Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/d76bf8-541f-4efc-98c5-c4dcc7f6b7df/1/JVYjUEJRSspUdz__TKZidi1E9kM.roa
File: JVYjUEJRSspUdz__TKZidi1E9kM.roa (raw, json)
Hash identifier: 6fSEHzErFHj5znFN4gzU6BMdwVWv++ipvAi/nsLL2B8=
Subject key identifier: 25:56:23:50:42:51:4A:CA:54:77:3F:FF:4C:A6:62:76:2D:44:F6:43
Certificate issuer: /CN=bfe3971a32c0692c4e342e911790662470cf31b2
Certificate serial: 01A043615E0B7DE3A2BA9083B1376FD62013
Authority key identifier: BF:E3:97:1A:32:C0:69:2C:4E:34:2E:91:17:90:66:24:70:CF:31:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v-OXGjLAaSxONC6RF5BmJHDPMbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/d76bf8-541f-4efc-98c5-c4dcc7f6b7df/1/JVYjUEJRSspUdz__TKZidi1E9kM.roa
Signing time: Thu 27 Aug 2026 13:20:49 +0000
ROA not before: Thu 27 Aug 2026 13:20:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207208
IP address blocks: 5.181.191.0/24 maxlen: 24
80.47.28.0/22 maxlen: 22
80.47.28.0/23 maxlen: 23
80.47.30.0/23 maxlen: 23
185.1.217.0/24 maxlen: 24
2001:67c:2498::/48 maxlen: 48
2a09:d581::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/d76bf8-541f-4efc-98c5-c4dcc7f6b7df/1/v-OXGjLAaSxONC6RF5BmJHDPMbI.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/d76bf8-541f-4efc-98c5-c4dcc7f6b7df/1/v-OXGjLAaSxONC6RF5BmJHDPMbI.mft
rsync://rpki.ripe.net/repository/DEFAULT/v-OXGjLAaSxONC6RF5BmJHDPMbI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:43:61:5e:0b:7d:e3:a2:ba:90:83:b1:37:6f:d6:20:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfe3971a32c0692c4e342e911790662470cf31b2
Validity
Not Before: Aug 27 13:20:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2556235042514aca54773fff4ca662762d44f643
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ab:91:42:be:01:3d:de:20:26:a9:83:60:9f:
80:e8:f5:46:e0:8f:a1:e0:a8:2f:17:04:93:3c:33:
80:3a:7b:e9:e5:83:ef:fe:38:b5:9b:8d:87:f0:7e:
53:32:c6:a7:b1:94:2a:01:60:f8:8c:af:84:53:1a:
5e:d8:6b:a6:27:a7:45:70:f0:47:31:f2:a8:d9:e7:
5c:66:df:2f:37:35:db:73:86:64:6e:62:2b:25:64:
f1:bf:a0:99:26:f3:f3:6e:23:92:77:24:fc:4a:b5:
7a:91:57:bf:01:96:16:c7:c8:54:92:f8:ab:1e:ba:
e8:a6:13:32:87:13:a6:62:8b:1f:73:5d:ca:3b:31:
25:62:76:48:61:d0:6d:d3:7f:c1:df:a6:fe:2e:0b:
7f:c6:64:ea:c5:55:a7:5c:48:f7:23:98:54:4e:1d:
5b:49:ae:95:81:ea:38:b0:e9:a5:e1:17:78:50:80:
3d:34:bf:89:d3:b9:7b:65:1f:3d:b1:d0:53:9c:c7:
ac:41:57:1b:d9:63:6f:1e:4f:fd:94:db:10:dc:41:
b5:4b:4b:d7:b7:05:46:60:0a:27:5f:11:99:af:fa:
68:4f:a9:b8:1e:96:30:2a:33:0a:eb:38:78:d1:bc:
b4:5d:7e:c2:c2:e9:56:30:49:06:f5:5b:1b:39:62:
64:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:56:23:50:42:51:4A:CA:54:77:3F:FF:4C:A6:62:76:2D:44:F6:43
X509v3 Authority Key Identifier:
keyid:BF:E3:97:1A:32:C0:69:2C:4E:34:2E:91:17:90:66:24:70:CF:31:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v-OXGjLAaSxONC6RF5BmJHDPMbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/d76bf8-541f-4efc-98c5-c4dcc7f6b7df/1/JVYjUEJRSspUdz__TKZidi1E9kM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/d76bf8-541f-4efc-98c5-c4dcc7f6b7df/1/v-OXGjLAaSxONC6RF5BmJHDPMbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.191.0/24
80.47.28.0/22
185.1.217.0/24
IPv6:
2001:67c:2498::/48
2a09:d581::/32
Signature Algorithm: sha256WithRSAEncryption
20:30:82:8b:92:06:31:01:b7:d8:cb:18:c5:66:9c:ce:39:cc:
cc:c9:29:2f:d9:d7:dc:e1:e4:c1:2f:86:39:eb:c4:35:9a:86:
9a:8d:01:1d:df:61:cb:d0:e5:cd:b6:c8:d2:6f:fb:74:9f:40:
61:7f:85:88:b2:9e:d7:b3:5b:fe:bc:dd:1a:b8:0c:9a:36:5f:
7e:7f:15:3a:f6:1c:95:84:9a:19:be:73:48:09:5c:11:43:30:
3a:53:7e:bc:32:b9:77:b4:75:41:86:bd:81:8e:1a:4f:09:71:
f0:24:28:07:af:48:4b:48:bb:e6:7c:ec:f7:0e:e1:a6:87:11:
dd:39:44:c1:cf:ce:e9:76:4e:6f:d3:f4:32:ac:52:82:6a:3a:
7d:99:f5:6b:09:6a:2a:d0:43:89:4c:87:7c:2b:d3:cf:46:9b:
15:de:15:bb:ab:a9:c1:33:dd:7a:19:c0:ea:15:41:b9:34:c6:
fa:71:2f:29:30:27:10:d9:21:b9:d1:bc:8c:d1:58:33:a6:75:
13:09:65:5e:85:b5:52:d3:2e:1a:5c:ed:8e:51:b3:9e:20:18:
8b:9d:ca:59:0e:a4:86:2f:12:a4:2f:22:33:af:c1:95:c5:9d:
16:78:b2:f2:50:69:55:25:fe:5c:6f:13:b8:d2:6d:2a:9b:ea:
08:b9:b8:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 15:11:42 2026 by rpki-client