0000
ROA not before: Thu 16 Jul 2026 10:59:02 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 84.55.8.0/22 maxlen: 24
84.55.14.0/24 maxlen: 24
88.223.46.0/24 maxlen: 24
88.223.168.0/24 maxlen: 24
95.173.44.0/24 maxlen: 24
95.173.46.0/24 maxlen: 24
95.173.48.0/24 maxlen: 24
95.173.49.0/24 maxlen: 24
95.173.51.0/24 maxlen: 24
95.173.58.0/24 maxlen: 24
95.173.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6a:94:77:17:3b:a9:90:3d:41:42:57:ca:59:eb:29:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Validity
Not Before: Jul 16 10:59:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=24db4835776984e4db3b88ac93218f1ff56e224b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:53:d6:86:90:16:71:d8:a4:26:17:e5:37:33:
e2:f3:a3:5b:23:2f:ae:81:02:ca:ea:d1:22:20:83:
5b:a5:fc:d2:e4:44:90:10:c9:1b:23:f9:ff:03:84:
f8:36:ad:dd:f8:21:93:54:7e:01:75:04:7c:70:9a:
8e:1d:60:49:f5:47:3f:99:a2:2b:a2:00:0e:26:f6:
13:90:4b:16:2a:30:92:64:f4:45:f7:dc:c1:bc:0a:
dc:60:8f:eb:2f:eb:07:74:7c:b3:95:be:bf:a3:af:
55:4a:38:b7:1e:60:7c:22:54:f0:90:59:be:b8:f4:
74:53:ec:26:27:73:4c:97:c3:6f:6b:a3:2d:61:38:
74:f8:6b:e0:05:33:c1:d3:67:f4:56:f0:68:36:1a:
94:6c:d6:5c:c4:22:a5:d6:f1:c8:c7:aa:1a:49:bd:
e7:32:75:e1:83:34:01:a1:1d:fa:58:4b:9b:0a:50:
e3:97:fc:04:bf:18:bc:4e:e6:96:1b:fd:b0:c7:6f:
7c:30:9b:b1:6e:50:12:0d:26:15:c6:21:57:3a:61:
2f:a5:a4:33:12:a4:54:c3:cd:40:6f:c6:9c:80:1e:
70:9f:a5:37:16:23:dd:7a:6a:d5:07:7f:73:8e:77:
4f:4c:64:99:d5:15:d0:7c:08:49:79:0a:05:3f:ae:
ad:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:DB:48:35:77:69:84:E4:DB:3B:88:AC:93:21:8F:1F:F5:6E:22:4B
X509v3 Authority Key Identifier:
keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/JNtINXdphOTbO4iskyGPH_VuIks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.55.8.0/22
84.55.14.0/24
88.223.46.0/24
88.223.168.0/24
95.173.44.0/24
95.173.46.0/24
95.173.48.0/23
95.173.51.0/24
95.173.58.0/24
95.173.60.0/24
Signature Algorithm: sha256WithRSAEncryption
93:29:ad:ba:d1:95:97:e8:9d:cd:88:a3:95:f3:c0:98:32:96:
ad:04:01:0e:3e:2d:51:47:8e:f4:4c:14:d2:a9:b1:a1:5c:42:
30:5d:fe:d8:60:09:57:96:e1:82:3a:3a:10:a6:c6:1a:a8:fd:
21:01:d0:97:1d:50:e1:c3:9d:99:a3:9d:82:ed:dd:87:c1:72:
76:e9:f8:96:f8:e2:ec:17:e3:e3:c2:bb:66:02:14:24:a8:4f:
fd:20:75:27:fa:37:19:cd:5c:87:7f:18:57:3f:00:2d:7c:8b:
76:bc:85:b0:fd:7f:eb:93:cf:24:74:7c:e2:57:4b:60:9c:bf:
a5:62:f5:13:43:96:a5:ae:40:34:53:06:fe:24:84:d3:d8:ea:
22:a2:91:75:38:04:4b:ff:38:bb:dd:9d:4b:a4:3b:9b:aa:60:
c7:e5:b7:f7:0d:ba:25:45:14:0c:81:ef:fb:f8:53:3a:de:b9:
22:d3:bf:cc:b8:a6:cc:0a:72:fe:c2:b5:d3:6d:78:27:d8:bd:
98:5c:a4:e3:27:79:f6:9b:0c:44:b7:09:ed:70:26:d6:5e:17:
44:27:b1:c3:86:1a:47:65:4c:9e:fd:e3:87:cd:f2:33:4e:fb:
44:43:ca:ef:aa:4a:d5:4f:a8:be:96:f5:c9:5e:54:1f:f7:4b:
36:98:6f:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:20:24 2026 by rpki-client