Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/jtGIUucXpS25gSIxS9ey-aTaP6k.roa
File: jtGIUucXpS25gSIxS9ey-aTaP6k.roa (raw, json)
Hash identifier: C7gWcR3y9LEqqxMVoaQwthR97+AE57RrFujD9LepmME=
Subject key identifier: 8E:D1:88:52:E7:17:A5:2D:B9:81:22:31:4B:D7:B2:F9:A4:DA:3F:A9
Certificate issuer: /CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5
Certificate serial: 019F7F98488216B504340F02240A69B6DFF1
Authority key identifier: 8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/jtGIUucXpS25gSIxS9ey-aTaP6k.roa
Signing time: Mon 20 Jul 2026 12:55:14 +0000
ROA not before: Mon 20 Jul 2026 12:55:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 132776
IP address blocks: 212.66.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.mft
rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 06:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:7f:98:48:82:16:b5:04:34:0f:02:24:0a:69:b6:df:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5
Validity
Not Before: Jul 20 12:55:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8ed18852e717a52db98122314bd7b2f9a4da3fa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:3c:5f:01:df:f8:82:68:58:fb:d6:77:84:6f:
c7:c5:d2:26:84:d0:6d:bb:14:81:1b:9e:07:e9:3e:
1e:2a:24:65:46:49:db:06:75:1f:53:c7:2e:1a:36:
05:b4:a5:9e:02:e1:a3:5d:eb:db:78:c7:11:05:a0:
ff:fe:ce:b5:3e:80:ec:03:4c:fa:b1:c9:5b:94:56:
8d:6a:2d:7c:a9:41:fe:43:92:02:2a:28:64:87:46:
4f:03:57:0d:fa:b7:c4:1a:13:fe:1a:89:d8:c1:ca:
64:16:6d:e3:ee:dc:86:fa:6b:cc:82:7f:d0:8a:7e:
2b:86:21:82:d4:c1:4a:8a:ea:f6:40:c8:ce:34:73:
21:f8:22:1d:dc:01:3e:9c:56:8d:1d:81:75:5b:aa:
86:88:7c:c2:b3:ab:57:cc:fb:40:61:27:86:e2:92:
54:0c:44:ad:e4:8c:61:fc:5a:ac:80:f5:cd:89:e5:
79:11:2d:b1:fc:d1:a2:76:ad:7e:90:1f:0b:91:47:
8d:50:14:08:39:53:08:ee:11:c5:2c:3e:0e:e9:34:
86:58:89:ec:80:57:46:5a:13:26:c7:d7:6e:f2:3d:
ea:9d:53:78:9f:a2:0f:fb:73:ed:19:e9:ca:1f:a5:
2e:d8:63:36:10:f2:17:9b:7e:26:6e:c3:cd:4a:81:
c0:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:D1:88:52:E7:17:A5:2D:B9:81:22:31:4B:D7:B2:F9:A4:DA:3F:A9
X509v3 Authority Key Identifier:
keyid:8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/jtGIUucXpS25gSIxS9ey-aTaP6k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.66.50.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:46:0b:5d:d9:89:84:13:1a:00:5c:ff:59:0a:83:02:62:03:
6f:d2:08:2f:02:ec:93:fe:45:ab:84:71:36:04:1e:d8:4a:b7:
d0:f1:d3:d0:47:be:08:5e:e2:c3:09:d2:fb:45:05:bf:12:1b:
9f:e5:d7:7d:f0:1c:7f:8c:0a:ff:9f:63:1b:c5:91:cc:5f:10:
a6:a2:cc:07:f5:e7:7e:05:ac:d1:5d:c7:b6:e0:1d:ef:2b:29:
0a:e9:0c:7f:75:b5:88:26:c8:b7:95:ac:72:f4:7b:5a:d9:cb:
6d:1a:bb:98:a9:8a:b9:fa:69:20:de:90:8e:18:88:33:b3:09:
da:f5:76:de:22:7f:f8:5d:1e:a5:1f:16:09:94:17:0e:cd:00:
50:be:33:8e:dc:05:2c:cb:99:c1:d4:f4:8f:22:34:bf:66:38:
4a:a3:ad:7f:1f:89:c2:e0:b5:b6:9a:45:86:b9:d3:21:0d:9d:
87:19:07:c9:ab:ac:c9:95:c8:ee:d8:79:30:95:4a:ac:ff:29:
f3:fe:b8:03:32:b4:bb:4c:2e:f9:55:8b:5d:58:7d:f2:30:3e:
82:9a:b1:b2:d6:d6:99:ef:e8:9b:63:5e:0e:57:8b:8d:4a:81:
92:14:0c:99:a1:6f:aa:30:9b:4f:1e:b3:f5:75:81:04:67:d1:
2d:12:53:9c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ9/mEiCFrUENA8CJApptt/xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhMDFhYjZjZDQ0YTdhM2VhNDAwMmMxMDZhOTZjNDI3YjUy
YzgxZDUwHhcNMjYwNzIwMTI1NTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZWQxODg1MmU3MTdhNTJkYjk4MTIyMzE0YmQ3YjJmOWE0ZGEzZmE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2jxfAd/4gmhY+9Z3hG/HxdImhNBt
uxSBG54H6T4eKiRlRknbBnUfU8cuGjYFtKWeAuGjXevbeMcRBaD//s61PoDsA0z6
sclblFaNai18qUH+Q5ICKihkh0ZPA1cN+rfEGhP+GonYwcpkFm3j7tyG+mvMgn/Q
in4rhiGC1MFKiur2QMjONHMh+CId3AE+nFaNHYF1W6qGiHzCs6tXzPtAYSeG4pJU
DESt5Ixh/FqsgPXNieV5ES2x/NGidq1+kB8LkUeNUBQIOVMI7hHFLD4O6TSGWIns
gFdGWhMmx9du8j3qnVN4n6IP+3PtGenKH6Uu2GM2EPIXm34mbsPNSoHA1QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFI7RiFLnF6UtuYEiMUvXsvmk2j+pMB8GA1UdIwQY
MBaAFIoBq2zUSno+pAAsEGqWxCe1LIHVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWdHcmJOUktlajZrQUN3UWFwYkVKN1VzZ2RVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi81ODMyZjQtZTRlMi00OThiLWEwNmEt
OWZlYmY4YzNlMzNmLzEvanRHSVV1Y1hwUzI1Z1NJeFM5ZXktYVRhUDZrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi81ODMyZjQtZTRlMi00OThiLWEwNmEtOWZlYmY4YzNlMzNm
LzEvaWdHcmJOUktlajZrQUN3UWFwYkVKN1VzZ2RVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1EIyMA0G
CSqGSIb3DQEBCwUAA4IBAQCgRgtd2YmEExoAXP9ZCoMCYgNv0ggvAuyT/kWrhHE2
BB7YSrfQ8dPQR74IXuLDCdL7RQW/Ehuf5dd98Bx/jAr/n2MbxZHMXxCmoswH9ed+
BazRXce24B3vKykK6Qx/dbWIJsi3laxy9Hta2cttGruYqYq5+mkg3pCOGIgzswna
9XbeIn/4XR6lHxYJlBcOzQBQvjOO3AUsy5nB1PSPIjS/ZjhKo61/H4nC4LW2mkWG
udMhDZ2HGQfJq6zJlcju2HkwlUqs/ynz/rgDMrS7TC75VYtdWH3yMD6CmrGy1taZ
7+ibY14OV4uNSoGSFAyZoW+qMJtPHrP1dYEEZ9EtElOc
-----END CERTIFICATE-----
Generated at Tue Jul 21 14:26:37 2026 by rpki-client