Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/jGolEufnyPDfW166GsYrvcDadWI.roa
File: jGolEufnyPDfW166GsYrvcDadWI.roa (raw, json)
Hash identifier: MhUSPPX1/ZIFQ+uQDE4vWXmxQ4zd9lEULvZBslHM2Vg=
Subject key identifier: 8C:6A:25:12:E7:E7:C8:F0:DF:5B:5E:BA:1A:C6:2B:BD:C0:DA:75:62
Certificate issuer: /CN=ffe043db37ea25c92d85ce65a76d1a4e513624aa
Certificate serial: 019F23683153E7696D2FB1DEC0A9C142CFC5
Authority key identifier: FF:E0:43:DB:37:EA:25:C9:2D:85:CE:65:A7:6D:1A:4E:51:36:24:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_-BD2zfqJckthc5lp20aTlE2JKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/jGolEufnyPDfW166GsYrvcDadWI.roa
Signing time: Thu 02 Jul 2026 15:17:38 +0000
ROA not before: Thu 02 Jul 2026 15:17:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 192.162.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/_-BD2zfqJckthc5lp20aTlE2JKo.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/_-BD2zfqJckthc5lp20aTlE2JKo.mft
rsync://rpki.ripe.net/repository/DEFAULT/_-BD2zfqJckthc5lp20aTlE2JKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 09:03:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:31:53:e7:69:6d:2f:b1:de:c0:a9:c1:42:cf:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffe043db37ea25c92d85ce65a76d1a4e513624aa
Validity
Not Before: Jul 2 15:17:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8c6a2512e7e7c8f0df5b5eba1ac62bbdc0da7562
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:86:6a:62:bf:c7:42:d5:61:d2:cc:12:4b:a0:
48:fc:fd:e3:29:12:82:1b:59:52:c4:c9:13:b9:a4:
51:ac:7b:75:cc:d8:5a:3d:a3:a8:a3:41:4e:5f:63:
f4:ca:6e:a8:ae:71:b8:8b:5c:30:91:42:91:df:5a:
d5:8b:b4:f7:9b:05:a8:74:10:5e:75:33:ca:73:e8:
ad:09:63:c8:e5:a8:ad:f7:a0:82:74:6e:5f:22:74:
6a:2c:31:36:eb:59:58:d0:a9:bb:ef:85:fc:ff:17:
cc:d6:6b:26:49:f0:03:27:e0:6b:48:97:a0:f3:ad:
cf:99:e3:64:90:f2:07:61:66:08:71:77:cc:bc:40:
d4:de:e1:d4:01:27:92:49:c6:d1:a4:d6:91:a6:d7:
df:9c:03:12:25:11:f0:1c:b4:8a:63:9b:60:c2:c7:
c3:be:cf:c2:7d:d5:c7:41:44:64:c7:7e:2d:64:2a:
da:61:4b:89:dd:65:ab:c9:c7:ac:9a:ff:d5:30:43:
8f:9f:e6:ec:68:03:f0:47:82:1e:f0:64:e3:2d:ca:
ec:9a:d9:24:59:b0:a4:86:90:b5:3c:42:79:26:13:
8d:da:3b:d1:bf:e8:18:d6:a5:f2:35:aa:22:f3:d9:
78:dc:35:ff:52:13:f5:cd:c9:56:ea:ee:b6:c1:5a:
f1:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:6A:25:12:E7:E7:C8:F0:DF:5B:5E:BA:1A:C6:2B:BD:C0:DA:75:62
X509v3 Authority Key Identifier:
keyid:FF:E0:43:DB:37:EA:25:C9:2D:85:CE:65:A7:6D:1A:4E:51:36:24:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_-BD2zfqJckthc5lp20aTlE2JKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/jGolEufnyPDfW166GsYrvcDadWI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/_-BD2zfqJckthc5lp20aTlE2JKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.162.219.0/24
Signature Algorithm: sha256WithRSAEncryption
88:af:cd:4c:5d:f5:fb:5e:39:92:05:df:79:35:6c:15:b7:c0:
f5:ba:08:43:04:88:59:dd:25:29:87:58:99:b3:86:50:fd:a2:
df:a0:f6:38:f2:fb:34:db:99:34:11:88:26:d9:17:7f:fd:d5:
56:35:b9:c5:06:4e:64:24:77:ff:59:0a:41:56:a6:b3:c6:ce:
bc:a0:ea:66:b6:4b:2d:18:5e:e4:5e:0e:ce:3f:70:4c:f1:ce:
84:2a:37:86:9c:9d:30:db:b3:64:fc:ea:4b:a3:e5:f8:b2:1c:
fc:91:65:ea:fd:f4:19:6f:76:39:e6:f4:89:c9:a2:e9:09:e5:
70:29:a8:ac:0c:ae:07:84:16:50:d5:9e:a0:c0:99:13:c6:26:
b4:c7:59:e9:68:05:5b:87:5e:ea:4b:ca:d4:80:04:d1:c1:8e:
1d:a4:9f:95:ed:ea:69:57:51:97:89:e0:a3:d9:57:38:f6:3f:
8a:7e:1a:73:73:ff:28:ea:eb:1a:21:27:de:df:31:6a:44:b3:
cd:5f:78:42:d1:cf:48:8c:0d:c2:41:cb:31:7e:bf:42:83:cc:
a7:d7:5d:2a:43:b7:fb:77:c2:04:42:df:89:d0:73:f1:b2:50:
0e:a5:7f:57:b1:27:b9:a2:9e:8a:a4:b1:f6:38:42:28:3d:1a:
4b:5a:60:41
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaDFT52ltL7HewKnBQs/FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmZTA0M2RiMzdlYTI1YzkyZDg1Y2U2NWE3NmQxYTRlNTEz
NjI0YWEwHhcNMjYwNzAyMTUxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YzZhMjUxMmU3ZTdjOGYwZGY1YjVlYmExYWM2MmJiZGMwZGE3NTYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtoZqYr/HQtVh0swSS6BI/P3jKRKC
G1lSxMkTuaRRrHt1zNhaPaOoo0FOX2P0ym6ornG4i1wwkUKR31rVi7T3mwWodBBe
dTPKc+itCWPI5ait96CCdG5fInRqLDE261lY0Km774X8/xfM1msmSfADJ+BrSJeg
863PmeNkkPIHYWYIcXfMvEDU3uHUASeSScbRpNaRptffnAMSJRHwHLSKY5tgwsfD
vs/CfdXHQURkx34tZCraYUuJ3WWrycesmv/VMEOPn+bsaAPwR4Ie8GTjLcrsmtkk
WbCkhpC1PEJ5JhON2jvRv+gY1qXyNaoi89l43DX/UhP1zclW6u62wVrxrwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIxqJRLn58jw31teuhrGK73A2nViMB8GA1UdIwQY
MBaAFP/gQ9s36iXJLYXOZadtGk5RNiSqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXy1CRDJ6ZnFKY2t0aGM1bHAyMGFUbEUySktvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9mNzQ5MTQtZGRhOC00ZDQ1LTk5OTIt
NGJlZjgzMjhhYWFiLzEvakdvbEV1Zm55UERmVzE2NkdzWXJ2Y0RhZFdJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi9mNzQ5MTQtZGRhOC00ZDQ1LTk5OTItNGJlZjgzMjhhYWFi
LzEvXy1CRDJ6ZnFKY2t0aGM1bHAyMGFUbEUySktvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwKLbMA0G
CSqGSIb3DQEBCwUAA4IBAQCIr81MXfX7XjmSBd95NWwVt8D1ughDBIhZ3SUph1iZ
s4ZQ/aLfoPY48vs025k0EYgm2Rd//dVWNbnFBk5kJHf/WQpBVqazxs68oOpmtkst
GF7kXg7OP3BM8c6EKjeGnJ0w27Nk/OpLo+X4shz8kWXq/fQZb3Y55vSJyaLpCeVw
KaisDK4HhBZQ1Z6gwJkTxia0x1npaAVbh17qS8rUgATRwY4dpJ+V7eppV1GXieCj
2Vc49j+Kfhpzc/8o6usaISfe3zFqRLPNX3hC0c9IjA3CQcsxfr9Cg8yn110qQ7f7
d8IEQt+J0HPxslAOpX9XsSe5op6KpLH2OEIoPRpLWmBB
-----END CERTIFICATE-----
Generated at Mon Jul 6 18:15:51 2026 by rpki-client