Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/JzyMOnvEmLaCo1iuGmpfyyZrLUY.roa
File: JzyMOnvEmLaCo1iuGmpfyyZrLUY.roa (raw, json)
Hash identifier: s2R34bE+hNf0ut2LPhSXKOeugTNBG6R2hENOjWH+xVQ=
Subject key identifier: 27:3C:8C:3A:7B:C4:98:B6:82:A3:58:AE:1A:6A:5F:CB:26:6B:2D:46
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019F2368B6D569BABBE3EAFEDED427AB82EE
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/JzyMOnvEmLaCo1iuGmpfyyZrLUY.roa
Signing time: Thu 02 Jul 2026 15:18:12 +0000
ROA not before: Thu 02 Jul 2026 15:18:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34989
IP address blocks: 82.152.9.0/24 maxlen: 24
82.152.65.0/24 maxlen: 24
82.152.219.0/24 maxlen: 24
82.152.244.0/24 maxlen: 24
82.153.105.0/24 maxlen: 24
82.153.106.0/24 maxlen: 24
82.153.107.0/24 maxlen: 24
82.153.108.0/24 maxlen: 24
82.153.124.0/24 maxlen: 24
82.153.230.0/24 maxlen: 24
82.153.237.0/24 maxlen: 24
212.38.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:b6:d5:69:ba:bb:e3:ea:fe:de:d4:27:ab:82:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 2 15:18:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=273c8c3a7bc498b682a358ae1a6a5fcb266b2d46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:02:41:91:8d:e8:d8:45:48:d7:af:4b:5a:96:
85:58:d0:07:49:7c:5d:fd:4f:d2:0e:46:44:c1:aa:
82:5a:49:a9:19:45:27:e8:a3:0c:8a:8f:70:5a:d4:
a8:fa:30:31:8c:f0:7e:42:90:45:87:d4:22:8e:be:
01:6d:57:0b:b3:c6:4c:2d:c6:34:f5:8a:11:96:3b:
3f:3e:d8:a4:b9:02:f8:18:6c:08:e4:a7:b3:55:ff:
65:5c:8f:90:e5:e1:01:a3:4d:e4:03:0e:27:6f:cb:
44:9a:b8:c5:43:a6:f4:2a:d7:73:2e:70:22:12:b0:
bc:ba:73:b2:a7:f3:f7:23:f9:90:e5:ef:fb:92:54:
a4:d9:7a:5a:d1:3f:5a:c5:6a:f6:1b:1e:dd:52:ee:
22:10:0a:6b:ec:5d:02:75:22:c7:a7:d1:1a:ca:ff:
50:ba:18:85:88:41:e2:18:f4:cc:31:c4:f9:67:f9:
45:cc:8f:df:b1:f4:89:76:f1:f9:cc:1f:87:a4:dc:
0d:33:4d:50:36:fd:8a:03:8c:57:7b:58:69:58:dc:
42:d5:7f:14:a7:9a:59:8f:74:c8:ac:0c:9a:57:9e:
b3:3f:e3:8a:d7:d7:78:cb:2f:2e:7d:b4:66:cd:6a:
27:a9:4c:26:f7:76:a0:49:b1:2a:ae:94:f5:a3:6f:
33:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:3C:8C:3A:7B:C4:98:B6:82:A3:58:AE:1A:6A:5F:CB:26:6B:2D:46
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/JzyMOnvEmLaCo1iuGmpfyyZrLUY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.9.0/24
82.152.65.0/24
82.152.219.0/24
82.152.244.0/24
82.153.105.0-82.153.108.255
82.153.124.0/24
82.153.230.0/24
82.153.237.0/24
212.38.79.0/24
Signature Algorithm: sha256WithRSAEncryption
57:10:3a:cf:c7:32:05:ef:a3:a3:08:56:c8:33:9b:70:90:07:
a2:f5:0f:1e:95:f8:08:c6:65:f0:c6:78:01:3e:c5:83:c3:ea:
dc:99:7d:23:55:c2:33:11:61:8c:57:6a:a5:08:3d:0c:3f:42:
8f:30:e0:9c:d4:65:3e:21:43:e2:b7:58:ed:ef:7c:1d:b9:7c:
40:21:46:7e:cc:b0:94:e7:42:18:22:38:84:65:f0:ff:23:0c:
53:8a:0c:b4:a6:51:c3:56:68:69:93:52:c1:0b:c0:7a:54:19:
67:f7:83:a5:a6:ec:bb:ff:e6:ee:1b:d8:40:71:68:00:e1:8e:
67:7e:37:50:80:6d:40:53:e3:48:9b:51:6f:3e:2d:e4:1e:3f:
43:76:e1:21:29:5c:2d:c3:ac:14:e6:ff:2a:4d:e5:8d:29:a0:
31:f3:df:43:10:56:40:a7:64:69:b9:af:55:b9:71:f4:b0:e3:
f1:25:8b:c7:e7:c7:bc:0d:4b:3a:f9:04:9c:bd:de:d6:ec:7a:
e5:75:24:d8:92:f4:ec:44:36:84:ec:57:34:e4:dd:a4:48:e0:
65:1a:a2:80:c1:32:9e:ef:23:7d:b6:e6:48:67:64:27:9d:a2:
bd:a8:e2:d5:70:dd:28:ab:78:ec:1d:44:81:58:d5:44:7c:2b:
e7:ec:a5:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 18:18:32 2026 by rpki-client