Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/JPCr3_vY81NeBUqTeDfzaW6eXRo.roa
File: JPCr3_vY81NeBUqTeDfzaW6eXRo.roa (raw, json)
Hash identifier: jF9K/Fun+0jku3wvd4ix57gJLkHxaoEBd1/tMZkqc+s=
Subject key identifier: 24:F0:AB:DF:FB:D8:F3:53:5E:05:4A:93:78:37:F3:69:6E:9E:5D:1A
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A17170486D0E078B0A9658BA241342DA70
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/JPCr3_vY81NeBUqTeDfzaW6eXRo.roa
Signing time: Sun 25 Oct 2026 05:02:26 +0000
ROA not before: Sun 25 Oct 2026 05:02:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16276
IP address blocks: 5.175.162.0/24 maxlen: 24
5.175.168.0/24 maxlen: 24
5.175.195.0/24 maxlen: 24
5.175.226.0/24 maxlen: 24
5.175.227.0/24 maxlen: 24
5.230.49.0/24 maxlen: 24
5.230.153.0/24 maxlen: 24
5.231.64.0/24 maxlen: 24
5.231.88.0/24 maxlen: 24
5.231.207.0/24 maxlen: 24
5.231.255.0/24 maxlen: 24
85.118.166.0/24 maxlen: 24
89.106.95.0/24 maxlen: 24
94.249.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:71:70:48:6d:0e:07:8b:0a:96:58:ba:24:13:42:da:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Oct 25 05:02:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=24f0abdffbd8f3535e054a937837f3696e9e5d1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:bc:41:8a:8c:de:10:a6:df:47:ef:07:90:32:
65:05:8b:eb:ee:ea:ac:d4:90:81:c7:60:95:1b:e4:
c2:ea:65:25:a8:28:0e:c7:4d:a5:ee:70:43:51:80:
46:e5:1c:1a:0a:0c:08:69:e7:6c:15:5a:24:86:6d:
68:4d:17:f4:70:31:56:f9:b5:39:51:76:ae:d5:c9:
41:1a:ab:80:6a:c3:31:ad:22:b4:b6:4f:d2:dc:3d:
6b:cd:b6:73:83:b2:87:57:65:47:51:2c:e2:96:8b:
61:b9:f1:2d:e1:30:14:6e:7c:c6:c7:6e:4d:1a:22:
00:8a:a0:e2:74:4e:49:4f:7c:44:85:f0:35:a3:06:
df:e5:3d:3f:d7:b2:ed:43:30:67:49:91:92:c4:8e:
ff:63:95:35:a0:16:2d:c4:e9:8c:fa:c2:1a:fe:39:
13:f9:60:3c:e4:bc:7f:5c:b2:9c:93:40:5a:51:70:
af:b9:c7:8e:f0:de:b9:0f:9d:71:02:96:ed:0f:d1:
09:36:35:e1:35:16:01:64:22:f8:c8:7f:2a:c3:ad:
ca:6b:3a:df:d0:da:bb:75:80:b6:ab:67:e0:69:12:
41:70:d7:fc:74:a4:f3:24:57:d0:2d:e4:cd:76:78:
73:f4:62:0e:61:f8:70:28:99:09:36:ea:7f:6f:60:
30:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:F0:AB:DF:FB:D8:F3:53:5E:05:4A:93:78:37:F3:69:6E:9E:5D:1A
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/JPCr3_vY81NeBUqTeDfzaW6eXRo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.162.0/24
5.175.168.0/24
5.175.195.0/24
5.175.226.0/23
5.230.49.0/24
5.230.153.0/24
5.231.64.0/24
5.231.88.0/24
5.231.207.0/24
5.231.255.0/24
85.118.166.0/24
89.106.95.0/24
94.249.154.0/24
Signature Algorithm: sha256WithRSAEncryption
64:99:1a:ed:63:d0:cb:d4:50:2e:3a:90:b4:25:d1:fa:6d:66:
28:de:5c:7d:47:2c:a8:4d:2c:dc:74:87:9d:fe:eb:c6:ac:c5:
b9:8b:37:82:41:e5:13:3d:b8:81:dc:b1:55:eb:49:9f:bd:19:
60:93:98:eb:5f:bd:36:18:62:13:9b:9e:56:00:2d:28:fe:8a:
fc:59:38:09:81:48:2f:1d:22:54:69:4e:5b:76:2d:27:11:c6:
6b:11:bb:af:11:de:2d:b4:76:95:55:a8:2b:63:a9:e4:12:e6:
2a:51:b0:1d:09:ae:f2:f5:0f:96:2b:f8:1f:01:7b:9a:73:0e:
15:7d:00:91:62:9f:b1:7d:1b:22:99:ed:fc:43:32:f0:9b:91:
99:fc:f1:21:a4:15:2b:a0:84:c1:40:9d:ed:0c:eb:4f:12:ac:
5a:47:cd:bc:47:47:58:24:e9:7c:55:e4:ae:c1:8b:6d:64:55:
30:fe:70:9b:63:d6:26:c6:69:ec:1d:f2:61:f6:e5:43:7f:4e:
de:64:cd:90:9c:e6:6e:ff:c0:6a:ad:cf:4c:41:5e:01:a9:d7:
e4:0e:fa:5b:c2:7e:9f:45:82:e3:7e:c1:8c:61:a4:2d:53:e3:
83:8e:c5:f5:34:37:20:77:07:ec:2b:85:f0:03:33:45:e3:a7:
0b:1d:84:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 05:10:54 2026 by rpki-client