Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/JH5uTJ62x9xljCG6WxIHWN6hSkg.roa
File: JH5uTJ62x9xljCG6WxIHWN6hSkg.roa (raw, json)
Hash identifier: +j2fUpUcfqcS1hwYlCDcpf60GhF3yOQEdu9Ue2ptGdY=
Subject key identifier: 24:7E:6E:4C:9E:B6:C7:DC:65:8C:21:BA:5B:12:07:58:DE:A1:4A:48
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 019F182CE1B38E89DA5F43711E4E99B010EE
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/JH5uTJ62x9xljCG6WxIHWN6hSkg.roa
Signing time: Tue 30 Jun 2026 10:57:02 +0000
ROA not before: Tue 30 Jun 2026 10:57:02 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2914
IP address blocks: 80.96.64.0/23 maxlen: 23
80.97.54.0/24 maxlen: 24
81.180.37.0/24 maxlen: 24
81.180.173.0/24 maxlen: 24
81.181.172.0/24 maxlen: 24
81.181.175.0/24 maxlen: 24
81.181.236.0/22 maxlen: 22
85.120.128.0/22 maxlen: 22
85.120.132.0/22 maxlen: 22
85.122.176.0/22 maxlen: 22
194.102.122.0/23 maxlen: 23
194.102.217.0/24 maxlen: 24
217.156.29.0/24 maxlen: 24
217.156.57.0/24 maxlen: 24
217.156.112.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Jul 2026 14:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:2c:e1:b3:8e:89:da:5f:43:71:1e:4e:99:b0:10:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jun 30 10:57:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=247e6e4c9eb6c7dc658c21ba5b120758dea14a48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:65:1c:3c:65:59:3b:b8:ee:4b:36:a2:d9:83:
05:53:e1:b6:bd:83:b6:f2:1d:51:36:1e:53:05:4e:
04:89:a0:22:0b:81:0a:38:87:ed:64:09:04:79:4c:
25:da:f5:ee:e5:3e:fa:d2:07:9e:6a:d7:8d:af:fd:
1e:2b:21:14:37:59:2f:d3:2f:44:bc:48:da:ba:c8:
03:7a:23:d7:9d:6b:47:59:92:c9:7f:d5:90:31:28:
a4:60:7e:d2:39:1d:54:dd:f5:20:5f:5a:ce:cd:da:
e3:b0:83:61:3c:32:d6:c0:7d:76:cb:d1:87:79:37:
ce:b5:b6:7e:26:81:a0:c7:67:64:e6:3f:0d:ae:4a:
0d:e7:0a:6a:ad:99:c2:f1:17:d6:24:47:82:b5:a0:
fd:73:0e:03:e6:e3:4e:c0:7c:5c:41:41:8d:a6:7d:
84:93:e5:16:0a:11:ef:f7:47:5c:05:2c:9e:22:17:
92:84:6c:e8:97:e0:99:02:7d:e4:68:5e:16:36:28:
c5:71:33:6a:56:47:5f:e5:ae:8c:48:a7:37:dd:83:
36:b8:75:f2:36:dc:6d:dd:3b:0f:c0:a5:9f:6f:d8:
37:9a:75:75:47:6d:4f:78:87:bc:8a:90:45:e9:41:
ee:64:9e:bb:9b:60:e1:2c:99:b8:03:c8:41:ce:98:
91:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:7E:6E:4C:9E:B6:C7:DC:65:8C:21:BA:5B:12:07:58:DE:A1:4A:48
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/JH5uTJ62x9xljCG6WxIHWN6hSkg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.96.64.0/23
80.97.54.0/24
81.180.37.0/24
81.180.173.0/24
81.181.172.0/24
81.181.175.0/24
81.181.236.0/22
85.120.128.0/21
85.122.176.0/22
194.102.122.0/23
194.102.217.0/24
217.156.29.0/24
217.156.57.0/24
217.156.112.0/22
Signature Algorithm: sha256WithRSAEncryption
64:75:99:4c:cf:a8:c4:24:5f:f1:be:54:7c:da:b2:b6:de:5f:
7c:88:7e:5a:5e:24:3d:8f:55:6a:b4:f4:84:ac:3a:53:54:29:
41:7a:d6:00:48:e9:10:71:d8:85:ab:db:24:0a:3c:bc:1a:a5:
57:88:88:1d:93:18:5f:ea:b3:79:20:99:a8:44:4e:f8:ee:bd:
81:7e:74:eb:1a:56:91:40:25:a6:f4:a8:d1:3c:c7:1c:54:06:
58:c6:4c:d5:31:ec:1c:71:51:32:1a:94:04:9f:db:87:3e:59:
59:54:e5:2f:f8:fe:b8:76:ad:f1:94:ce:f2:e3:b6:ee:12:7b:
ef:e0:5c:8a:2e:42:c0:38:aa:7f:2a:a0:43:cd:d9:ee:e5:fa:
6c:84:31:7a:cd:04:f7:36:bd:3f:0f:47:0f:d4:eb:10:56:7c:
78:35:ed:39:88:ab:e7:62:04:36:42:f3:4b:e8:6b:9f:2f:84:
a8:04:c9:e9:fb:e3:e7:26:7e:85:99:ab:5b:d9:22:28:bb:9a:
8f:f2:dc:d5:74:ec:3b:42:b5:f4:09:99:f6:6d:ca:54:a2:4a:
2f:93:64:3d:f5:a9:62:32:1b:5c:36:ae:d0:ee:b8:5e:30:da:
f6:49:aa:c4:df:c3:6e:ec:79:d5:34:87:3b:f5:f8:e0:15:d1:
68:d4:f1:02
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgISAZ8YLOGzjonaX0NxHk6ZsBDuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh
MTU3MjIwHhcNMjYwNjMwMTA1NzAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNDdlNmU0YzllYjZjN2RjNjU4YzIxYmE1YjEyMDc1OGRlYTE0YTQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmGUcPGVZO7juSzai2YMFU+G2vYO2
8h1RNh5TBU4EiaAiC4EKOIftZAkEeUwl2vXu5T760geeateNr/0eKyEUN1kv0y9E
vEjausgDeiPXnWtHWZLJf9WQMSikYH7SOR1U3fUgX1rOzdrjsINhPDLWwH12y9GH
eTfOtbZ+JoGgx2dk5j8NrkoN5wpqrZnC8RfWJEeCtaD9cw4D5uNOwHxcQUGNpn2E
k+UWChHv90dcBSyeIheShGzol+CZAn3kaF4WNijFcTNqVkdf5a6MSKc33YM2uHXy
Ntxt3TsPwKWfb9g3mnV1R21PeIe8ipBF6UHuZJ67m2DhLJm4A8hBzpiRfwIDAQAB
o4ICVzCCAlMwHQYDVR0OBBYEFCR+bkyetsfcZYwhulsSB1jeoUpIMB8GA1UdIwQY
MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt
ZjUyYzQ3YzIyNWRiLzEvSkg1dVRKNjJ4OXhsakNHNld4SUhXTjZoU2tnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi
LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMG0GCCsGAQUFBwEHAQH/BF4wXDBaBAIAATBUAwQBUGBAAwQA
UGE2AwQAUbQlAwQAUbStAwQAUbWsAwQAUbWvAwQCUbXsAwQDVXiAAwQCVXqwAwQB
wmZ6AwQAwmbZAwQA2ZwdAwQA2Zw5AwQC2ZxwMA0GCSqGSIb3DQEBCwUAA4IBAQBk
dZlMz6jEJF/xvlR82rK23l98iH5aXiQ9j1VqtPSErDpTVClBetYASOkQcdiFq9sk
Cjy8GqVXiIgdkxhf6rN5IJmoRE747r2BfnTrGlaRQCWm9KjRPMccVAZYxkzVMewc
cVEyGpQEn9uHPllZVOUv+P64dq3xlM7y47buEnvv4FyKLkLAOKp/KqBDzdnu5fps
hDF6zQT3Nr0/D0cP1OsQVnx4Ne05iKvnYgQ2QvNL6GufL4SoBMnp++PnJn6Fmatb
2SIou5qP8tzVdOw7QrX0CZn2bcpUokovk2Q99aliMhtcNq7Q7rheMNr2SarE38Nu
7HnVNIc79fjgFdFo1PEC
-----END CERTIFICATE-----
Generated at Tue Jul 7 22:11:25 2026 by rpki-client