Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/jdDMzewtBKUbLISHlFvozSRpGzc.roa
File: jdDMzewtBKUbLISHlFvozSRpGzc.roa (raw, json)
Hash identifier: o28fuwgFVqCMV9PwGcRHvq4z5m6vHXUHTWkbO6d6lCI=
Subject key identifier: 8D:D0:CC:CD:EC:2D:04:A5:1B:2C:84:87:94:5B:E8:CD:24:69:1B:37
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 019FF60C072818ED99D97DE24514AAF96AE5
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/jdDMzewtBKUbLISHlFvozSRpGzc.roa
Signing time: Wed 12 Aug 2026 12:56:51 +0000
ROA not before: Wed 12 Aug 2026 12:56:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3257
IP address blocks: 194.24.192.0/19 maxlen: 24
194.64.32.0/19 maxlen: 24
194.64.104.0/21 maxlen: 24
194.64.112.0/21 maxlen: 24
194.64.132.0/22 maxlen: 24
194.64.136.0/21 maxlen: 24
194.195.128.0/18 maxlen: 24
195.177.0.0/18 maxlen: 24
195.180.0.0/21 maxlen: 24
195.180.14.0/23 maxlen: 24
195.180.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.mft
rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 18:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f6:0c:07:28:18:ed:99:d9:7d:e2:45:14:aa:f9:6a:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Aug 12 12:56:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8dd0cccdec2d04a51b2c8487945be8cd24691b37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:82:b3:43:ce:22:69:7c:3f:0f:9a:2d:d4:8d:
d7:4f:e0:53:a8:f8:42:d3:0e:20:e0:80:c2:21:a3:
29:70:c6:62:11:50:02:f9:51:5c:eb:d3:bd:32:82:
ff:0a:b3:f8:04:60:d9:59:be:f3:fd:66:2c:c9:e8:
a7:d3:74:c0:84:90:91:9d:7f:55:dd:36:94:d8:f1:
53:c9:87:b4:af:13:f1:fe:cf:b6:95:b0:0a:65:4e:
28:c8:af:52:ec:d0:00:75:f5:5f:1d:7c:e0:c7:56:
ad:f6:d3:ec:d9:ff:2c:09:87:c0:4d:bc:ab:56:7f:
14:46:a2:4a:58:a8:f5:d8:3b:8a:d9:d8:33:f3:8b:
a5:25:76:d8:dd:a2:4b:3f:ad:be:ad:2b:7d:fe:89:
2a:b6:cf:f3:3f:a8:9c:b3:b4:d2:bf:ee:77:76:c3:
5d:05:a6:b3:56:75:a6:ed:72:ee:cb:03:53:5a:d5:
0a:70:11:0a:f5:65:61:c8:63:70:a9:ee:ac:49:10:
1a:14:0d:8e:58:8f:7e:4c:8c:60:79:9a:8b:29:08:
3c:c0:b2:ce:8e:08:e0:9a:d4:11:a1:4b:93:bb:62:
23:bf:2e:8b:6d:ff:0c:59:7a:40:88:ab:f3:09:9c:
91:e8:9a:78:90:ad:52:04:00:84:eb:95:f5:b3:0e:
9d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:D0:CC:CD:EC:2D:04:A5:1B:2C:84:87:94:5B:E8:CD:24:69:1B:37
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/jdDMzewtBKUbLISHlFvozSRpGzc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.24.192.0/19
194.64.32.0/19
194.64.104.0-194.64.119.255
194.64.132.0-194.64.143.255
194.195.128.0/18
195.177.0.0/18
195.180.0.0/21
195.180.14.0/23
195.180.64.0/18
Signature Algorithm: sha256WithRSAEncryption
4d:ed:c9:2d:73:d7:c0:21:89:5a:68:8a:96:64:4f:97:8b:16:
b9:ce:7e:9b:57:e3:6a:85:20:b8:89:65:e2:7c:33:5a:c9:97:
03:51:29:32:b0:50:fd:ef:41:b9:59:39:99:ca:9d:91:1d:31:
d0:2b:e3:28:36:b2:4a:57:11:39:61:d4:c6:30:c8:48:c7:89:
b0:f1:55:36:d8:95:5c:bc:91:65:71:11:56:5c:36:c3:89:bc:
ad:4b:28:34:c3:99:8e:06:09:ef:6f:58:34:6b:34:26:cc:fb:
6a:91:f0:8c:4b:b5:99:b5:93:2f:21:fd:91:79:f6:a1:49:b2:
19:59:65:9a:c2:51:3c:4c:76:bf:69:15:d3:ca:6f:a1:82:75:
53:b1:74:90:32:43:f8:b1:e2:22:89:42:13:82:08:ca:fc:de:
15:21:6a:88:eb:03:ff:40:06:e1:e1:7c:be:73:76:ec:ba:4a:
af:a5:ac:5f:f9:e6:4d:98:af:b6:13:47:32:03:70:6d:8e:16:
94:b6:8f:b9:b6:3d:fd:8f:2f:5a:22:79:b4:61:88:e9:ef:f3:
57:33:87:7c:e0:d5:e1:68:e0:c6:df:3a:c6:d0:3b:9a:45:45:
d0:b0:52:6f:86:63:6a:09:0e:dd:32:98:c9:32:37:dd:1b:83:
cf:ab:d1:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 02:47:46 2026 by rpki-client