Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/1JZVSDOzfYaQbmmlrCX8nS3QiJA.roa
File: 1JZVSDOzfYaQbmmlrCX8nS3QiJA.roa (raw, json)
Hash identifier: XwaKcPmqUft9qPELXhJiZZ7Ex7oK7XMShseYfUSITfU=
Subject key identifier: D4:96:55:48:33:B3:7D:86:90:6E:69:A5:AC:25:FC:9D:2D:D0:88:90
Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Certificate serial: 019D62AE07EE8C3818FF8B6EA5BA578C6BD0
Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/1JZVSDOzfYaQbmmlrCX8nS3QiJA.roa
Signing time: Mon 06 Apr 2026 12:04:25 +0000
ROA not before: Mon 06 Apr 2026 12:04:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 89.44.240.0/24 maxlen: 24
89.44.241.0/24 maxlen: 24
89.44.242.0/24 maxlen: 24
109.122.244.0/24 maxlen: 24
109.122.247.0/24 maxlen: 24
109.122.248.0/24 maxlen: 24
109.122.249.0/24 maxlen: 24
109.122.250.0/24 maxlen: 24
109.122.253.0/24 maxlen: 24
109.122.254.0/24 maxlen: 24
109.122.255.0/24 maxlen: 24
185.3.200.0/24 maxlen: 24
185.239.1.0/24 maxlen: 24
188.212.98.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Apr 2026 14:30:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:62:ae:07:ee:8c:38:18:ff:8b:6e:a5:ba:57:8c:6b:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Validity
Not Before: Apr 6 12:04:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d496554833b37d86906e69a5ac25fc9d2dd08890
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:55:20:98:03:73:49:ae:a2:be:34:29:d4:a1:
8a:e5:2b:bc:c4:d6:34:09:bf:ef:56:1c:07:86:83:
21:41:b8:55:a4:88:54:02:c4:a5:b1:4b:67:83:62:
a0:99:28:5b:2f:b5:3f:9f:fc:f5:fe:95:d8:fe:cf:
6b:69:ba:ca:dc:6c:ab:83:82:28:47:17:e3:d5:0b:
7b:af:71:0b:34:4f:e8:b7:32:bd:3c:d7:6e:a5:a4:
6e:bf:43:e2:e6:80:6c:13:b1:7a:0b:6c:11:44:53:
4d:01:08:03:ff:33:bc:40:2c:e0:e0:d7:1b:5c:ec:
66:6e:a4:d0:99:79:5d:24:b6:0c:8f:94:c5:21:ff:
b4:ff:cd:6e:3b:f1:5a:49:a9:b3:f6:e6:81:73:d1:
8b:08:a5:0a:dd:4f:9f:91:e6:7a:29:47:32:bc:34:
5d:19:bc:07:ef:bf:56:9a:49:22:e6:a9:68:88:42:
f0:89:dd:02:20:29:02:51:c9:91:f6:ac:eb:61:13:
c6:09:34:a6:40:2f:1e:0a:1d:e8:83:3f:41:a1:69:
f1:74:41:6a:bf:d6:91:9e:c5:a8:4a:82:1f:d9:ec:
8f:8f:6d:a7:cb:63:c5:1f:03:16:ee:d7:b8:a7:8a:
45:76:3c:1c:a2:cf:81:a5:ec:93:99:eb:6c:6b:f1:
72:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:96:55:48:33:B3:7D:86:90:6E:69:A5:AC:25:FC:9D:2D:D0:88:90
X509v3 Authority Key Identifier:
keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/1JZVSDOzfYaQbmmlrCX8nS3QiJA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.44.240.0-89.44.242.255
109.122.244.0/24
109.122.247.0-109.122.250.255
109.122.253.0-109.122.255.255
185.3.200.0/24
185.239.1.0/24
188.212.98.0/23
Signature Algorithm: sha256WithRSAEncryption
6b:fd:a2:be:34:64:30:ee:e8:2c:10:a9:67:6f:6a:da:05:de:
86:e5:0d:58:77:2a:c4:f1:5a:e0:d3:29:17:b9:3a:f4:2f:a1:
d0:69:17:09:37:8b:38:68:2b:54:6d:fc:76:47:f4:71:65:13:
d7:45:79:b0:12:79:35:ce:22:a3:fb:9e:e4:77:22:b8:8a:eb:
a8:ff:da:c1:36:ae:e1:78:ea:b6:72:c5:d4:60:12:e0:75:66:
15:7e:ed:4f:14:44:6d:72:d2:ed:5b:80:b9:09:80:9e:07:96:
9a:93:e7:3e:15:15:31:cd:d5:0c:81:28:9a:a5:77:16:bc:ca:
4a:9f:3f:f1:5f:e3:c5:7b:78:50:3f:b0:ab:ba:49:3b:f0:af:
5a:b5:cb:04:4e:ee:5b:20:24:e6:cc:d2:11:fa:59:73:5e:cc:
6a:25:d5:4e:6e:0e:05:04:fe:fe:c3:fc:2a:14:46:24:3c:b5:
92:ff:74:b8:c5:18:98:be:a4:48:30:c6:8a:93:16:e8:c1:11:
14:08:a7:22:7d:cb:9d:a4:23:e7:90:d2:f5:73:8c:89:e7:b7:
24:25:8a:4c:1b:82:dc:cc:07:de:63:df:aa:a4:be:66:17:0d:
24:6f:48:b8:d7:19:7d:9d:41:04:48:07:34:79:bc:68:65:41:
82:9b:a1:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:41:55 2026 by rpki-client