Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/JRJ4SfbozCJqCvY80j_FBkJ-m54.roa
File: JRJ4SfbozCJqCvY80j_FBkJ-m54.roa (raw, json)
Hash identifier: /DS9XWSJAmMpzMM5T1ILpih0WphM6TCQgMFbJzTF4Lo=
Subject key identifier: 25:12:78:49:F6:E8:CC:22:6A:0A:F6:3C:D2:3F:C5:06:42:7E:9B:9E
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 019F5BC23DF44F32E97C8743DF068979ECF2
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/JRJ4SfbozCJqCvY80j_FBkJ-m54.roa
Signing time: Mon 13 Jul 2026 13:54:44 +0000
ROA not before: Mon 13 Jul 2026 13:54:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219429
IP address blocks: 62.76.235.0/24 maxlen: 24
192.124.178.0/24 maxlen: 24
194.58.223.0/24 maxlen: 24
194.87.16.0/24 maxlen: 24
194.87.156.0/23 maxlen: 23
194.87.192.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 06:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:5b:c2:3d:f4:4f:32:e9:7c:87:43:df:06:89:79:ec:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jul 13 13:54:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=25127849f6e8cc226a0af63cd23fc506427e9b9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:de:5e:c9:9d:5e:a1:97:8c:c8:fe:67:4b:ed:
0c:c2:bf:ce:44:5a:61:bf:fc:d9:18:2f:2d:19:26:
e3:4d:68:4f:92:ef:a8:04:f2:53:0a:7c:59:a6:4c:
fb:ae:04:92:eb:64:9f:b4:9b:3d:41:25:a1:ab:13:
da:12:45:0a:b2:ff:c3:95:39:50:5e:5e:95:0c:ee:
8a:7f:de:63:0a:fb:37:26:64:f4:7b:0f:cc:21:a9:
64:93:75:4a:8f:6d:7f:f9:12:94:08:5a:63:db:c6:
a9:4e:69:75:49:be:f2:a4:76:a9:d0:94:59:4e:ff:
64:8b:81:c3:74:56:1b:c8:b1:3f:5c:a4:08:7a:7e:
7b:c4:84:93:b3:34:ab:a6:f6:0b:30:3a:90:24:c3:
61:d5:49:34:09:1f:e1:f9:42:47:97:68:61:b6:4c:
cf:2a:2d:c3:d1:3c:8f:ea:6b:57:67:3f:41:32:a3:
f3:2d:14:a9:a7:d7:27:cc:28:3f:7d:c3:95:c2:c9:
ab:63:20:f6:cd:c4:c0:8f:52:d6:58:ff:1e:7c:a0:
86:66:06:c8:e2:c3:de:9d:ba:ba:b6:6e:2b:57:6d:
04:6c:62:d7:48:2d:ee:13:db:76:a0:95:3a:94:ad:
60:32:2a:2c:d7:13:d1:36:f0:87:ed:64:7c:a6:0f:
97:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:12:78:49:F6:E8:CC:22:6A:0A:F6:3C:D2:3F:C5:06:42:7E:9B:9E
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/JRJ4SfbozCJqCvY80j_FBkJ-m54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.235.0/24
192.124.178.0/24
194.58.223.0/24
194.87.16.0/24
194.87.156.0/23
194.87.192.0/22
Signature Algorithm: sha256WithRSAEncryption
56:15:90:1d:ab:8e:10:e9:56:a3:59:8e:3f:86:4f:67:2d:8f:
db:68:57:e9:c2:ed:b7:fe:3f:4f:63:b2:41:a4:b5:c2:3b:6a:
e3:88:1c:f6:24:26:cc:55:b7:f2:26:06:6c:fe:91:9d:2d:55:
0f:2d:b7:c1:66:ff:b4:ad:f1:86:15:50:2e:6a:91:d7:72:7d:
74:47:b9:47:b0:89:e4:72:8c:e9:0a:7c:a1:a9:6c:23:cd:a6:
88:2c:bf:df:30:a2:ff:90:f9:7d:8e:d6:80:4e:12:1a:07:45:
03:0c:2b:b9:9f:f6:3e:35:53:6b:8d:5b:76:84:f6:62:ca:ed:
f6:01:1a:5a:0c:3d:12:ae:8d:d6:6a:7a:42:5d:d7:b0:6b:37:
39:69:76:c2:1d:75:7a:1d:54:3a:7d:6a:8d:5e:5e:60:e9:8d:
dd:f8:84:9d:03:11:96:f9:4d:43:96:66:04:42:ef:3b:4a:e3:
36:2e:24:38:52:e4:ba:56:6b:e3:a3:2b:2f:56:61:4f:eb:b9:
92:4f:89:85:3a:14:73:05:78:2b:fe:80:7c:c7:3c:5e:89:58:
90:78:83:cd:59:c3:56:9c:77:62:a7:46:d1:fb:f9:39:db:01:
ac:59:ec:56:27:2e:78:74:b8:62:ce:d8:56:07:00:4a:ba:cb:
42:24:ad:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:57:36 2026 by rpki-client