Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/JkSkZz0V71DoQe9YMy_e5cmRcoM.roa
File: JkSkZz0V71DoQe9YMy_e5cmRcoM.roa (raw, json)
Hash identifier: DDSRfY0k5pw342j6cRoTFECAjnDvu5LmuTi0bOitYXo=
Subject key identifier: 26:44:A4:67:3D:15:EF:50:E8:41:EF:58:33:2F:DE:E5:C9:91:72:83
Certificate issuer: /CN=0d722e4513a39678d8ab23b2d649775340518cb9
Certificate serial: 019E832AE579B3E5F399317C6E7079C10C05
Authority key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/JkSkZz0V71DoQe9YMy_e5cmRcoM.roa
Signing time: Mon 01 Jun 2026 12:31:26 +0000
ROA not before: Mon 01 Jun 2026 12:31:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 89.249.192.0/21 maxlen: 24
89.249.203.0/24 maxlen: 24
89.249.205.0/24 maxlen: 24
89.249.206.0/23 maxlen: 24
89.249.206.0/24 maxlen: 24
212.42.192.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft
rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Jun 2026 15:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:83:2a:e5:79:b3:e5:f3:99:31:7c:6e:70:79:c1:0c:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d722e4513a39678d8ab23b2d649775340518cb9
Validity
Not Before: Jun 1 12:31:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2644a4673d15ef50e841ef58332fdee5c9917283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4d:d8:1f:cb:e8:b4:12:c7:09:6a:84:c1:b2:
15:63:a6:d3:4a:f1:e8:8e:3f:b6:ef:89:b0:93:d3:
34:21:2c:8e:94:8b:0e:37:4f:0a:55:63:5f:1e:cc:
f3:a2:81:83:1b:bc:5d:78:28:f0:ff:81:a9:2b:75:
3d:ce:37:cc:81:c8:85:90:43:9b:5c:91:c8:eb:3a:
a9:ca:08:54:2b:86:19:69:6c:9d:5e:a4:48:26:5a:
2b:73:aa:e0:44:76:51:9b:28:73:4e:ef:d3:71:bb:
b5:45:2a:20:cc:a0:cf:b6:5a:d1:68:95:01:46:e8:
87:ad:99:98:6b:43:22:23:3b:02:31:14:ba:e7:ab:
58:23:fe:61:ac:93:50:16:fa:38:33:e3:33:ed:46:
6b:8b:b6:f2:a7:38:20:9b:65:e7:0e:bc:58:09:64:
d2:64:37:73:02:e9:7e:82:e7:38:d2:97:26:b0:37:
ec:19:cd:11:74:ed:c1:c6:68:cd:83:e7:e6:39:3a:
13:52:a1:eb:65:c0:39:54:2b:9b:cf:11:91:fd:50:
9a:53:56:50:fd:82:16:e4:8e:f5:c1:f9:f8:3c:02:
27:97:73:94:24:81:03:a6:a4:98:d6:f9:56:f7:95:
c8:37:93:40:48:cf:19:b3:32:dc:21:83:fb:83:f7:
4e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:44:A4:67:3D:15:EF:50:E8:41:EF:58:33:2F:DE:E5:C9:91:72:83
X509v3 Authority Key Identifier:
keyid:0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/JkSkZz0V71DoQe9YMy_e5cmRcoM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.249.192.0/21
89.249.203.0/24
89.249.205.0-89.249.207.255
212.42.192.0/20
Signature Algorithm: sha256WithRSAEncryption
78:aa:bf:ca:9e:3d:b0:57:a9:cb:1d:17:3d:51:0d:83:52:da:
5b:eb:01:2d:53:12:9d:36:2e:08:cf:86:bd:34:be:c3:15:45:
60:cb:d0:61:02:6e:0f:98:72:3b:5b:20:8c:88:c8:17:0c:50:
06:cb:cd:47:df:8e:cf:d8:24:a7:c9:c7:91:80:77:15:5f:f7:
21:43:71:bc:d3:36:27:dd:80:3b:29:79:85:99:06:3a:c4:73:
e5:5b:e5:63:aa:b8:29:20:ca:75:2c:3e:a3:44:7c:6f:06:48:
4b:d5:2a:d2:c8:7f:68:6e:d3:19:9e:38:95:1a:36:53:4b:42:
bc:54:40:fb:ad:08:f8:66:56:41:b2:6a:5c:ff:7b:a8:2e:b6:
00:7f:55:8b:a4:70:4e:d6:52:2a:19:8f:7e:c2:b3:50:b4:9f:
6b:ff:f6:4b:a9:81:54:d1:ac:69:0a:2e:b9:dd:82:22:54:19:
72:70:6c:86:56:00:24:74:80:13:d7:86:8d:dc:00:5b:28:ee:
2f:a9:af:2a:56:c9:04:d0:9a:e8:9d:b8:9e:bf:9f:28:24:53:
73:d7:17:23:7e:7d:35:c9:06:05:6a:c1:b0:c6:ed:c5:7e:0e:
c1:69:4d:b6:00:6a:db:b6:d1:9c:30:1a:ce:6b:e4:0f:7e:c3:
c9:25:ee:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 5 23:00:10 2026 by rpki-client