Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/Jdd-cmX87aL_jT8gx7H2pzeD9rg.roa
File: Jdd-cmX87aL_jT8gx7H2pzeD9rg.roa (raw, json)
Hash identifier: rEF/W/6Z+pZc6KaImTNeG/JyJNxyLCm8rc9VcoK/X0o=
Subject key identifier: 25:D7:7E:72:65:FC:ED:A2:FF:8D:3F:20:C7:B1:F6:A7:37:83:F6:B8
Certificate issuer: /CN=7d502e2d24b1f216913088207a268e6626b0ce39
Certificate serial: 019EFFEF09DDC16FC9634ACC4E3ECBA7EE34
Authority key identifier: 7D:50:2E:2D:24:B1:F2:16:91:30:88:20:7A:26:8E:66:26:B0:CE:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVAuLSSx8haRMIggeiaOZiawzjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/Jdd-cmX87aL_jT8gx7H2pzeD9rg.roa
Signing time: Thu 25 Jun 2026 17:58:36 +0000
ROA not before: Thu 25 Jun 2026 17:58:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219369
IP address blocks: 195.10.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVAuLSSx8haRMIggeiaOZiawzjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 Jul 2026 05:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ff:ef:09:dd:c1:6f:c9:63:4a:cc:4e:3e:cb:a7:ee:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d502e2d24b1f216913088207a268e6626b0ce39
Validity
Not Before: Jun 25 17:58:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=25d77e7265fceda2ff8d3f20c7b1f6a73783f6b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:98:06:f8:2a:34:33:96:c8:81:7c:2f:05:e3:
16:df:76:8f:ed:51:0f:ae:b3:86:6b:e2:09:05:85:
20:e5:e8:59:dd:16:aa:e0:42:ac:02:c0:cd:2f:f2:
81:e2:a1:82:62:11:80:f0:8e:1b:e2:f7:a2:a8:86:
9b:bf:77:71:b0:a6:4b:31:9d:89:eb:81:f2:a8:2a:
2b:c9:98:62:1a:2f:0c:18:64:da:24:c8:ff:e4:e2:
93:c9:23:bc:28:e5:2b:d0:23:af:09:5d:d5:27:dd:
d3:3c:d4:3b:55:b2:63:ef:f6:56:cb:61:f3:e2:a3:
be:21:2a:b8:15:7e:b8:7a:45:cc:8c:01:04:96:71:
f0:5c:99:f1:0a:e2:f6:e1:f1:ca:4e:0e:f3:c1:f6:
ee:60:72:a8:e8:82:04:ec:4a:d7:38:c3:1b:46:b6:
26:8f:b0:8a:05:67:af:9e:5f:64:c4:66:f4:34:da:
07:36:6f:9b:95:2c:4b:5d:e6:d0:a4:08:48:7b:c4:
27:a9:be:2e:32:29:9e:d9:8a:a3:f0:06:18:3a:7e:
d4:af:c5:16:15:1d:16:75:56:01:6d:eb:ad:02:67:
ea:58:30:fd:15:bc:fb:c8:25:0d:ea:15:12:f9:30:
27:33:a3:ab:a0:3f:17:ef:42:a9:ac:73:6a:e0:08:
ec:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:D7:7E:72:65:FC:ED:A2:FF:8D:3F:20:C7:B1:F6:A7:37:83:F6:B8
X509v3 Authority Key Identifier:
keyid:7D:50:2E:2D:24:B1:F2:16:91:30:88:20:7A:26:8E:66:26:B0:CE:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVAuLSSx8haRMIggeiaOZiawzjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/Jdd-cmX87aL_jT8gx7H2pzeD9rg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.10.233.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:c1:5d:3f:a6:0d:16:12:a7:3b:3f:5b:25:4e:8f:ad:f2:54:
9b:ae:b1:93:2e:29:96:49:55:82:73:ab:b1:73:cf:01:80:ad:
5c:c9:e2:fe:21:2c:81:30:aa:3e:89:b3:75:05:ac:03:48:0a:
f0:a4:e4:af:40:7b:25:f2:df:ae:7f:d6:de:1b:8b:23:5b:ec:
15:7c:69:4c:51:c5:aa:bd:40:7e:65:68:0e:8b:2f:6b:99:ac:
41:56:fd:d7:fa:f4:8e:2b:d9:13:1e:dc:43:0b:6a:42:79:e6:
17:ac:ef:d7:ee:ae:4f:fc:a6:df:27:a8:28:c6:0c:40:d0:11:
49:56:0e:28:93:54:9d:80:a5:e1:a4:cb:3a:86:5a:b5:ad:76:
88:77:ce:53:43:a3:fe:2d:3b:67:6b:2a:d3:0e:0c:79:82:16:
c6:ce:6c:54:e1:84:2d:6e:c8:21:ed:a5:39:77:b3:f3:60:2a:
7d:01:21:d0:d8:d2:e2:7c:71:7f:5c:05:6f:75:1c:14:d4:13:
7d:63:2f:3b:b5:a0:8e:e1:8f:a4:9e:c9:f5:f7:d9:61:c3:48:
89:17:e8:9f:ec:ca:1a:79:eb:5a:1f:15:d5:3f:11:f7:2e:9a:
02:f9:a9:c5:ca:33:88:6c:f4:a1:d4:fa:22:81:8b:b8:1b:f6:
36:a7:ea:15
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ7/7wndwW/JY0rMTj7Lp+40MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTAyZTJkMjRiMWYyMTY5MTMwODgyMDdhMjY4ZTY2MjZi
MGNlMzkwHhcNMjYwNjI1MTc1ODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNWQ3N2U3MjY1ZmNlZGEyZmY4ZDNmMjBjN2IxZjZhNzM3ODNmNmI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZgG+Co0M5bIgXwvBeMW33aP7VEP
rrOGa+IJBYUg5ehZ3Raq4EKsAsDNL/KB4qGCYhGA8I4b4veiqIabv3dxsKZLMZ2J
64HyqCoryZhiGi8MGGTaJMj/5OKTySO8KOUr0COvCV3VJ93TPNQ7VbJj7/ZWy2Hz
4qO+ISq4FX64ekXMjAEElnHwXJnxCuL24fHKTg7zwfbuYHKo6IIE7ErXOMMbRrYm
j7CKBWevnl9kxGb0NNoHNm+blSxLXebQpAhIe8Qnqb4uMime2Yqj8AYYOn7Ur8UW
FR0WdVYBbeutAmfqWDD9Fbz7yCUN6hUS+TAnM6OroD8X70KprHNq4AjsEwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCXXfnJl/O2i/40/IMex9qc3g/a4MB8GA1UdIwQY
MBaAFH1QLi0ksfIWkTCIIHomjmYmsM45MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZBdUxTU3g4aGFSTUlnZ2VpYU9aaWF3emprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9hYTUzY2YtZjk4OC00MGViLTgwODMt
NTFkNzU1NjhhOWUzLzEvSmRkLWNtWDg3YUxfalQ4Z3g3SDJwemVEOXJnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS9hYTUzY2YtZjk4OC00MGViLTgwODMtNTFkNzU1NjhhOWUz
LzEvZlZBdUxTU3g4aGFSTUlnZ2VpYU9aaWF3emprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwwrpMA0G
CSqGSIb3DQEBCwUAA4IBAQC8wV0/pg0WEqc7P1slTo+t8lSbrrGTLimWSVWCc6ux
c88BgK1cyeL+ISyBMKo+ibN1BawDSArwpOSvQHsl8t+uf9beG4sjW+wVfGlMUcWq
vUB+ZWgOiy9rmaxBVv3X+vSOK9kTHtxDC2pCeeYXrO/X7q5P/KbfJ6goxgxA0BFJ
Vg4ok1SdgKXhpMs6hlq1rXaId85TQ6P+LTtnayrTDgx5ghbGzmxU4YQtbsgh7aU5
d7PzYCp9ASHQ2NLifHF/XAVvdRwU1BN9Yy87taCO4Y+knsn199lhw0iJF+if7Moa
eetaHxXVPxH3LpoC+anFyjOIbPSh1PoigYu4G/Y2p+oV
-----END CERTIFICATE-----
Generated at Thu Jul 9 10:46:53 2026 by rpki-client