Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/jeLF5ceyt9VNXiS_AwP3xYsUoTE.roa
File: jeLF5ceyt9VNXiS_AwP3xYsUoTE.roa (raw, json)
Hash identifier: Ez9m0bhUU870nSVicGfKfMBRrQBAVfz5oCOWyzkLOYY=
Subject key identifier: 8D:E2:C5:E5:C7:B2:B7:D5:4D:5E:24:BF:03:03:F7:C5:8B:14:A1:31
Certificate issuer: /CN=f19d396e5ad5b728ce96cfbcef75f58f50e61007
Certificate serial: 019F2368EB290BFF43959D64841ABADB6EB3
Authority key identifier: F1:9D:39:6E:5A:D5:B7:28:CE:96:CF:BC:EF:75:F5:8F:50:E6:10:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Z05blrVtyjOls-873X1j1DmEAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/jeLF5ceyt9VNXiS_AwP3xYsUoTE.roa
Signing time: Thu 02 Jul 2026 15:18:26 +0000
ROA not before: Thu 02 Jul 2026 15:18:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39847
IP address blocks: 89.185.160.0/19 maxlen: 19
178.18.176.0/20 maxlen: 20
185.150.120.0/22 maxlen: 22
2a00:b280::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/8Z05blrVtyjOls-873X1j1DmEAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/8Z05blrVtyjOls-873X1j1DmEAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Z05blrVtyjOls-873X1j1DmEAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:eb:29:0b:ff:43:95:9d:64:84:1a:ba:db:6e:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f19d396e5ad5b728ce96cfbcef75f58f50e61007
Validity
Not Before: Jul 2 15:18:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8de2c5e5c7b2b7d54d5e24bf0303f7c58b14a131
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e0:56:46:52:c9:71:ad:2e:dd:b9:6f:2b:bd:
ac:1c:20:b6:1a:d4:d6:5b:7b:4a:6a:eb:32:91:4f:
cf:65:bc:c6:f3:cf:1d:28:df:4d:43:dd:d2:68:1c:
dd:eb:11:f9:ad:4d:03:0c:48:5a:66:2b:6d:53:fd:
cd:ce:5f:43:82:71:24:26:73:0f:fd:98:88:6f:ae:
c1:ff:a9:03:20:eb:13:f8:06:fe:fc:70:5c:bc:49:
10:c6:c3:72:aa:a1:39:d7:42:26:28:ba:e2:41:28:
df:d3:6d:5c:a3:cc:aa:3b:cc:3c:86:90:10:35:f2:
6e:67:ea:93:76:e7:de:15:cb:62:9c:be:94:3b:25:
05:3c:59:bb:85:09:b7:6c:f9:b8:37:89:aa:58:49:
1f:bc:1f:82:73:93:c0:a4:80:4c:e9:c9:86:33:ad:
5b:b9:47:a9:ea:77:12:42:7a:d8:2b:b6:6c:e5:5e:
3a:7b:6d:ff:0e:c5:af:02:a2:a2:de:69:6e:61:d8:
b2:a9:1d:be:ae:1d:1c:c6:5d:b7:28:74:6f:9c:69:
10:dd:bb:3f:40:a1:a8:99:0f:fc:b6:9b:38:32:56:
aa:18:a2:a7:82:dc:97:52:d2:f5:5f:d1:b5:1e:0a:
88:b6:00:eb:a0:04:ed:02:8b:f1:1a:71:2b:e1:39:
90:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:E2:C5:E5:C7:B2:B7:D5:4D:5E:24:BF:03:03:F7:C5:8B:14:A1:31
X509v3 Authority Key Identifier:
keyid:F1:9D:39:6E:5A:D5:B7:28:CE:96:CF:BC:EF:75:F5:8F:50:E6:10:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Z05blrVtyjOls-873X1j1DmEAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/jeLF5ceyt9VNXiS_AwP3xYsUoTE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/8Z05blrVtyjOls-873X1j1DmEAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.185.160.0/19
178.18.176.0/20
185.150.120.0/22
IPv6:
2a00:b280::/32
Signature Algorithm: sha256WithRSAEncryption
42:e5:61:43:2e:7f:31:5a:3c:ec:e6:0c:4d:36:c6:68:31:0f:
f1:8b:61:a9:32:a5:53:62:59:09:c0:4b:4a:87:8b:c7:ca:63:
a4:f7:af:2d:52:0d:40:cd:63:87:a9:50:2e:0f:51:76:b8:4c:
0c:c5:8d:e4:38:a0:c9:10:fe:10:fc:89:dc:fb:e3:5d:8c:49:
15:ba:7f:a9:20:be:72:86:0a:07:13:47:63:d8:37:83:e5:6e:
43:b7:ff:e9:cc:70:80:fe:63:78:1a:24:1a:b3:44:9c:8f:d3:
62:11:2e:73:09:ca:57:f5:45:ad:53:59:f4:ba:47:e9:11:e2:
79:11:ca:cb:7b:7e:c4:f8:91:9a:0a:70:ea:47:16:6d:d2:2b:
05:07:e2:15:02:67:0d:da:d1:65:51:dc:42:7b:10:81:19:bb:
9d:97:cf:b6:df:79:0c:12:ca:a9:e6:2d:b8:d3:34:38:5f:09:
a0:21:c9:9d:ae:ee:20:5d:2b:8b:b4:08:dd:ae:1a:91:52:9b:
5a:95:aa:30:68:9c:8b:b4:86:f8:d7:0a:ce:6c:e1:cc:b2:57:
e4:d3:9e:f1:63:44:32:35:5b:72:18:ad:31:20:a5:d0:5e:7d:
c7:57:27:80:50:cd:47:a5:9f:13:97:a3:25:b3:0b:63:17:ac:
c7:ab:bf:7e
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAZ8jaOspC/9DlZ1khBq6226zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxOWQzOTZlNWFkNWI3MjhjZTk2Y2ZiY2VmNzVmNThmNTBl
NjEwMDcwHhcNMjYwNzAyMTUxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZGUyYzVlNWM3YjJiN2Q1NGQ1ZTI0YmYwMzAzZjdjNThiMTRhMTMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0OBWRlLJca0u3blvK72sHCC2GtTW
W3tKausykU/PZbzG888dKN9NQ93SaBzd6xH5rU0DDEhaZittU/3Nzl9DgnEkJnMP
/ZiIb67B/6kDIOsT+Ab+/HBcvEkQxsNyqqE510ImKLriQSjf021co8yqO8w8hpAQ
NfJuZ+qTdufeFctinL6UOyUFPFm7hQm3bPm4N4mqWEkfvB+Cc5PApIBM6cmGM61b
uUep6ncSQnrYK7Zs5V46e23/DsWvAqKi3mluYdiyqR2+rh0cxl23KHRvnGkQ3bs/
QKGomQ/8tps4MlaqGKKngtyXUtL1X9G1HgqItgDroATtAovxGnEr4TmQmwIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFI3ixeXHsrfVTV4kvwMD98WLFKExMB8GA1UdIwQY
MBaAFPGdOW5a1bcozpbPvO919Y9Q5hAHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFowNWJsclZ0eWpPbHMtODczWDFqMURtRUFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9mZTkxNWMtYmY3MC00NjAyLThhM2Mt
MDI5MmIwMjAxNTBhLzEvamVMRjVjZXl0OVZOWGlTX0F3UDN4WXNVb1RFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi9mZTkxNWMtYmY3MC00NjAyLThhM2MtMDI5MmIwMjAxNTBh
LzEvOFowNWJsclZ0eWpPbHMtODczWDFqMURtRUFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQFWbmgAwQE
shKwAwQCuZZ4MA0EAgACMAcDBQAqALKAMA0GCSqGSIb3DQEBCwUAA4IBAQBC5WFD
Ln8xWjzs5gxNNsZoMQ/xi2GpMqVTYlkJwEtKh4vHymOk968tUg1AzWOHqVAuD1F2
uEwMxY3kOKDJEP4Q/Inc++NdjEkVun+pIL5yhgoHE0dj2DeD5W5Dt//pzHCA/mN4
GiQas0Scj9NiES5zCcpX9UWtU1n0ukfpEeJ5EcrLe37E+JGaCnDqRxZt0isFB+IV
AmcN2tFlUdxCexCBGbudl8+233kMEsqp5i240zQ4XwmgIcmdru4gXSuLtAjdrhqR
UptalaowaJyLtIb41wrObOHMslfk057xY0QyNVtyGK0xIKXQXn3HVyeAUM1HpZ8T
l6MlswtjF6zHq79+
-----END CERTIFICATE-----
Generated at Tue Jul 21 20:55:28 2026 by rpki-client