Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/JPem9x4Fx8ROEfZM1n60L_xFLzs.roa
File: JPem9x4Fx8ROEfZM1n60L_xFLzs.roa (raw, json)
Hash identifier: /gUY6piWO+mtsovTuY8mFjDhGnLbv6tZ1G0mQVpG6Ng=
Subject key identifier: 24:F7:A6:F7:1E:05:C7:C4:4E:11:F6:4C:D6:7E:B4:2F:FC:45:2F:3B
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019E8D57962824CEC56C0E32E7D6D4C58B2C
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/JPem9x4Fx8ROEfZM1n60L_xFLzs.roa
Signing time: Wed 03 Jun 2026 11:56:27 +0000
ROA not before: Wed 03 Jun 2026 11:56:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43260
IP address blocks: 77.90.54.0/24 maxlen: 24
94.249.179.0/24 maxlen: 24
217.69.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8d:57:96:28:24:ce:c5:6c:0e:32:e7:d6:d4:c5:8b:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jun 3 11:56:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=24f7a6f71e05c7c44e11f64cd67eb42ffc452f3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5c:ae:3d:4e:9d:7c:b5:f8:0a:0e:53:fd:e6:
55:79:99:66:11:22:1d:db:4f:c8:76:fb:89:56:37:
6b:97:a9:12:6f:9c:25:f6:76:7e:c0:7b:96:29:67:
37:eb:bb:40:58:32:1e:4c:aa:bb:19:d0:d6:91:57:
74:44:32:80:1c:f9:be:d5:c2:d3:f8:28:5f:4d:98:
ef:68:0c:90:72:89:be:65:f4:59:e7:35:5d:b8:9a:
f4:ba:f0:d0:3b:2c:93:57:7e:21:e0:2c:5c:84:17:
9b:f8:d0:2c:aa:85:70:6c:81:a9:3a:7e:30:05:a7:
f4:cf:6e:73:fa:8a:71:35:fc:9c:b9:0b:5c:e3:5a:
29:89:9e:94:b4:82:10:5b:02:6c:26:02:38:5d:c7:
9e:51:79:96:30:03:f3:47:16:49:b5:cb:84:78:49:
a1:ad:82:f0:2f:01:ba:5b:8f:e5:0c:b4:35:a5:e7:
dc:b7:8b:1b:7f:b6:17:c0:a5:39:15:94:29:f9:15:
07:f5:e0:fd:a8:73:45:77:5e:87:9e:bd:89:5c:99:
90:5d:87:33:2d:ae:81:96:a8:aa:16:8f:91:b9:17:
ae:23:96:70:04:3c:19:3e:41:cc:a2:da:58:c8:8f:
df:6a:a8:a1:6d:e5:85:2c:a5:e0:a3:63:89:02:93:
7e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:F7:A6:F7:1E:05:C7:C4:4E:11:F6:4C:D6:7E:B4:2F:FC:45:2F:3B
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/JPem9x4Fx8ROEfZM1n60L_xFLzs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.54.0/24
94.249.179.0/24
217.69.166.0/24
Signature Algorithm: sha256WithRSAEncryption
19:56:0b:e0:4b:22:5d:3d:f2:f2:6c:52:e5:31:43:da:2a:bb:
52:c2:46:20:44:56:c0:b6:21:59:8b:93:7d:f1:d5:8e:2b:45:
b4:1d:c5:33:57:0e:7f:54:ee:6c:7e:1e:13:ad:92:17:38:dc:
77:5c:1e:54:25:67:d5:c8:7e:23:64:92:61:73:6b:8f:2c:ac:
40:0c:ad:40:8e:f5:9e:2e:cd:44:e5:a9:ef:9e:62:c0:5e:27:
8f:3d:34:02:87:c1:a1:03:47:02:4b:72:c3:22:89:a2:24:35:
97:cb:ab:1f:90:0b:07:d9:99:08:e3:ba:3d:58:69:ae:80:93:
bd:d7:57:f2:ed:62:ca:f4:bd:34:6e:df:4d:04:1a:8b:af:88:
bf:a9:98:7e:3c:51:ff:dd:b0:6c:11:c3:ca:7d:2f:95:07:22:
ab:28:ef:25:a6:a2:ff:6b:21:64:e7:81:90:b6:0e:8e:ef:48:
e6:7c:26:ab:34:89:28:99:bc:74:52:af:a7:b8:e6:30:0c:80:
c1:a9:6a:4b:6c:75:06:50:77:c4:51:50:c9:7e:7c:de:8f:49:
6d:b4:6a:fe:3f:5f:dc:94:0c:7b:cf:c7:0a:d7:ab:20:e0:88:
b9:ae:50:58:59:23:39:10:81:b3:d9:ba:a3:25:15:12:f6:49:
41:c2:29:64
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZ6NV5YoJM7FbA4y59bUxYssMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjYwNjAzMTE1NjI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNGY3YTZmNzFlMDVjN2M0NGUxMWY2NGNkNjdlYjQyZmZjNDUyZjNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1yuPU6dfLX4Cg5T/eZVeZlmESId
20/IdvuJVjdrl6kSb5wl9nZ+wHuWKWc367tAWDIeTKq7GdDWkVd0RDKAHPm+1cLT
+ChfTZjvaAyQcom+ZfRZ5zVduJr0uvDQOyyTV34h4CxchBeb+NAsqoVwbIGpOn4w
Baf0z25z+opxNfycuQtc41opiZ6UtIIQWwJsJgI4XceeUXmWMAPzRxZJtcuEeEmh
rYLwLwG6W4/lDLQ1pefct4sbf7YXwKU5FZQp+RUH9eD9qHNFd16Hnr2JXJmQXYcz
La6BlqiqFo+RuReuI5ZwBDwZPkHMotpYyI/faqihbeWFLKXgo2OJApN+bwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFCT3pvceBcfEThH2TNZ+tC/8RS87MB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvSlBlbTl4NEZ4OFJPRWZaTTFuNjBMX3hGTHpzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQATVo2AwQA
XvmzAwQA2UWmMA0GCSqGSIb3DQEBCwUAA4IBAQAZVgvgSyJdPfLybFLlMUPaKrtS
wkYgRFbAtiFZi5N98dWOK0W0HcUzVw5/VO5sfh4TrZIXONx3XB5UJWfVyH4jZJJh
c2uPLKxADK1AjvWeLs1E5anvnmLAXiePPTQCh8GhA0cCS3LDIomiJDWXy6sfkAsH
2ZkI47o9WGmugJO911fy7WLK9L00bt9NBBqLr4i/qZh+PFH/3bBsEcPKfS+VByKr
KO8lpqL/ayFk54GQtg6O70jmfCarNIkombx0Uq+nuOYwDIDBqWpLbHUGUHfEUVDJ
fnzej0lttGr+P1/clAx7z8cK16sg4Ii5rlBYWSM5EIGz2bqjJRUS9klBwilk
-----END CERTIFICATE-----
Generated at Thu Jun 4 07:55:32 2026 by rpki-client