Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/JxdhCj_BSbH7uNtNNfg5e8xj2_Q.roa
File: JxdhCj_BSbH7uNtNNfg5e8xj2_Q.roa (raw, json)
Hash identifier: OGxTRcI4k21SxRnrrk6zekaRfEWL+P7p1fLbMZX0X8U=
Subject key identifier: 27:17:61:0A:3F:C1:49:B1:FB:B8:DB:4D:35:F8:39:7B:CC:63:DB:F4
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 01A0481692A80DFDEFCFAC3D7F4563A91A94
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/JxdhCj_BSbH7uNtNNfg5e8xj2_Q.roa
Signing time: Fri 28 Aug 2026 11:17:13 +0000
ROA not before: Fri 28 Aug 2026 11:17:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 399989
IP address blocks: 109.176.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:48:16:92:a8:0d:fd:ef:cf:ac:3d:7f:45:63:a9:1a:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Aug 28 11:17:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2717610a3fc149b1fbb8db4d35f8397bcc63dbf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:9c:60:74:16:1c:b3:18:82:18:0f:57:53:55:
47:fd:46:c8:89:5e:83:b7:38:78:1f:0b:33:11:b0:
31:5c:48:c1:cf:27:bc:3a:f7:1f:88:f5:35:5f:4d:
dc:ee:8b:bd:c9:39:94:07:40:ee:3a:4e:56:f4:75:
6b:6c:85:81:3f:51:12:29:1d:4b:10:a4:57:92:92:
78:e6:cf:fd:9b:8f:58:5c:67:bf:3d:12:0c:0e:70:
e4:d7:e0:f8:bb:08:7a:26:43:48:03:2a:39:fa:4b:
b2:49:25:c7:ba:22:f7:bf:4e:6b:5a:1c:50:da:1d:
f4:38:f0:b0:1d:ea:7b:bb:db:28:45:3f:14:d8:79:
dc:59:e9:d0:8a:f9:7a:df:90:d5:25:98:3f:99:2b:
d7:10:d5:ae:f9:87:07:a7:59:a2:5c:37:dc:32:db:
23:65:7f:83:73:4d:df:de:17:2c:d6:e2:5c:f6:8d:
0e:b7:48:8b:9d:af:14:b2:da:26:c5:16:d3:0b:02:
d7:a9:c3:ea:ef:f9:4a:b8:c9:66:ec:41:67:a3:18:
7b:ae:9c:2b:98:d1:b0:97:d4:b6:44:6e:fa:e2:da:
84:54:71:11:01:66:50:21:dd:b5:2e:cc:99:cf:4f:
59:56:f7:d4:22:10:46:e2:a4:70:08:48:a6:a8:19:
9c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:17:61:0A:3F:C1:49:B1:FB:B8:DB:4D:35:F8:39:7B:CC:63:DB:F4
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/JxdhCj_BSbH7uNtNNfg5e8xj2_Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.176.25.0/24
Signature Algorithm: sha256WithRSAEncryption
51:f7:76:6f:4a:df:8c:6a:3b:b2:ce:dc:52:5b:16:75:7a:33:
27:26:e1:75:3c:d0:63:93:ca:92:ce:ba:e0:b9:1a:c2:89:88:
ab:88:7f:98:44:e3:e3:5f:48:5c:a6:ff:db:ac:0c:8b:5e:d7:
64:94:86:67:98:8f:9b:34:76:d4:9b:be:ca:c2:2e:f1:09:48:
b8:c5:2d:11:16:97:a5:cb:53:d2:b6:8c:e8:9a:1e:80:0e:6d:
70:d5:cb:fd:1c:7d:bf:27:21:9c:4e:c3:b3:a6:34:6a:d0:61:
f0:a9:94:b1:c7:f9:89:90:cd:5a:bf:22:3b:0a:75:bd:a3:a6:
d6:5b:f7:7f:91:0c:20:67:3d:3f:06:e6:e2:42:03:f9:2c:b4:
d0:fd:4a:14:a4:96:99:66:c2:12:c8:64:22:5d:11:0a:ef:21:
94:d0:04:1c:cb:51:7e:b6:45:54:f2:06:8a:ee:20:fa:56:e2:
74:3f:b6:90:28:40:71:f2:e2:c0:70:17:98:45:3c:01:b1:ed:
00:78:b7:79:6d:ba:f1:4c:6a:2b:8b:85:a7:4e:08:73:56:cf:
23:93:32:41:60:d6:ef:9f:fd:82:bc:21:e6:7c:de:2b:51:6e:
3c:3f:b1:5e:44:41:88:4b:8a:cc:e1:c9:5c:86:18:7f:5d:bf:
fd:d9:3f:2c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaBIFpKoDf3vz6w9f0VjqRqUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlNWI4YTJiMTA2ZDMzNGIwYzZjNjFlMTc3YWE2MmY0NGZl
MGUzYjYwHhcNMjYwODI4MTExNzEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNzE3NjEwYTNmYzE0OWIxZmJiOGRiNGQzNWY4Mzk3YmNjNjNkYmY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJxgdBYcsxiCGA9XU1VH/UbIiV6D
tzh4HwszEbAxXEjBzye8OvcfiPU1X03c7ou9yTmUB0DuOk5W9HVrbIWBP1ESKR1L
EKRXkpJ45s/9m49YXGe/PRIMDnDk1+D4uwh6JkNIAyo5+kuySSXHuiL3v05rWhxQ
2h30OPCwHep7u9soRT8U2HncWenQivl635DVJZg/mSvXENWu+YcHp1miXDfcMtsj
ZX+Dc03f3hcs1uJc9o0Ot0iLna8UstomxRbTCwLXqcPq7/lKuMlm7EFnoxh7rpwr
mNGwl9S2RG764tqEVHERAWZQId21LsyZz09ZVvfUIhBG4qRwCEimqBmc8QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCcXYQo/wUmx+7jbTTX4OXvMY9v0MB8GA1UdIwQY
MBaAFL5biisQbTNLDGxh4XeqYvRP4OO2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmx1S0t4QnRNMHNNYkdIaGQ2cGk5RV9nNDdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvSnhkaENqX0JTYkg3dU50Tk5mZzVlOHhqMl9RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvdmx1S0t4QnRNMHNNYkdIaGQ2cGk5RV9nNDdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbbAZMA0G
CSqGSIb3DQEBCwUAA4IBAQBR93ZvSt+MajuyztxSWxZ1ejMnJuF1PNBjk8qSzrrg
uRrCiYiriH+YROPjX0hcpv/brAyLXtdklIZnmI+bNHbUm77Kwi7xCUi4xS0RFpel
y1PStozomh6ADm1w1cv9HH2/JyGcTsOzpjRq0GHwqZSxx/mJkM1avyI7CnW9o6bW
W/d/kQwgZz0/BubiQgP5LLTQ/UoUpJaZZsISyGQiXREK7yGU0AQcy1F+tkVU8gaK
7iD6VuJ0P7aQKEBx8uLAcBeYRTwBse0AeLd5bbrxTGori4WnTghzVs8jkzJBYNbv
n/2CvCHmfN4rUW48P7FeREGIS4rM4clchhh/Xb/92T8s
-----END CERTIFICATE-----
Generated at Sat Sep 5 01:41:25 2026 by rpki-client