Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/JgyHfDa-F26mJBen_nZoWt6VcN0.roa
File: JgyHfDa-F26mJBen_nZoWt6VcN0.roa (raw, json)
Hash identifier: ka95gjqbnp5vTxYoWFPFDU7HoiwfqxAnl9QDgNI170A=
Subject key identifier: 26:0C:87:7C:36:BE:17:6E:A6:24:17:A7:FE:76:68:5A:DE:95:70:DD
Certificate issuer: /CN=011ccd009b2a6eabc5418574b637c6c402219c68
Certificate serial: 019F2368ACA7ED51FEBDAF8BD16A7146C176
Authority key identifier: 01:1C:CD:00:9B:2A:6E:AB:C5:41:85:74:B6:37:C6:C4:02:21:9C:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ARzNAJsqbqvFQYV0tjfGxAIhnGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/JgyHfDa-F26mJBen_nZoWt6VcN0.roa
Signing time: Thu 02 Jul 2026 15:18:10 +0000
ROA not before: Thu 02 Jul 2026 15:18:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61369
IP address blocks: 83.151.192.0/22 maxlen: 24
88.202.208.0/22 maxlen: 24
88.212.156.0/22 maxlen: 24
185.8.132.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/ARzNAJsqbqvFQYV0tjfGxAIhnGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/ARzNAJsqbqvFQYV0tjfGxAIhnGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ARzNAJsqbqvFQYV0tjfGxAIhnGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:ac:a7:ed:51:fe:bd:af:8b:d1:6a:71:46:c1:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=011ccd009b2a6eabc5418574b637c6c402219c68
Validity
Not Before: Jul 2 15:18:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=260c877c36be176ea62417a7fe76685ade9570dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:09:81:e3:4d:c8:03:56:69:8f:9a:11:22:9d:
3c:08:b4:86:82:2d:0c:13:30:58:2e:62:4f:7b:a0:
0b:ad:52:2e:ab:73:53:93:8f:b3:fb:4f:7d:bf:33:
b0:96:bc:d9:1d:3a:20:87:3c:0c:f9:72:d6:ad:42:
34:62:4e:eb:8f:d6:9f:1d:94:61:e1:c5:54:2e:56:
1f:2f:d7:11:f5:11:25:20:d3:ca:03:34:9f:49:3c:
29:5c:7a:09:21:5c:f6:3d:da:6c:1a:6d:85:8e:c9:
cf:7a:96:24:be:e6:2e:00:a0:9c:ff:a3:99:75:1a:
28:0c:0e:b5:97:dd:29:4e:36:b8:ff:15:b7:65:46:
74:f9:6c:55:1e:e3:39:15:07:da:bb:f0:de:54:f5:
17:a2:72:76:c1:0a:f7:1a:47:c2:a1:1c:5e:31:07:
78:66:04:e1:2b:ef:d7:36:d8:50:f7:01:cd:90:9f:
05:0a:09:f5:09:83:37:2f:1f:a1:40:3d:64:4a:43:
58:4e:45:56:6b:d5:98:c4:f6:ed:7a:39:04:db:cd:
d7:96:c3:68:d5:d6:48:54:45:80:bf:bb:1a:90:6a:
b4:e5:8c:35:b1:5b:24:43:4b:03:a1:67:dd:80:6f:
b2:bf:13:ba:f7:51:a5:84:83:db:f6:30:80:af:f3:
dd:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:0C:87:7C:36:BE:17:6E:A6:24:17:A7:FE:76:68:5A:DE:95:70:DD
X509v3 Authority Key Identifier:
keyid:01:1C:CD:00:9B:2A:6E:AB:C5:41:85:74:B6:37:C6:C4:02:21:9C:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ARzNAJsqbqvFQYV0tjfGxAIhnGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/JgyHfDa-F26mJBen_nZoWt6VcN0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/ARzNAJsqbqvFQYV0tjfGxAIhnGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.151.192.0/22
88.202.208.0/22
88.212.156.0/22
185.8.132.0/22
Signature Algorithm: sha256WithRSAEncryption
3f:80:a8:1a:00:65:e3:3c:9c:07:6a:fd:3e:2b:7a:5d:d3:bf:
8a:a5:59:60:73:cc:23:1a:21:20:74:19:f1:eb:9c:1c:ef:4d:
81:61:4d:ff:6e:32:5c:4c:cf:ea:8c:b7:03:a5:15:c3:34:f4:
53:f8:6f:da:aa:fe:60:7b:e8:5b:20:08:40:d9:a2:c5:c4:c3:
49:fa:c2:f2:d5:c8:7c:7e:28:0a:ca:bf:7e:22:63:58:98:a2:
67:af:0a:49:3c:af:ad:90:73:99:7b:fa:aa:1c:46:a0:4b:28:
05:03:ae:70:c3:80:8d:52:45:ab:78:83:f5:ee:d1:1f:3a:44:
d5:c2:f5:d2:8d:45:2d:99:9f:1a:ff:35:25:40:79:ce:86:ea:
e9:f9:6f:b4:39:73:35:66:9d:f3:5f:34:e2:e3:92:e8:83:18:
67:f6:2b:b2:bb:3d:d0:39:ac:fd:10:06:d2:c0:95:b1:89:48:
2b:7e:14:6c:a3:88:b7:33:b2:6e:b6:1b:1e:34:e1:38:70:3f:
c8:d9:c0:77:57:bb:15:56:1b:6a:02:1a:3f:32:3d:ea:b6:78:
51:aa:51:bd:34:ff:d5:5f:11:62:8a:5f:81:33:1e:54:c7:ad:
6a:c2:7a:e1:6e:99:83:6e:45:9b:36:3f:3c:77:d7:ce:9a:3f:
38:67:2b:53
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZ8jaKyn7VH+va+L0WpxRsF2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxMWNjZDAwOWIyYTZlYWJjNTQxODU3NGI2MzdjNmM0MDIy
MTljNjgwHhcNMjYwNzAyMTUxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNjBjODc3YzM2YmUxNzZlYTYyNDE3YTdmZTc2Njg1YWRlOTU3MGRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQmB403IA1Zpj5oRIp08CLSGgi0M
EzBYLmJPe6ALrVIuq3NTk4+z+099vzOwlrzZHToghzwM+XLWrUI0Yk7rj9afHZRh
4cVULlYfL9cR9RElINPKAzSfSTwpXHoJIVz2PdpsGm2FjsnPepYkvuYuAKCc/6OZ
dRooDA61l90pTja4/xW3ZUZ0+WxVHuM5FQfau/DeVPUXonJ2wQr3GkfCoRxeMQd4
ZgThK+/XNthQ9wHNkJ8FCgn1CYM3Lx+hQD1kSkNYTkVWa9WYxPbtejkE283XlsNo
1dZIVEWAv7sakGq05Yw1sVskQ0sDoWfdgG+yvxO691GlhIPb9jCAr/PdRQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFCYMh3w2vhdupiQXp/52aFrelXDdMB8GA1UdIwQY
MBaAFAEczQCbKm6rxUGFdLY3xsQCIZxoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVJ6TkFKc3FicXZGUVlWMHRqZkd4QUlobkdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9jMTc2NWItZTNhNS00MTBjLTljZDMt
NmNhMzQwZmE3NDkzLzEvSmd5SGZEYS1GMjZtSkJlbl9uWm9XdDZWY04wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi9jMTc2NWItZTNhNS00MTBjLTljZDMtNmNhMzQwZmE3NDkz
LzEvQVJ6TkFKc3FicXZGUVlWMHRqZkd4QUlobkdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCU5fAAwQC
WMrQAwQCWNScAwQCuQiEMA0GCSqGSIb3DQEBCwUAA4IBAQA/gKgaAGXjPJwHav0+
K3pd07+KpVlgc8wjGiEgdBnx65wc702BYU3/bjJcTM/qjLcDpRXDNPRT+G/aqv5g
e+hbIAhA2aLFxMNJ+sLy1ch8figKyr9+ImNYmKJnrwpJPK+tkHOZe/qqHEagSygF
A65ww4CNUkWreIP17tEfOkTVwvXSjUUtmZ8a/zUlQHnOhurp+W+0OXM1Zp3zXzTi
45Logxhn9iuyuz3QOaz9EAbSwJWxiUgrfhRso4i3M7JuthseNOE4cD/I2cB3V7sV
VhtqAho/Mj3qtnhRqlG9NP/VXxFiil+BMx5Ux61qwnrhbpmDbkWbNj88d9fOmj84
ZytT
-----END CERTIFICATE-----
Generated at Mon Jul 6 19:59:05 2026 by rpki-client