Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/jvNpPdYrQ3MflssnyijS0GZ1M3s.roa
File: jvNpPdYrQ3MflssnyijS0GZ1M3s.roa (raw, json)
Hash identifier: deTd1PHJQcy87xcvtVedQ3VEDL3wpdVtSrEJZUUIk/A=
Subject key identifier: 8E:F3:69:3D:D6:2B:43:73:1F:96:CB:27:CA:28:D2:D0:66:75:33:7B
Certificate issuer: /CN=4da84d247ce37cdccf06e1571d226a2b85677bcd
Certificate serial: 019F246D31C4080F8C323FA60A7F4D49C92C
Authority key identifier: 4D:A8:4D:24:7C:E3:7C:DC:CF:06:E1:57:1D:22:6A:2B:85:67:7B:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TahNJHzjfNzPBuFXHSJqK4Vne80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/jvNpPdYrQ3MflssnyijS0GZ1M3s.roa
Signing time: Thu 02 Jul 2026 20:02:43 +0000
ROA not before: Thu 02 Jul 2026 20:02:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212219
IP address blocks: 185.174.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.mft
rsync://rpki.ripe.net/repository/DEFAULT/TahNJHzjfNzPBuFXHSJqK4Vne80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:24:6d:31:c4:08:0f:8c:32:3f:a6:0a:7f:4d:49:c9:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4da84d247ce37cdccf06e1571d226a2b85677bcd
Validity
Not Before: Jul 2 20:02:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8ef3693dd62b43731f96cb27ca28d2d06675337b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:08:cc:c3:c3:e9:73:11:23:ba:3e:9b:1c:3d:
3f:59:b9:5a:b1:30:1e:6b:75:77:35:a9:87:47:fc:
2d:df:d3:d0:84:23:2f:c8:c0:e4:64:42:3f:3c:d7:
3f:fb:c3:34:c0:05:eb:95:55:7b:85:7c:3e:ef:84:
86:57:ff:71:3b:f9:2a:60:ec:f1:9c:88:d8:d5:c5:
bf:d3:b2:6a:12:53:6f:95:23:fa:0f:7c:56:1e:2e:
fb:ed:68:8c:25:9a:04:f3:b7:5f:c9:99:e6:25:14:
d4:8a:1b:7b:7c:ed:60:d1:7a:ea:cd:06:63:10:dd:
00:b5:32:97:3c:1b:f1:37:ba:2c:bc:24:7d:24:82:
cb:f1:da:38:74:8f:63:4a:a5:00:40:cd:39:e4:3a:
90:a6:20:f1:ec:e7:77:a0:19:3f:d9:0d:f4:b3:68:
e1:25:da:3f:e1:cb:43:e0:3e:0a:4c:05:58:e8:14:
e4:cb:d0:a6:82:88:9c:cf:1e:3b:d1:7e:73:de:01:
d2:ca:a7:4f:16:a9:dc:db:0d:a1:31:c2:67:b9:e6:
a4:25:7f:5e:72:09:c1:d8:9f:5a:5a:4e:07:5b:25:
4b:d2:2f:41:c5:fd:bf:5e:a6:29:70:ae:d6:1a:7e:
1d:86:e3:a7:55:13:c3:ee:58:d7:fa:3e:0a:49:dd:
de:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:F3:69:3D:D6:2B:43:73:1F:96:CB:27:CA:28:D2:D0:66:75:33:7B
X509v3 Authority Key Identifier:
keyid:4D:A8:4D:24:7C:E3:7C:DC:CF:06:E1:57:1D:22:6A:2B:85:67:7B:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TahNJHzjfNzPBuFXHSJqK4Vne80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/jvNpPdYrQ3MflssnyijS0GZ1M3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.174.69.0/24
Signature Algorithm: sha256WithRSAEncryption
77:33:b5:81:06:44:39:08:78:4c:5e:2c:ca:31:0c:39:a9:9a:
29:1b:62:f0:9e:b2:cf:5c:61:f7:99:98:06:7c:3b:03:44:9f:
90:f5:56:88:43:bf:78:4b:9d:d2:b9:1d:09:89:75:16:0a:25:
99:ac:d5:0b:38:d5:fb:6c:7f:eb:54:01:d6:0a:20:15:e8:f9:
b5:f2:90:89:b9:77:ee:ad:67:67:82:f2:63:5b:8f:93:42:51:
ed:d0:b3:0a:ee:aa:6b:84:16:ff:82:a2:49:2f:0a:52:af:0a:
9f:1c:95:f0:91:b3:98:1f:cd:b6:05:29:d4:e5:3c:08:5d:52:
69:e4:85:7e:27:df:c3:db:ab:e7:11:2b:9b:87:d5:e8:08:5d:
70:33:3a:1c:20:90:b6:55:fe:74:cd:9b:7d:aa:dd:00:ac:74:
37:80:0e:e0:e9:14:de:49:5b:4d:4e:f0:5d:7b:7f:40:1b:b1:
2f:0c:5c:70:7f:38:5d:11:25:dc:35:9e:7c:ae:c1:bc:6e:2d:
fb:5e:c0:ca:5f:1d:83:9c:16:b0:8e:93:e6:b5:c5:41:73:17:
1a:32:35:3a:32:54:7c:1f:f3:22:45:63:0b:94:3d:bb:c6:89:
f9:a4:dd:a7:20:45:d1:d9:34:b1:7b:aa:a7:19:c0:48:c7:07:
26:2e:96:33
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8kbTHECA+MMj+mCn9NScksMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkYTg0ZDI0N2NlMzdjZGNjZjA2ZTE1NzFkMjI2YTJiODU2
NzdiY2QwHhcNMjYwNzAyMjAwMjQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZWYzNjkzZGQ2MmI0MzczMWY5NmNiMjdjYTI4ZDJkMDY2NzUzMzdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAjMw8PpcxEjuj6bHD0/WblasTAe
a3V3NamHR/wt39PQhCMvyMDkZEI/PNc/+8M0wAXrlVV7hXw+74SGV/9xO/kqYOzx
nIjY1cW/07JqElNvlSP6D3xWHi777WiMJZoE87dfyZnmJRTUiht7fO1g0XrqzQZj
EN0AtTKXPBvxN7osvCR9JILL8do4dI9jSqUAQM055DqQpiDx7Od3oBk/2Q30s2jh
Jdo/4ctD4D4KTAVY6BTky9Cmgoiczx470X5z3gHSyqdPFqnc2w2hMcJnueakJX9e
cgnB2J9aWk4HWyVL0i9Bxf2/XqYpcK7WGn4dhuOnVRPD7ljX+j4KSd3eVQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFI7zaT3WK0NzH5bLJ8oo0tBmdTN7MB8GA1UdIwQY
MBaAFE2oTSR843zczwbhVx0iaiuFZ3vNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGFoTkpIempmTnpQQnVGWEhTSnFLNFZuZTgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC8yMTBmYmItYWE2ZS00OWM5LTkxOGIt
NTU1OGE4YjUzZTNkLzEvanZOcFBkWXJRM01mbHNzbnlpalMwR1oxTTNzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC8yMTBmYmItYWE2ZS00OWM5LTkxOGItNTU1OGE4YjUzZTNk
LzEvVGFoTkpIempmTnpQQnVGWEhTSnFLNFZuZTgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAua5FMA0G
CSqGSIb3DQEBCwUAA4IBAQB3M7WBBkQ5CHhMXizKMQw5qZopG2LwnrLPXGH3mZgG
fDsDRJ+Q9VaIQ794S53SuR0JiXUWCiWZrNULONX7bH/rVAHWCiAV6Pm18pCJuXfu
rWdngvJjW4+TQlHt0LMK7qprhBb/gqJJLwpSrwqfHJXwkbOYH822BSnU5TwIXVJp
5IV+J9/D26vnESubh9XoCF1wMzocIJC2Vf50zZt9qt0ArHQ3gA7g6RTeSVtNTvBd
e39AG7EvDFxwfzhdESXcNZ58rsG8bi37XsDKXx2DnBawjpPmtcVBcxcaMjU6MlR8
H/MiRWMLlD27xon5pN2nIEXR2TSxe6qnGcBIxwcmLpYz
-----END CERTIFICATE-----
Generated at Tue Jul 21 22:19:57 2026 by rpki-client