Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/jdBlRXTUbp1vXymXz_8bg-ZTfQM.roa
File: jdBlRXTUbp1vXymXz_8bg-ZTfQM.roa (raw, json)
Hash identifier: C/G4HU7rJ4t7tqUwqSXG7lRlEn8U9T3tp6gc8Rt2Fz0=
Subject key identifier: 8D:D0:65:45:74:D4:6E:9D:6F:5F:29:97:CF:FF:1B:83:E6:53:7D:03
Certificate issuer: /CN=771c7897c0ee3b269a67d2e1d64e3fd1c15a1d5f
Certificate serial: 019F23689056D6D1009BDBD67684410DAFBB
Authority key identifier: 77:1C:78:97:C0:EE:3B:26:9A:67:D2:E1:D6:4E:3F:D1:C1:5A:1D:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dxx4l8DuOyaaZ9Lh1k4_0cFaHV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/jdBlRXTUbp1vXymXz_8bg-ZTfQM.roa
Signing time: Thu 02 Jul 2026 15:18:02 +0000
ROA not before: Thu 02 Jul 2026 15:18:02 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201744
IP address blocks: 185.224.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/dxx4l8DuOyaaZ9Lh1k4_0cFaHV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/dxx4l8DuOyaaZ9Lh1k4_0cFaHV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dxx4l8DuOyaaZ9Lh1k4_0cFaHV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:90:56:d6:d1:00:9b:db:d6:76:84:41:0d:af:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=771c7897c0ee3b269a67d2e1d64e3fd1c15a1d5f
Validity
Not Before: Jul 2 15:18:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8dd0654574d46e9d6f5f2997cfff1b83e6537d03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b0:a3:d7:eb:a3:ae:01:e9:3a:f0:36:fe:da:
34:6d:bb:ec:96:2a:60:1d:c2:0f:2b:a9:47:92:d3:
7a:d1:5e:9f:e5:c2:8e:12:78:6c:fc:69:ad:dc:f4:
83:66:f8:6b:cb:df:de:09:56:43:44:5f:d3:46:8c:
1c:ff:51:40:c7:89:12:15:33:a5:e9:60:44:bd:87:
ec:1f:82:99:69:36:8e:96:8c:f8:ed:5d:2e:67:9e:
36:d3:e6:2f:d2:46:d9:b1:14:d9:ce:c3:51:05:59:
48:c6:6e:27:74:7e:a9:7f:ab:1b:ef:a4:b3:c1:f8:
fd:fd:83:4c:eb:62:05:1d:24:3a:60:ec:6c:28:c8:
13:b9:87:a7:1d:8f:cd:49:0d:33:0f:7b:da:f7:74:
aa:5f:bc:7c:0a:d7:03:f9:ef:48:11:02:68:07:66:
23:40:90:29:b8:e5:ec:a7:bb:f5:1a:29:39:e3:23:
b6:50:22:4c:9f:8b:37:02:f1:7b:b9:39:f8:47:86:
c4:a0:5f:f8:b2:92:bc:c3:27:ac:8f:36:b8:9c:50:
ae:e5:4d:35:a7:81:e5:e7:ae:85:e9:ad:35:37:45:
02:b3:6d:87:f7:29:bb:71:97:50:d8:ba:03:17:e9:
b0:bf:6d:cd:7e:86:2d:e2:1e:fc:75:02:89:f4:27:
d3:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:D0:65:45:74:D4:6E:9D:6F:5F:29:97:CF:FF:1B:83:E6:53:7D:03
X509v3 Authority Key Identifier:
keyid:77:1C:78:97:C0:EE:3B:26:9A:67:D2:E1:D6:4E:3F:D1:C1:5A:1D:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dxx4l8DuOyaaZ9Lh1k4_0cFaHV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/jdBlRXTUbp1vXymXz_8bg-ZTfQM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/dxx4l8DuOyaaZ9Lh1k4_0cFaHV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.224.216.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:cd:c3:04:b4:23:fc:13:ba:18:83:1d:9c:21:95:c8:5f:94:
69:8e:a1:7d:67:55:ef:6d:98:34:08:8a:af:1b:8d:56:7f:33:
b8:c8:ba:18:08:ef:64:00:ee:a1:47:bc:b4:7e:fa:dd:4e:a6:
0c:de:56:e8:96:da:13:2a:4f:f4:cd:29:e6:ca:dc:a0:97:2d:
41:e2:e3:3e:f4:c4:83:6d:2c:d0:d5:a5:1e:16:d4:94:bd:f1:
35:a4:f0:f4:3f:77:a2:db:5b:ef:b2:a9:d0:b6:89:42:99:a6:
af:1e:0b:05:1d:eb:16:f3:de:25:00:d0:df:a5:4c:3a:38:66:
48:60:28:1c:c4:49:fb:b6:55:3e:3a:e9:57:d5:e0:ad:36:51:
2f:4b:a0:83:f0:74:cb:9d:ce:c9:81:16:ee:e6:14:b8:75:89:
74:57:37:39:88:58:1e:72:ea:da:83:11:8f:2f:ad:f9:b1:b9:
74:c8:69:41:92:9b:70:dc:58:00:ad:92:41:36:21:1d:5c:da:
2f:bf:06:ba:77:6e:08:06:84:0a:a9:a9:c3:40:46:80:34:59:
5b:d0:6c:bd:5a:58:b6:25:2f:ab:2b:3f:5b:ab:97:1b:c4:ae:
1d:ac:00:a7:15:09:f0:67:44:d0:c8:45:39:27:cb:25:f5:06:
55:bf:2d:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:53:37 2026 by rpki-client