Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/Jct-bojtmbxt_x5VNmNIm0uKO8U.roa
File: Jct-bojtmbxt_x5VNmNIm0uKO8U.roa (raw, json)
Hash identifier: V3elIF3DOOJS+CLWFx+l2Jf9TNtWpA+aW0LeXEH2dM4=
Subject key identifier: 25:CB:7E:6E:88:ED:99:BC:6D:FF:1E:55:36:63:48:9B:4B:8A:3B:C5
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 01A0C2884C6C5B49937BEC37B07C3D2E3598
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/Jct-bojtmbxt_x5VNmNIm0uKO8U.roa
Signing time: Mon 21 Sep 2026 05:55:07 +0000
ROA not before: Mon 21 Sep 2026 05:55:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216078
IP address blocks: 193.178.226.0/24 maxlen: 24
193.200.78.0/24 maxlen: 24
2a0f:9b40::/29 maxlen: 29
2a10:3f80::/29 maxlen: 29
2a13:b4c0::/29 maxlen: 29
2a13:bb40::/29 maxlen: 29
2a14:1100::/29 maxlen: 29
2a14:68c0::/29 maxlen: 29
2a14:6a40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:88:4c:6c:5b:49:93:7b:ec:37:b0:7c:3d:2e:35:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Sep 21 05:55:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=25cb7e6e88ed99bc6dff1e553663489b4b8a3bc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:53:a5:a8:99:f8:db:eb:2c:6c:48:32:ef:3f:
ad:3e:0a:a1:8c:fa:b2:c9:57:68:24:24:76:4c:95:
8e:0e:7f:94:c0:47:a8:9d:69:46:5f:6a:d1:86:a4:
0a:02:a4:a7:a9:cc:af:c9:6d:75:56:a0:bb:c4:c4:
90:68:82:c7:08:d4:f2:5b:cc:17:f2:27:f2:87:cd:
08:7d:59:4f:2c:18:4b:18:b7:db:d8:07:37:4d:50:
06:3a:b8:fc:62:96:db:0c:51:44:e4:78:1b:e2:c3:
96:70:a0:fe:c0:16:d7:5f:9d:c3:21:6e:8f:42:bf:
7e:4a:41:a4:64:43:f0:75:42:dd:6b:48:82:15:71:
44:97:b0:de:6c:e6:c2:96:2f:43:18:5b:d6:01:88:
cb:cc:a9:c1:30:a6:0b:36:b6:d0:79:50:57:a6:cb:
c5:9e:99:e1:a0:d8:e8:b1:c7:7d:29:b9:03:41:3d:
1d:62:85:66:63:39:47:ca:d3:19:f5:95:cd:d6:86:
6b:ef:34:5d:78:d5:04:5d:e8:d8:f0:76:13:95:5e:
21:75:a6:01:75:8b:65:0b:9a:21:3a:61:a9:e2:8c:
0a:3a:20:42:08:79:19:88:ee:3f:94:f9:80:fa:6a:
a7:fd:14:c8:97:57:86:5c:ba:87:5b:b9:50:ea:6c:
70:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:CB:7E:6E:88:ED:99:BC:6D:FF:1E:55:36:63:48:9B:4B:8A:3B:C5
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/Jct-bojtmbxt_x5VNmNIm0uKO8U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.178.226.0/24
193.200.78.0/24
IPv6:
2a0f:9b40::/29
2a10:3f80::/29
2a13:b4c0::/29
2a13:bb40::/29
2a14:1100::/29
2a14:68c0::/29
2a14:6a40::/29
Signature Algorithm: sha256WithRSAEncryption
61:98:01:31:fa:e4:ec:e7:7e:37:8c:1f:84:92:1e:04:73:96:
be:58:b6:4f:1b:11:05:c7:78:ce:41:22:89:45:01:9a:24:b7:
f6:75:5b:6e:2e:a3:66:ae:34:c4:d1:b2:21:d9:c9:86:e0:78:
e3:12:cb:76:64:cb:a5:d3:f8:82:19:a6:e8:57:f6:e9:2c:5c:
27:d4:0a:e2:8f:80:c7:69:a3:d3:3a:bf:72:4b:12:22:ad:12:
f1:ec:4c:f9:43:c5:4f:55:8e:61:1b:06:dd:4e:0e:5a:27:42:
95:c4:6b:d2:ad:62:6c:3b:64:59:fd:fb:55:4d:f3:02:5a:6b:
e3:46:78:a9:8c:49:6f:a5:50:a5:26:53:e3:64:e4:3e:22:95:
98:f7:a2:d7:e3:06:24:3a:d8:a3:4f:29:8e:87:bf:35:1e:61:
56:55:5c:1f:6f:b5:6f:05:f7:a9:a1:a7:87:47:42:1a:49:87:
22:67:48:7a:0e:2d:50:fb:35:c1:52:ab:05:e2:19:a6:80:e8:
66:3e:13:d4:ef:26:b7:ca:5d:9f:e4:c7:4b:a5:d9:fa:a0:74:
83:5f:23:08:14:f9:23:02:2f:79:d4:12:1e:33:05:8f:f1:75:
fe:a5:87:73:fd:bb:f0:79:1a:a3:8a:79:38:0b:8f:a9:bf:a3:
d2:3c:fe:fc
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgISAaDCiExsW0mTe+w3sHw9LjWYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMTQxMTJkMDVlOWQ4NzYxNDlkMjc3OGQ0OGVkYWFhMzI0
ZGIwYTUwHhcNMjYwOTIxMDU1NTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNWNiN2U2ZTg4ZWQ5OWJjNmRmZjFlNTUzNjYzNDg5YjRiOGEzYmM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiVOlqJn42+ssbEgy7z+tPgqhjPqy
yVdoJCR2TJWODn+UwEeonWlGX2rRhqQKAqSnqcyvyW11VqC7xMSQaILHCNTyW8wX
8ifyh80IfVlPLBhLGLfb2Ac3TVAGOrj8YpbbDFFE5Hgb4sOWcKD+wBbXX53DIW6P
Qr9+SkGkZEPwdULda0iCFXFEl7DebObCli9DGFvWAYjLzKnBMKYLNrbQeVBXpsvF
npnhoNjoscd9KbkDQT0dYoVmYzlHytMZ9ZXN1oZr7zRdeNUEXejY8HYTlV4hdaYB
dYtlC5ohOmGp4owKOiBCCHkZiO4/lPmA+mqn/RTIl1eGXLqHW7lQ6mxwqwIDAQAB
o4ICSDCCAkQwHQYDVR0OBBYEFCXLfm6I7Zm8bf8eVTZjSJtLijvFMB8GA1UdIwQY
MBaAFE8UES0F6dh2FJ0neNSO2qoyTbClMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUt
YmFmYmRmYzgxMzJhLzEvSmN0LWJvanRtYnh0X3g1Vk5tTkltMHVLTzhVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUtYmFmYmRmYzgxMzJh
LzEvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMF4GCCsGAQUFBwEHAQH/BE8wTTASBAIAATAMAwQAwbLiAwQA
wchOMDcEAgACMDEDBQMqD5tAAwUDKhA/gAMFAyoTtMADBQMqE7tAAwUDKhQRAAMF
AyoUaMADBQMqFGpAMA0GCSqGSIb3DQEBCwUAA4IBAQBhmAEx+uTs5343jB+Ekh4E
c5a+WLZPGxEFx3jOQSKJRQGaJLf2dVtuLqNmrjTE0bIh2cmG4HjjEst2ZMul0/iC
GaboV/bpLFwn1Arij4DHaaPTOr9ySxIirRLx7Ez5Q8VPVY5hGwbdTg5aJ0KVxGvS
rWJsO2RZ/ftVTfMCWmvjRnipjElvpVClJlPjZOQ+IpWY96LX4wYkOtijTymOh781
HmFWVVwfb7VvBfepoaeHR0IaSYciZ0h6Di1Q+zXBUqsF4hmmgOhmPhPU7ya3yl2f
5MdLpdn6oHSDXyMIFPkjAi951BIeMwWP8XX+pYdz/bvweRqjink4C4+pv6PSPP78
-----END CERTIFICATE-----
Generated at Tue Sep 22 17:55:20 2026 by rpki-client