Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JzxFmz3Lxsv9r4_qQHlWmgWNVtI.roa
File: JzxFmz3Lxsv9r4_qQHlWmgWNVtI.roa (raw, json)
Hash identifier: dTmsUkvcV6A8e/27HSCfyw/NpZInwfDk8eJ8C0h4oX8=
Subject key identifier: 27:3C:45:9B:3D:CB:C6:CB:FD:AF:8F:EA:40:79:56:9A:05:8D:56:D2
Certificate issuer: /CN=60c6fb447aed726d2ef931a4296444456262a7fa
Certificate serial: 019F23693B7AFC5B08C65A4B918CC11F2E52
Authority key identifier: 60:C6:FB:44:7A:ED:72:6D:2E:F9:31:A4:29:64:44:45:62:62:A7:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YMb7RHrtcm0u-TGkKWRERWJip_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JzxFmz3Lxsv9r4_qQHlWmgWNVtI.roa
Signing time: Thu 02 Jul 2026 15:18:46 +0000
ROA not before: Thu 02 Jul 2026 15:18:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41956
IP address blocks: 185.6.148.0/24 maxlen: 24
185.6.149.0/24 maxlen: 24
185.6.150.0/24 maxlen: 24
185.6.151.0/24 maxlen: 24
212.30.40.0/24 maxlen: 24
212.30.52.0/24 maxlen: 24
212.30.53.0/24 maxlen: 24
212.30.54.0/24 maxlen: 24
212.30.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/YMb7RHrtcm0u-TGkKWRERWJip_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/YMb7RHrtcm0u-TGkKWRERWJip_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/YMb7RHrtcm0u-TGkKWRERWJip_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 06:02:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:3b:7a:fc:5b:08:c6:5a:4b:91:8c:c1:1f:2e:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60c6fb447aed726d2ef931a4296444456262a7fa
Validity
Not Before: Jul 2 15:18:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=273c459b3dcbc6cbfdaf8fea4079569a058d56d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ed:41:d3:6d:46:da:20:cd:9f:6d:9e:67:57:
06:46:0f:c0:71:f6:a2:01:02:87:eb:76:89:71:7a:
94:1a:a9:d9:72:b6:0a:a7:03:39:b7:b8:1a:fe:f3:
b9:9e:62:8c:38:92:1c:9a:3c:21:36:19:64:ef:90:
45:d6:cc:a5:e6:8c:31:f9:86:3f:84:cc:ba:3b:85:
99:21:c5:cb:07:fd:d2:31:5c:28:f1:f1:f9:aa:18:
2a:06:9f:6a:09:34:6b:6e:fc:70:ba:5b:6f:10:41:
a8:3b:9e:d7:c9:14:e6:18:24:fc:83:1c:db:68:11:
15:e3:db:ce:1e:bd:bb:6f:9a:c2:8b:7a:54:98:4c:
16:8c:2a:03:a6:77:55:64:dd:01:97:c2:5d:32:88:
99:57:80:4d:7c:62:6a:bf:76:b9:17:1e:fc:4f:0f:
02:83:6a:f6:aa:7e:a0:96:a1:a2:5f:72:f9:11:60:
96:89:ce:6e:aa:dd:40:b4:db:55:60:d9:b8:24:de:
44:16:1b:48:0f:6b:ed:09:5f:b6:53:99:c6:8f:a1:
e1:c5:a6:b8:97:e1:d9:a3:f4:de:a5:2d:d4:8b:73:
71:6d:c6:10:dc:cb:86:57:df:d7:9e:3f:8e:e9:d5:
0c:e3:a8:d5:9e:c1:c4:88:bd:c3:10:ac:7c:e4:f5:
4b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:3C:45:9B:3D:CB:C6:CB:FD:AF:8F:EA:40:79:56:9A:05:8D:56:D2
X509v3 Authority Key Identifier:
keyid:60:C6:FB:44:7A:ED:72:6D:2E:F9:31:A4:29:64:44:45:62:62:A7:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YMb7RHrtcm0u-TGkKWRERWJip_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JzxFmz3Lxsv9r4_qQHlWmgWNVtI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/YMb7RHrtcm0u-TGkKWRERWJip_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.6.148.0/22
212.30.40.0/24
212.30.52.0/22
Signature Algorithm: sha256WithRSAEncryption
33:76:9a:3a:c4:f3:d1:34:d8:c2:86:ce:93:73:94:64:38:b0:
a2:af:53:fd:1d:32:af:6c:ac:29:a9:ef:87:95:b7:1b:d2:39:
98:37:05:25:d4:0c:52:74:77:f9:84:c0:ca:da:3b:c9:26:38:
98:72:02:0c:c8:b5:00:35:d6:8a:12:a6:29:bd:f7:3a:4b:8f:
24:eb:47:68:4c:7c:fa:aa:0b:0c:d9:a8:60:7b:af:6a:f4:41:
c2:a0:f6:e9:73:25:5b:3e:c3:7d:a3:56:92:c0:80:46:59:3e:
f9:92:49:50:b1:46:d7:e4:79:3d:4e:db:c2:68:0e:bb:d4:a9:
73:af:50:71:66:d8:b6:f9:de:27:98:af:57:a7:d3:ac:8f:1d:
fb:fe:9d:91:36:2d:64:54:7a:52:91:66:9a:b2:fb:01:36:5f:
66:30:28:36:c5:a4:61:7a:e2:ea:c5:57:80:93:ec:7d:5d:65:
fe:d1:d3:f6:d5:d9:fe:87:c5:ac:39:0c:d7:18:4f:b1:88:f1:
9e:ff:01:ce:14:71:17:f4:e0:24:00:06:9d:75:85:5f:0b:19:
87:58:c4:58:39:9b:e9:68:23:3a:c5:46:9f:96:5c:0a:a9:a9:
16:25:ea:58:63:d8:ba:88:d1:7d:28:70:ac:09:f8:b2:ca:cd:
c4:f0:e6:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 10:51:00 2026 by rpki-client