Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/JiUHIpwhzwA6_LDnsIn_DGRvMds.roa
File: JiUHIpwhzwA6_LDnsIn_DGRvMds.roa (raw, json)
Hash identifier: DnWLrSNnfeprAlB7mPdupujLQKaPMNF/52EYQpiC8iA=
Subject key identifier: 26:25:07:22:9C:21:CF:00:3A:FC:B0:E7:B0:89:FF:0C:64:6F:31:DB
Certificate issuer: /CN=29078d22698cdd1e6a23d70c17fffe321def3b30
Certificate serial: 019F23695464B08CB8C667307F2A0F71486E
Authority key identifier: 29:07:8D:22:69:8C:DD:1E:6A:23:D7:0C:17:FF:FE:32:1D:EF:3B:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQeNImmM3R5qI9cMF__-Mh3vOzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/JiUHIpwhzwA6_LDnsIn_DGRvMds.roa
Signing time: Thu 02 Jul 2026 15:18:53 +0000
ROA not before: Thu 02 Jul 2026 15:18:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213538
IP address blocks: 31.135.0.0/24 maxlen: 24
64.43.92.0/24 maxlen: 24
77.36.64.0/24 maxlen: 24
77.36.88.0/24 maxlen: 24
91.200.134.0/24 maxlen: 24
91.237.92.0/24 maxlen: 24
91.245.90.0/24 maxlen: 24
91.246.217.0/24 maxlen: 24
93.120.33.0/24 maxlen: 24
93.120.72.0/24 maxlen: 24
176.96.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/KQeNImmM3R5qI9cMF__-Mh3vOzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/KQeNImmM3R5qI9cMF__-Mh3vOzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KQeNImmM3R5qI9cMF__-Mh3vOzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 15 Jul 2026 06:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:54:64:b0:8c:b8:c6:67:30:7f:2a:0f:71:48:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29078d22698cdd1e6a23d70c17fffe321def3b30
Validity
Not Before: Jul 2 15:18:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=262507229c21cf003afcb0e7b089ff0c646f31db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:77:ad:7c:23:35:09:05:21:02:48:5e:53:a8:
52:d1:00:54:06:26:01:9e:ba:ce:f3:47:ac:26:71:
77:31:e5:97:b0:d2:21:f9:ac:45:24:46:3d:d1:4d:
e7:54:37:ad:10:f2:5f:4f:e9:75:14:5f:a7:b6:61:
38:5c:b7:02:a0:98:31:e9:93:51:ef:02:1d:89:22:
65:9a:18:9e:3a:8e:1f:58:a8:e5:d9:5e:9f:a4:21:
6f:48:87:c1:2a:f9:ce:27:a1:ed:0e:fa:9a:ec:7f:
e7:92:06:39:ac:bd:f4:9e:d8:d4:52:4d:7f:2d:b1:
cb:21:cc:49:27:e5:39:91:19:f8:19:80:46:01:ed:
3a:49:19:f7:11:a9:8b:45:d2:bb:6d:ee:b8:56:35:
5d:e7:20:5d:3a:e8:19:d5:97:6a:48:f9:f9:b6:97:
8a:e9:0f:39:d0:93:c5:c7:59:db:c7:4d:20:26:d5:
d8:a0:6c:15:3d:78:ed:e2:70:31:a5:a8:f2:6b:7c:
72:3b:b4:6c:64:30:ec:97:60:f9:06:df:cb:2b:53:
27:a5:e5:be:64:03:5b:45:35:e4:05:08:a2:d5:36:
67:f1:d6:26:57:d6:77:16:fa:de:19:31:f1:5d:16:
24:b1:1e:6f:a6:b1:cf:00:1e:5f:53:f6:0c:1c:70:
9b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:25:07:22:9C:21:CF:00:3A:FC:B0:E7:B0:89:FF:0C:64:6F:31:DB
X509v3 Authority Key Identifier:
keyid:29:07:8D:22:69:8C:DD:1E:6A:23:D7:0C:17:FF:FE:32:1D:EF:3B:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQeNImmM3R5qI9cMF__-Mh3vOzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/JiUHIpwhzwA6_LDnsIn_DGRvMds.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/KQeNImmM3R5qI9cMF__-Mh3vOzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.135.0.0/24
64.43.92.0/24
77.36.64.0/24
77.36.88.0/24
91.200.134.0/24
91.237.92.0/24
91.245.90.0/24
91.246.217.0/24
93.120.33.0/24
93.120.72.0/24
176.96.89.0/24
Signature Algorithm: sha256WithRSAEncryption
60:07:3c:e3:b7:86:17:d5:e7:80:c5:3d:71:fd:36:d9:e7:09:
0b:b7:cc:3f:26:fa:4e:9b:9e:a3:e9:50:b1:ce:1d:68:c4:3e:
06:36:e2:a2:b2:52:eb:4b:cd:4d:28:de:54:fa:38:cb:05:25:
c4:17:03:57:dc:df:65:9b:6c:ad:b0:1c:e7:d4:a7:d2:5b:6d:
02:a4:9f:f5:d0:5a:1f:4b:56:21:1a:73:b7:92:02:eb:84:a4:
9d:8a:90:df:a9:b1:83:c2:d6:e4:5d:5e:9b:8e:ff:10:c7:f8:
25:a7:22:6c:ea:b8:21:1a:0c:8c:db:a0:fd:fe:13:0a:38:e4:
97:4a:7e:e4:99:18:18:13:9d:87:2d:a5:da:8c:b3:af:bc:e4:
4e:e6:13:1b:a2:80:74:10:8c:72:25:88:27:3f:54:7e:c0:c1:
e8:0f:a0:92:79:ac:da:b9:c2:f3:25:b8:46:07:a0:4d:95:8c:
0c:b6:b8:96:f0:73:a1:9f:a4:28:08:f1:b3:7a:b5:b2:65:14:
85:f7:89:1d:05:f3:b4:48:bc:1d:72:d8:0b:5f:92:3e:be:87:
2c:cd:d2:90:69:ff:8c:33:3a:62:1a:6c:18:18:df:28:80:79:
57:66:ed:e4:bc:aa:95:b2:3e:85:59:1f:9e:10:ae:8e:c7:ba:
9a:c3:a5:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 15:22:42 2026 by rpki-client