Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/jSuCwHDnyCdQiBrSClJNGJp13Sc.roa
File: jSuCwHDnyCdQiBrSClJNGJp13Sc.roa (raw, json)
Hash identifier: KsYgAOOygiOtBvE2Oeh8aRN6rsZpkG4XIyMw9oAP5N0=
Subject key identifier: 8D:2B:82:C0:70:E7:C8:27:50:88:1A:D2:0A:52:4D:18:9A:75:DD:27
Certificate issuer: /CN=1027a8a61299b80a3e71d1a981427ec00b849d17
Certificate serial: 019EB6EEEAEE1A842A80F8872E7D892179C2
Authority key identifier: 10:27:A8:A6:12:99:B8:0A:3E:71:D1:A9:81:42:7E:C0:0B:84:9D:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ECeophKZuAo-cdGpgUJ-wAuEnRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/jSuCwHDnyCdQiBrSClJNGJp13Sc.roa
Signing time: Thu 11 Jun 2026 13:46:11 +0000
ROA not before: Thu 11 Jun 2026 13:46:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34766
IP address blocks: 95.142.110.0/24 maxlen: 24
178.237.34.0/24 maxlen: 24
185.138.56.0/22 maxlen: 22
185.138.56.0/24 maxlen: 24
185.138.57.0/24 maxlen: 24
185.138.58.0/24 maxlen: 24
185.138.59.0/24 maxlen: 24
193.202.88.0/24 maxlen: 24
2a07:a80::/29 maxlen: 29
2a07:a80::/40 maxlen: 40
2a07:a80:100::/40 maxlen: 40
2a07:a80:200::/40 maxlen: 40
2a07:a80:300::/40 maxlen: 40
2a07:a80:b00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/ECeophKZuAo-cdGpgUJ-wAuEnRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/ECeophKZuAo-cdGpgUJ-wAuEnRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ECeophKZuAo-cdGpgUJ-wAuEnRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:ee:ea:ee:1a:84:2a:80:f8:87:2e:7d:89:21:79:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1027a8a61299b80a3e71d1a981427ec00b849d17
Validity
Not Before: Jun 11 13:46:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8d2b82c070e7c82750881ad20a524d189a75dd27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:6a:83:af:d5:90:aa:8c:ec:17:e3:43:24:8d:
fb:71:04:65:c1:f1:ae:e1:16:0d:72:c1:4a:fa:c9:
84:49:6f:c8:97:d2:52:2d:01:f0:dd:34:0d:e8:b2:
d9:bb:79:d8:86:ea:d5:cd:90:08:e9:1c:42:de:b0:
51:e3:f7:58:ca:d6:4b:fe:50:af:2e:3e:88:9d:f8:
b1:36:00:24:6f:54:72:57:c4:fa:d0:a8:ac:b1:a4:
ed:ad:62:5d:fe:68:78:0f:9a:68:fe:fe:34:17:f4:
89:f9:1b:b9:0d:e9:3d:52:81:61:65:80:7f:ce:ae:
d8:e0:e8:01:89:ee:2c:4b:36:f3:45:78:97:0b:e2:
9f:63:30:16:c6:99:1d:d7:a7:b6:0a:b1:af:c8:1b:
0d:e1:47:71:80:d3:55:04:87:0a:b5:36:9d:7c:c2:
1a:78:44:2a:11:aa:90:3e:dc:4f:2d:5b:ae:aa:4d:
15:73:bf:4a:3d:75:96:5c:89:cc:be:1d:cf:12:3b:
f1:0d:0b:3e:8c:6e:f3:08:f3:17:51:b5:65:f2:95:
db:47:29:3f:1a:ff:0e:38:95:9e:b3:d7:bd:e0:1e:
c8:6f:e6:5c:b1:4b:be:30:70:75:2c:90:3b:9b:2f:
be:70:2b:5b:9d:c3:b3:e1:42:1d:b2:ca:6b:d1:e9:
c3:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:2B:82:C0:70:E7:C8:27:50:88:1A:D2:0A:52:4D:18:9A:75:DD:27
X509v3 Authority Key Identifier:
keyid:10:27:A8:A6:12:99:B8:0A:3E:71:D1:A9:81:42:7E:C0:0B:84:9D:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ECeophKZuAo-cdGpgUJ-wAuEnRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/jSuCwHDnyCdQiBrSClJNGJp13Sc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/ECeophKZuAo-cdGpgUJ-wAuEnRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.142.110.0/24
178.237.34.0/24
185.138.56.0/22
193.202.88.0/24
IPv6:
2a07:a80::/29
Signature Algorithm: sha256WithRSAEncryption
51:a0:85:70:e2:1e:b0:3c:dd:9b:e5:71:15:4d:27:4c:50:dc:
ea:e8:ac:3f:11:80:d8:86:33:38:8e:91:30:28:97:35:8c:69:
51:1b:d8:ee:34:01:1a:dd:39:b2:ff:dc:f5:23:66:31:c3:d8:
9f:83:f9:bd:f1:8d:4e:4e:6b:23:a2:23:9c:f9:1e:a3:3e:77:
98:46:a0:dd:4b:cf:bb:07:72:bb:6a:23:be:72:f3:85:9f:3f:
60:11:7c:c4:0b:d8:4b:92:73:99:b3:47:f6:1c:c1:94:63:45:
1b:2c:fb:48:bf:0e:27:8e:48:64:7b:f7:a4:0a:19:95:69:20:
95:65:7d:78:a7:ab:1d:d1:9a:8b:60:11:71:7d:7b:77:78:59:
5a:55:e6:04:5e:b8:dc:4c:60:91:7a:dd:8e:b6:cd:0d:bf:e0:
b1:cd:86:7f:ba:05:96:c1:17:01:cc:26:3e:98:25:19:49:bb:
a7:87:99:31:cb:9f:10:65:c4:10:0d:1f:97:9a:ca:46:71:4f:
4f:5e:bc:2f:9e:b5:c0:b2:b1:b5:26:1c:7d:06:05:bf:33:3a:
5e:b0:a5:77:65:d3:15:c9:b5:8a:cd:8c:30:01:39:df:0b:8f:
78:d9:b3:e5:d9:99:06:af:ae:03:0e:01:bf:7f:1c:a0:0f:22:
9a:95:57:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:09:10 2026 by rpki-client