Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/JSUKkjzzQNFel-tUBsCVnFKxSWI.roa
File: JSUKkjzzQNFel-tUBsCVnFKxSWI.roa (raw, json)
Hash identifier: h4PeqwlAPnGJQc7xx1I84oMj7L10IIBmlxdAiohkAP0=
Subject key identifier: 25:25:0A:92:3C:F3:40:D1:5E:97:EB:54:06:C0:95:9C:52:B1:49:62
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019F7DE397BF6FBA7A3A70166354862EA3E2
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/JSUKkjzzQNFel-tUBsCVnFKxSWI.roa
Signing time: Mon 20 Jul 2026 04:58:15 +0000
ROA not before: Mon 20 Jul 2026 04:58:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213495
IP address blocks: 5.175.183.0/24 maxlen: 24
5.175.188.0/24 maxlen: 24
5.231.56.0/24 maxlen: 24
5.231.106.0/24 maxlen: 24
77.90.40.0/24 maxlen: 24
89.144.47.0/24 maxlen: 24
94.249.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 05:27:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:7d:e3:97:bf:6f:ba:7a:3a:70:16:63:54:86:2e:a3:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jul 20 04:58:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=25250a923cf340d15e97eb5406c0959c52b14962
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:77:7c:82:54:c1:2b:f0:e8:8f:97:58:57:68:
b2:7d:dc:ed:9b:aa:4f:db:6a:bc:4b:fd:61:2c:77:
f6:37:fe:49:7d:d8:02:73:9e:de:46:55:ac:58:ee:
76:3e:03:7a:7e:f0:09:d7:84:28:48:30:f4:7f:db:
fd:4c:86:f2:51:08:9a:50:20:da:4f:9e:3f:67:45:
c5:70:d3:64:de:4b:5e:de:93:40:8b:2c:29:de:bb:
3f:c2:31:eb:8e:f9:f0:ba:bf:97:39:3d:04:ee:c6:
c6:48:3e:2d:36:0f:0c:f5:9d:54:28:19:77:e9:a3:
04:ce:69:cb:47:55:19:58:82:1d:c1:0b:b2:cc:8d:
ff:fe:86:09:07:ef:0e:75:b7:15:84:3e:ae:9c:1b:
2b:3b:06:2a:bf:54:a8:4c:33:31:55:5a:5d:bc:13:
cf:6f:ed:a4:51:f6:db:45:62:a7:b0:ee:4b:ba:89:
53:66:53:fb:98:07:ce:50:d9:fa:40:a7:b1:91:d6:
86:b3:2d:3b:bc:bf:ce:91:26:bd:46:78:bd:63:b2:
5d:8c:1e:e8:df:89:dc:1c:05:6b:34:3a:a6:6b:98:
bb:00:fe:04:a8:68:81:a2:b4:f4:f6:15:08:1a:14:
60:80:33:15:2e:38:81:7c:b3:36:4e:0b:28:8c:00:
68:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:25:0A:92:3C:F3:40:D1:5E:97:EB:54:06:C0:95:9C:52:B1:49:62
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/JSUKkjzzQNFel-tUBsCVnFKxSWI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.183.0/24
5.175.188.0/24
5.231.56.0/24
5.231.106.0/24
77.90.40.0/24
89.144.47.0/24
94.249.207.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:e4:63:42:75:2b:5a:4a:ce:43:e4:37:48:91:bd:c7:3a:48:
e2:21:80:e7:07:64:9c:b9:4c:e3:9e:c3:ad:ca:39:2b:c6:f4:
c7:c8:44:fc:56:f6:9a:8b:f8:09:be:41:a4:19:59:97:cc:76:
b5:68:ff:40:fa:b2:b9:84:34:6a:2b:3b:e1:e9:6a:64:2d:06:
65:cd:7d:ff:c6:6d:81:f2:62:d1:7d:01:08:2c:2b:84:dc:65:
5d:0d:5f:67:c5:2b:1c:45:f5:7c:26:52:b0:81:90:9b:f5:0a:
09:2f:7c:84:d5:79:33:57:16:47:a4:b4:36:00:94:68:ea:52:
ea:a2:62:93:df:90:56:b5:36:2b:b9:cd:ef:85:8b:e9:71:95:
ee:9b:69:7c:26:de:1c:10:95:32:07:db:d3:40:b0:63:e8:19:
1f:f9:60:71:7a:3e:26:f8:ba:9e:d7:83:50:f3:ab:e5:c9:5d:
82:4c:3d:8d:fc:27:ec:ae:90:51:2b:10:44:1a:5b:41:c4:42:
08:b5:14:29:30:00:f2:12:85:36:86:0f:1f:31:d0:93:82:cd:
ac:55:44:c5:55:d3:20:77:35:84:e0:a6:9d:d0:0e:2b:50:d3:
53:07:2a:89:14:d8:3f:2a:a9:89:7e:14:6e:e8:96:35:47:52:
12:f9:11:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:53:18 2026 by rpki-client