Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/JCvruEX0gSTCm7ZxeA-mioXa8Qc.roa
File: JCvruEX0gSTCm7ZxeA-mioXa8Qc.roa (raw, json)
Hash identifier: zrZqvMelveL2Qkh14yP/3ArnhTSG0StahImaY5Loiq4=
Subject key identifier: 24:2B:EB:B8:45:F4:81:24:C2:9B:B6:71:78:0F:A6:8A:85:DA:F1:07
Certificate issuer: /CN=9aee15c33de358938d6900a1b3c14480a389e85b
Certificate serial: 01A0F70165A1812CAB3D2137BB3645469630
Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/JCvruEX0gSTCm7ZxeA-mioXa8Qc.roa
Signing time: Thu 01 Oct 2026 10:27:38 +0000
ROA not before: Thu 01 Oct 2026 10:27:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203273
IP address blocks: 185.68.244.0/24 maxlen: 24
185.96.80.0/24 maxlen: 24
185.104.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 07:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f7:01:65:a1:81:2c:ab:3d:21:37:bb:36:45:46:96:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b
Validity
Not Before: Oct 1 10:27:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=242bebb845f48124c29bb671780fa68a85daf107
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ba:19:da:5c:e0:d6:43:10:0b:1a:05:0a:d4:
5a:e7:3c:b2:8d:a3:af:90:77:ba:ce:35:73:75:c0:
68:78:32:45:5c:58:2c:d0:84:bf:89:17:fa:e2:87:
07:69:d1:a9:9b:82:c8:dc:bd:00:6e:03:41:55:1f:
7d:5d:ca:90:03:14:2e:f2:f1:1c:c6:ed:4a:fd:92:
b5:4b:20:fd:45:65:c2:f2:76:a6:8d:71:c4:c7:4c:
c4:54:44:6d:f4:97:1c:a7:6b:99:1d:42:7a:60:44:
81:3d:75:e9:fd:be:d8:05:1c:33:f2:78:89:8d:01:
76:e7:a1:c9:86:d9:e3:7e:d7:99:3b:3b:87:7f:7b:
6b:a9:ad:07:e1:ce:fe:bd:48:e3:cd:0d:5f:fe:09:
ac:d4:3b:71:e1:6f:76:6d:99:2d:15:57:cf:2f:41:
cc:89:95:0a:36:69:f2:58:07:fb:02:59:38:ce:2f:
7d:e0:67:fe:06:dc:8e:6e:85:ca:a4:b9:c5:89:1a:
24:b0:84:c7:dd:48:50:7f:08:c0:ec:b6:b1:2a:8a:
3a:6f:20:28:cd:8e:20:fa:57:03:3e:a7:7a:22:19:
c3:91:96:88:aa:3a:a5:52:c5:91:74:79:37:85:22:
31:0c:69:ec:7e:cd:68:63:03:69:4a:f5:cf:82:82:
45:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:2B:EB:B8:45:F4:81:24:C2:9B:B6:71:78:0F:A6:8A:85:DA:F1:07
X509v3 Authority Key Identifier:
keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/JCvruEX0gSTCm7ZxeA-mioXa8Qc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.68.244.0/24
185.96.80.0/24
185.104.151.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:8c:1f:a0:95:9c:9d:e4:3e:f0:c2:98:c5:f2:63:03:17:20:
73:13:6e:61:e9:b9:0a:1b:1f:e3:0e:05:1a:99:57:57:63:fa:
85:8f:b4:39:6f:15:c1:92:f7:0b:a4:07:af:4b:28:79:3e:ce:
09:f9:bb:d2:e0:91:38:58:da:6e:d5:1d:00:28:ce:1a:f1:a5:
84:0d:f7:19:50:a2:bf:ef:32:cd:25:d7:10:05:80:fd:ea:38:
df:b8:a0:32:b0:06:8b:fe:c2:b1:a4:04:fe:bb:33:7a:37:32:
3f:61:79:b9:5e:79:0b:ef:1c:f3:d4:6f:20:9c:49:a2:6d:4b:
58:d3:6f:5f:e9:17:c7:81:a0:66:f7:32:eb:8e:27:4c:0c:16:
01:43:cf:9e:59:bb:fe:69:0b:03:64:bc:d7:0b:70:4a:57:2e:
54:7e:23:7d:31:d0:59:e2:53:72:b7:15:d3:be:19:63:cf:2e:
6e:a2:f6:e2:3e:56:2d:bf:40:c3:2a:7b:73:58:6e:9a:62:37:
5c:14:50:b1:23:58:57:e0:51:db:d6:f0:f5:97:43:4e:bd:8f:
ec:f2:d9:20:fc:6c:a0:8d:0e:97:28:9a:db:8c:2e:71:ff:f2:
42:b8:04:c3:5d:7d:71:84:5d:11:95:6c:b4:24:bc:21:1c:ad:
8d:ec:f4:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 15:43:31 2026 by rpki-client