Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/JZY_foOujAs2S8oyUiHgzJmfQdc.roa
File: JZY_foOujAs2S8oyUiHgzJmfQdc.roa (raw, json)
Hash identifier: DgfisKHYgXWyrC09kLGXsPVkL/aoRfMRq+KSAiwmCN4=
Subject key identifier: 25:96:3F:7E:83:AE:8C:0B:36:4B:CA:32:52:21:E0:CC:99:9F:41:D7
Certificate issuer: /CN=2b237c5affe93543ae2fe6e1ffed182396eb9bb3
Certificate serial: 019EDA2EE9F9ABF012639E7C742EDB4036D9
Authority key identifier: 2B:23:7C:5A:FF:E9:35:43:AE:2F:E6:E1:FF:ED:18:23:96:EB:9B:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KyN8Wv_pNUOuL-bh_-0YI5brm7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/JZY_foOujAs2S8oyUiHgzJmfQdc.roa
Signing time: Thu 18 Jun 2026 10:02:48 +0000
ROA not before: Thu 18 Jun 2026 10:02:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209324
IP address blocks: 185.107.199.0/24 maxlen: 24
2a06:45c2::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/KyN8Wv_pNUOuL-bh_-0YI5brm7M.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/KyN8Wv_pNUOuL-bh_-0YI5brm7M.mft
rsync://rpki.ripe.net/repository/DEFAULT/KyN8Wv_pNUOuL-bh_-0YI5brm7M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:da:2e:e9:f9:ab:f0:12:63:9e:7c:74:2e:db:40:36:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b237c5affe93543ae2fe6e1ffed182396eb9bb3
Validity
Not Before: Jun 18 10:02:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=25963f7e83ae8c0b364bca325221e0cc999f41d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b4:f2:26:72:59:ff:f5:e2:19:4a:0b:77:0b:
b6:96:e0:1e:4e:0d:52:fa:87:20:93:fd:71:d6:7d:
41:54:6e:e5:61:15:5a:72:7e:6b:4e:e3:1b:ce:da:
68:eb:79:c3:c0:a1:f2:94:87:ac:27:2e:23:a4:aa:
bb:49:08:ac:fc:69:ac:9e:e6:5b:f1:09:53:20:cb:
7e:35:49:ba:63:49:de:f2:ea:b6:9f:14:5d:74:2b:
b4:4c:fb:5c:37:7f:62:d3:85:fa:29:a9:88:50:03:
6c:d1:5b:f5:78:40:cd:21:6b:bb:9a:8e:4d:8c:1a:
d2:e8:98:4e:b8:36:9b:c3:1d:d7:1b:85:87:41:ca:
b6:73:88:02:6d:bb:e0:ce:6d:d0:84:e2:c8:0c:94:
c0:50:46:d2:09:61:dd:f5:52:21:b5:5f:9c:be:a5:
2b:0a:af:c2:8e:6c:1a:ef:8c:86:3c:34:a8:b7:e4:
5f:a2:a9:39:2a:78:e6:b4:28:ce:12:21:30:32:91:
9d:da:d9:06:0b:56:c1:1b:1f:da:7c:79:83:a7:d7:
0f:e0:9b:48:8a:6b:8b:b4:57:10:7d:f1:2e:fc:04:
ba:d1:e6:7a:f6:9e:96:13:c4:a7:49:1b:42:a0:19:
b1:ee:69:f2:a1:ad:74:47:fe:e9:1a:cf:4f:b8:ad:
84:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:96:3F:7E:83:AE:8C:0B:36:4B:CA:32:52:21:E0:CC:99:9F:41:D7
X509v3 Authority Key Identifier:
keyid:2B:23:7C:5A:FF:E9:35:43:AE:2F:E6:E1:FF:ED:18:23:96:EB:9B:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KyN8Wv_pNUOuL-bh_-0YI5brm7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/JZY_foOujAs2S8oyUiHgzJmfQdc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/KyN8Wv_pNUOuL-bh_-0YI5brm7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.107.199.0/24
IPv6:
2a06:45c2::/32
Signature Algorithm: sha256WithRSAEncryption
4a:6f:5d:0f:a6:f7:44:51:21:66:de:a5:f9:52:9e:51:1a:2f:
2b:25:61:40:cf:9b:92:38:b3:54:16:6c:c3:38:7c:0b:8c:1e:
0b:38:a1:2d:ed:4e:27:4a:91:68:b1:9d:c8:c4:b0:e1:43:4a:
04:8e:d7:b2:cb:53:22:22:12:47:bb:1c:bf:fc:f7:d2:a5:ce:
70:3e:37:e7:33:1e:85:fb:63:a9:b5:bf:95:96:ec:fd:52:1c:
38:1d:77:32:3c:a8:49:bf:bb:0f:b6:bb:ff:db:7f:65:06:70:
7c:7c:8b:32:2b:22:a0:c8:6a:49:43:65:b7:10:6f:21:15:09:
29:55:35:96:41:63:b1:65:24:25:35:28:2a:31:22:6e:10:39:
a3:a0:f6:1c:fd:45:c4:ae:16:02:be:87:9f:ef:9d:fb:6f:e3:
a0:3d:ca:bb:43:9a:74:2b:4b:3c:1e:99:76:06:d1:e4:22:c9:
65:b5:27:8d:46:fb:0b:52:48:24:eb:94:db:1d:db:13:b2:d1:
5b:eb:b7:bc:63:f4:dc:bf:74:dc:d5:c2:66:33:2d:10:21:d5:
29:be:f3:e8:ca:00:5a:e3:9a:eb:60:12:ed:5e:50:95:a9:3f:
10:78:4e:c7:7c:46:e4:f9:77:eb:b9:69:c7:4f:aa:f6:4f:61:
eb:f4:57:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 20:32:06 2026 by rpki-client