Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/jDxSBMWSjohu5v628YkiKBdFRCw.roa
File: jDxSBMWSjohu5v628YkiKBdFRCw.roa (raw, json)
Hash identifier: y62O2BZCFUd+VdwqqDL8Xt8x+VuksK9H256l1hzQejU=
Subject key identifier: 8C:3C:52:04:C5:92:8E:88:6E:E6:FE:B6:F1:89:22:28:17:45:44:2C
Certificate issuer: /CN=6c3250a5c1bdab74b1bd23c01c54a8d70b6def20
Certificate serial: 019E4F2A5C9F1C7053527815C87EA16BE384
Authority key identifier: 6C:32:50:A5:C1:BD:AB:74:B1:BD:23:C0:1C:54:A8:D7:0B:6D:EF:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bDJQpcG9q3SxvSPAHFSo1wtt7yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/jDxSBMWSjohu5v628YkiKBdFRCw.roa
Signing time: Fri 22 May 2026 10:10:36 +0000
ROA not before: Fri 22 May 2026 10:10:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15415
IP address blocks: 185.211.102.0/24 maxlen: 24
212.102.227.0/24 maxlen: 24
212.102.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bDJQpcG9q3SxvSPAHFSo1wtt7yA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 May 2026 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:4f:2a:5c:9f:1c:70:53:52:78:15:c8:7e:a1:6b:e3:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c3250a5c1bdab74b1bd23c01c54a8d70b6def20
Validity
Not Before: May 22 10:10:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8c3c5204c5928e886ee6feb6f18922281745442c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:5d:46:93:08:d8:cf:a0:f8:8b:d3:ee:40:13:
27:ac:63:7a:48:8a:89:c4:67:f4:6b:76:09:e5:08:
45:c0:d3:9c:30:f3:3d:35:f6:5c:6b:c6:d1:22:c1:
49:45:66:9b:8d:3d:06:63:5e:eb:19:d0:61:29:1e:
6d:c6:a8:03:d2:f2:a0:0c:e0:42:22:93:33:d3:13:
cd:12:d9:2b:da:c1:94:a2:c4:6f:d0:53:06:99:38:
d1:0c:c0:2d:7b:c4:7f:a4:0d:d8:a5:88:d9:4d:a7:
8a:f2:c7:a4:67:b6:7b:5b:53:fd:18:13:a7:7e:0f:
27:57:5d:8e:aa:7e:98:0e:37:77:20:8d:0c:ec:1d:
2e:39:5f:3c:76:e6:b1:07:2a:76:89:af:a4:b8:ad:
67:fe:a0:f1:b4:0e:76:de:67:f1:38:e4:06:46:cd:
96:d3:5d:7b:97:11:65:dd:df:60:36:06:a7:32:91:
a8:e4:6e:01:7a:ca:41:04:6e:c3:77:a5:c1:db:95:
49:cc:26:45:ec:51:04:1a:4f:ec:4b:8f:3a:d5:6a:
4d:35:72:b0:0f:a3:a2:44:bd:ce:0d:fa:f3:03:7d:
4b:ff:6d:83:18:25:7a:40:0b:70:8c:e2:fe:56:70:
85:59:ff:b3:5e:6e:0a:e7:80:91:e7:55:a9:80:98:
73:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:3C:52:04:C5:92:8E:88:6E:E6:FE:B6:F1:89:22:28:17:45:44:2C
X509v3 Authority Key Identifier:
keyid:6C:32:50:A5:C1:BD:AB:74:B1:BD:23:C0:1C:54:A8:D7:0B:6D:EF:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bDJQpcG9q3SxvSPAHFSo1wtt7yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/jDxSBMWSjohu5v628YkiKBdFRCw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.211.102.0/24
212.102.227.0-212.102.228.255
Signature Algorithm: sha256WithRSAEncryption
15:80:30:6f:e5:98:0f:4c:98:a8:97:e4:8d:c1:28:08:11:1b:
e4:4e:5d:25:51:b0:75:94:00:c3:62:62:8f:15:5a:3d:01:63:
e9:38:70:9e:cc:25:f2:0a:f9:87:04:b8:5d:db:8a:f2:62:50:
74:a6:5a:5c:ad:1a:54:f6:81:bc:d7:f4:32:07:af:b6:8c:0c:
63:01:b6:86:89:da:5c:a2:75:0b:34:ae:5f:9d:5f:8d:f9:f7:
29:e7:85:64:14:8c:2d:b1:6d:2b:33:1c:b5:7f:1e:34:88:13:
02:29:90:2d:f9:ef:82:0a:b5:5b:bf:8b:64:04:4b:49:0a:1b:
c9:9a:c4:61:38:05:d3:de:08:2a:ac:3a:a9:ff:46:81:e5:52:
3f:7d:90:bd:09:c4:d1:00:bc:dc:0b:e5:24:c5:c7:cf:a7:7d:
85:be:8a:e2:6c:08:46:2d:45:7c:6a:7a:bf:10:e9:14:f8:54:
44:b2:3c:bc:5f:d1:40:da:e1:0d:f0:c0:2f:f7:40:7b:c8:ce:
c2:aa:25:98:9a:6a:d8:dc:ec:d5:67:22:bc:9f:f0:1a:85:65:
82:44:12:c6:4a:a1:d8:52:9f:15:b8:6c:12:be:b7:85:61:d3:
2d:0d:56:a0:af:e2:bf:7c:47:03:a3:1a:56:d8:f3:1a:25:1e:
d7:28:e7:5e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat May 23 19:08:29 2026 by rpki-client