Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/39f4bf-38fc-4312-8516-b430e8de7747/1/sj-hv4O5_Z9peRXGM4t2YS9no0Q.roa
File: sj-hv4O5_Z9peRXGM4t2YS9no0Q.roa (raw, json)
Hash identifier: Fng1VhmMN2AdS6GsFKTHTXU6+4yOuUH1ezrFYVymYmY=
Subject key identifier: B2:3F:A1:BF:83:B9:FD:9F:69:79:15:C6:33:8B:76:61:2F:67:A3:44
Certificate issuer: /CN=aa6782cd7bb922ca4bc6e80e7857f4922f5c23c4
Certificate serial: 019ED02E1B7D0223B2556485137D28E94CD5
Authority key identifier: AA:67:82:CD:7B:B9:22:CA:4B:C6:E8:0E:78:57:F4:92:2F:5C:23:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qmeCzXu5IspLxugOeFf0ki9cI8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/39f4bf-38fc-4312-8516-b430e8de7747/1/sj-hv4O5_Z9peRXGM4t2YS9no0Q.roa
Signing time: Tue 16 Jun 2026 11:25:42 +0000
ROA not before: Tue 16 Jun 2026 11:25:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9123
IP address blocks: 217.149.19.0/24 maxlen: 32
217.149.22.0/24 maxlen: 32
217.149.23.0/24 maxlen: 32
217.149.25.0/24 maxlen: 24
217.149.29.0/24 maxlen: 24
217.149.30.0/24 maxlen: 24
217.149.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/39f4bf-38fc-4312-8516-b430e8de7747/1/qmeCzXu5IspLxugOeFf0ki9cI8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/39f4bf-38fc-4312-8516-b430e8de7747/1/qmeCzXu5IspLxugOeFf0ki9cI8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/qmeCzXu5IspLxugOeFf0ki9cI8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 13:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d0:2e:1b:7d:02:23:b2:55:64:85:13:7d:28:e9:4c:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa6782cd7bb922ca4bc6e80e7857f4922f5c23c4
Validity
Not Before: Jun 16 11:25:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b23fa1bf83b9fd9f697915c6338b76612f67a344
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:26:b9:b8:37:9b:a7:cb:9f:77:66:f4:af:98:
69:2b:87:48:e4:63:ad:f6:be:ff:66:ec:e0:32:99:
e2:9a:c7:0e:72:da:d5:ea:2d:b8:91:14:af:93:9a:
25:4b:bc:7f:4d:93:87:b6:f0:e3:f5:6f:39:8a:b4:
45:56:07:28:28:e1:75:06:e2:d3:3f:f1:79:a8:78:
1c:6c:81:b2:07:70:53:75:a4:24:67:1d:ca:22:b9:
a3:9f:b1:40:ce:83:02:f0:93:47:7e:ce:a5:4d:d4:
f1:ae:21:32:2a:63:2e:69:8b:9f:ec:b6:34:62:09:
4d:9a:ff:f3:1b:68:a1:21:85:c5:3d:82:d1:ac:73:
e6:9b:44:49:a3:e9:97:06:5d:5d:66:a1:4d:56:2e:
e0:4a:56:2e:2a:38:4a:ad:d2:a1:24:3b:60:f6:1d:
49:b1:4e:38:e3:4c:28:19:e2:41:b3:d9:a4:86:77:
2f:7d:5b:6e:d9:9b:9f:f4:9e:c7:94:ae:ea:01:99:
04:fa:05:57:07:09:f8:31:38:8b:80:14:e6:dd:fb:
aa:bf:78:2b:a7:c3:09:f0:8c:61:81:37:1a:c9:e4:
45:38:27:f0:0b:4c:1f:ec:60:21:5b:a4:b9:a3:48:
9d:47:6b:89:32:3d:3f:95:a4:94:71:ce:36:75:09:
d8:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:3F:A1:BF:83:B9:FD:9F:69:79:15:C6:33:8B:76:61:2F:67:A3:44
X509v3 Authority Key Identifier:
keyid:AA:67:82:CD:7B:B9:22:CA:4B:C6:E8:0E:78:57:F4:92:2F:5C:23:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qmeCzXu5IspLxugOeFf0ki9cI8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/39f4bf-38fc-4312-8516-b430e8de7747/1/sj-hv4O5_Z9peRXGM4t2YS9no0Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/39f4bf-38fc-4312-8516-b430e8de7747/1/qmeCzXu5IspLxugOeFf0ki9cI8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.149.19.0/24
217.149.22.0/23
217.149.25.0/24
217.149.29.0-217.149.31.255
Signature Algorithm: sha256WithRSAEncryption
60:99:06:64:a7:cd:52:b2:6f:2a:02:82:90:aa:85:b2:c9:ab:
b5:4a:10:40:65:4e:8a:37:f5:e5:36:56:7f:2f:a5:07:ff:ec:
78:1b:55:e5:8b:75:1e:c1:ba:04:f1:da:09:ef:70:4e:a1:9f:
da:0e:19:68:da:02:3b:a2:e5:0d:bf:f8:9d:c2:53:57:d0:99:
fd:6e:be:bb:4f:83:18:b6:e5:de:34:7b:f2:af:cb:21:ec:96:
05:13:80:62:99:b1:96:5a:67:53:b1:19:fa:93:4c:6c:92:92:
5a:88:a5:8d:fd:bc:f4:da:89:b8:75:5b:c1:bf:0f:5e:99:20:
b2:e2:6e:59:d4:44:73:db:2d:8f:e7:63:44:ca:22:13:71:2d:
65:96:00:aa:2a:60:38:e8:77:33:76:70:0e:da:53:a9:5b:bc:
64:2f:10:31:6d:09:bd:d3:f8:e3:81:70:00:41:e1:80:ea:9c:
ca:b9:c3:55:49:af:de:79:cb:b0:9c:9d:38:49:da:e7:d9:90:
7e:75:ca:fa:e1:ee:03:32:3e:5d:81:2f:86:f5:a5:ed:86:5b:
7c:51:ef:65:4b:c4:b8:31:37:12:12:30:cb:e8:74:13:ba:44:
45:af:9a:1b:50:34:4e:58:7f:c1:e3:5e:be:85:71:ee:65:f6:
78:bc:4c:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 18:14:14 2026 by rpki-client