Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/JzOppLz49d2UWrVc3_ozRSf9kTs.roa
File: JzOppLz49d2UWrVc3_ozRSf9kTs.roa (raw, json)
Hash identifier: ldBSJ9nX6LcXWYtAXHd0sUG1NRIH+C7iBArXGAv52zU=
Subject key identifier: 27:33:A9:A4:BC:F8:F5:DD:94:5A:B5:5C:DF:FA:33:45:27:FD:91:3B
Certificate issuer: /CN=01626ffd800eafa336bdf343141f03f7c393c364
Certificate serial: 019D005752004D76F5DB5FE42455B27AE772
Authority key identifier: 01:62:6F:FD:80:0E:AF:A3:36:BD:F3:43:14:1F:03:F7:C3:93:C3:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AWJv_YAOr6M2vfNDFB8D98OTw2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/JzOppLz49d2UWrVc3_ozRSf9kTs.roa
Signing time: Wed 18 Mar 2026 09:46:55 +0000
ROA not before: Wed 18 Mar 2026 09:46:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30870
IP address blocks: 83.98.136.0/23 maxlen: 24
83.98.148.0/24 maxlen: 24
83.98.154.0/23 maxlen: 23
83.98.167.0/24 maxlen: 24
83.98.182.0/24 maxlen: 24
83.98.209.0/24 maxlen: 24
83.98.216.0/24 maxlen: 24
83.98.217.0/24 maxlen: 24
83.98.218.0/23 maxlen: 24
83.98.220.0/23 maxlen: 24
89.30.150.0/23 maxlen: 24
89.30.154.0/23 maxlen: 24
89.30.156.0/24 maxlen: 24
89.30.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/AWJv_YAOr6M2vfNDFB8D98OTw2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 15:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:00:57:52:00:4d:76:f5:db:5f:e4:24:55:b2:7a:e7:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01626ffd800eafa336bdf343141f03f7c393c364
Validity
Not Before: Mar 18 09:46:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2733a9a4bcf8f5dd945ab55cdffa334527fd913b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:56:28:84:7c:c3:b2:78:27:74:06:e6:28:e4:
cf:25:e1:63:5a:94:a1:06:d8:0e:79:ac:34:c1:c9:
cf:e1:be:08:3c:6f:5d:72:32:ab:04:ef:2c:86:49:
06:94:83:c6:cb:67:c8:00:ef:90:28:da:f8:d9:e5:
f6:21:0a:08:96:56:50:0b:91:a9:9a:d4:fd:d5:1a:
48:18:7a:e8:02:5b:b1:73:85:d6:76:bf:af:a6:23:
3d:0d:75:b1:c2:93:69:d5:4b:72:b5:fb:78:12:ef:
78:a7:2a:31:43:9a:7b:c5:fa:32:90:a2:5b:33:c8:
c1:a5:78:31:d3:c8:1b:ed:61:68:57:cf:e1:de:98:
90:2f:70:f8:ee:63:3e:8f:4b:07:dd:ca:89:11:61:
90:35:eb:61:16:d9:da:6e:4f:39:73:a2:3c:31:2d:
18:f1:bb:07:34:8f:1d:47:89:53:2a:1c:9b:e2:0b:
a5:24:30:51:61:75:c7:61:a7:b5:e2:9c:46:0e:4c:
10:1b:fe:79:bd:4e:55:50:78:8b:45:83:93:45:5a:
6a:f3:8f:1f:46:d2:d2:02:9d:cc:ba:32:7f:b9:e3:
ec:b3:ce:6f:2a:8e:d0:d7:3a:9c:42:3c:15:2a:c7:
74:ca:fd:7d:f5:42:d3:92:44:cc:e2:aa:8f:a5:fd:
99:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:33:A9:A4:BC:F8:F5:DD:94:5A:B5:5C:DF:FA:33:45:27:FD:91:3B
X509v3 Authority Key Identifier:
keyid:01:62:6F:FD:80:0E:AF:A3:36:BD:F3:43:14:1F:03:F7:C3:93:C3:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AWJv_YAOr6M2vfNDFB8D98OTw2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/JzOppLz49d2UWrVc3_ozRSf9kTs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.98.136.0/23
83.98.148.0/24
83.98.154.0/23
83.98.167.0/24
83.98.182.0/24
83.98.209.0/24
83.98.216.0-83.98.221.255
89.30.150.0/23
89.30.154.0-89.30.157.255
Signature Algorithm: sha256WithRSAEncryption
08:58:6b:a4:cc:30:d8:49:f5:1e:56:e6:d1:55:bc:a5:85:23:
cb:a9:06:7c:9c:64:28:2d:8d:1e:7d:0d:7e:69:49:63:8b:d9:
1e:c3:55:e9:d0:98:65:a9:19:21:db:65:7f:54:54:0a:be:fd:
08:94:e7:6a:41:f3:b4:21:7d:fc:64:39:96:af:c3:c7:a7:83:
01:c3:8d:42:2b:ff:58:d0:d0:d7:5f:71:17:17:20:f0:89:70:
89:d2:f2:29:a7:51:fe:b0:74:9b:8c:1a:f6:51:50:15:60:22:
ff:e8:b3:38:93:14:40:ac:20:a3:2e:a4:94:54:0e:81:f2:19:
6c:e2:81:df:78:2f:11:3c:ea:33:be:48:56:38:7b:1b:fd:92:
40:dd:ad:43:69:f2:fe:01:0b:19:f3:78:93:da:3b:ba:28:00:
ac:e0:74:41:b7:d7:e9:e6:3e:11:c5:9a:be:1b:61:2b:8a:67:
4f:82:eb:ae:f9:a2:72:dc:89:48:a7:36:8d:9d:46:2d:d4:12:
4f:9c:81:8f:39:65:f0:1a:e8:21:51:e9:a7:9d:82:c9:61:40:
af:41:ec:1a:5c:94:4c:1a:96:fc:f2:ec:30:06:df:a2:7a:b4:
91:50:7d:23:e1:43:c2:e0:13:38:31:5d:b2:9c:8a:39:8a:5d:
dc:8a:5d:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:14:23 2026 by rpki-client