Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/JdHeOcGDJJdM6UCWBXfWcx1Tm7I.roa
File: JdHeOcGDJJdM6UCWBXfWcx1Tm7I.roa (raw, json)
Hash identifier: 8taEk02k3Zh0P+f+vS6Vif1SJ8fYMwfiQV84thV5nlI=
Subject key identifier: 25:D1:DE:39:C1:83:24:97:4C:E9:40:96:05:77:D6:73:1D:53:9B:B2
Certificate issuer: /CN=69fa2623b222d08d9356975044b9407b5fea48ba
Certificate serial: 019FF04DB0D5DB99498A23B0021A69028FCB
Authority key identifier: 69:FA:26:23:B2:22:D0:8D:93:56:97:50:44:B9:40:7B:5F:EA:48:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/JdHeOcGDJJdM6UCWBXfWcx1Tm7I.roa
Signing time: Tue 11 Aug 2026 10:10:51 +0000
ROA not before: Tue 11 Aug 2026 10:10:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214833
IP address blocks: 187.13.68.0/24 maxlen: 24
201.50.114.0/24 maxlen: 24
201.50.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f0:4d:b0:d5:db:99:49:8a:23:b0:02:1a:69:02:8f:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69fa2623b222d08d9356975044b9407b5fea48ba
Validity
Not Before: Aug 11 10:10:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=25d1de39c18324974ce940960577d6731d539bb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:49:5d:49:1f:d7:32:69:4a:ea:25:79:22:19:
9a:23:5a:6c:8b:6a:7f:ea:a7:04:c5:d3:a6:2c:df:
af:90:00:3c:ad:c8:59:f0:16:56:a0:ee:5c:34:97:
cc:35:18:61:21:19:0c:ac:6f:a1:72:f9:a0:24:f4:
23:2d:f4:f3:45:38:15:09:c3:58:24:0e:6a:41:1a:
e3:59:d1:2d:4f:4b:6b:15:fb:4e:ac:fa:29:09:f9:
ce:47:b5:18:41:06:f0:57:0a:89:fd:89:27:e3:19:
2b:e7:aa:c7:97:c9:25:5a:cd:73:f2:e9:7d:83:9e:
a6:2b:dd:d8:43:af:d1:fb:13:92:e6:f1:e6:e9:d6:
9d:a6:10:e3:df:7d:5b:8d:bd:20:c1:c4:c9:72:3c:
36:24:59:fc:4b:aa:e2:ff:57:8d:c5:ed:b2:6f:9e:
2f:09:32:c3:15:f7:b5:27:40:d7:cd:85:e1:5b:47:
01:fc:21:c7:64:21:f9:c8:c7:a0:18:6f:18:54:08:
94:ea:01:e8:ab:2c:6c:09:28:3f:05:8e:be:6c:2b:
03:3e:a6:3a:da:0c:bd:73:83:fb:a0:2e:7c:37:1e:
8b:4f:ec:de:c0:6a:50:f7:6d:40:73:bf:f5:ac:9e:
e2:0b:7c:9f:a8:bd:00:09:af:26:74:3d:26:e6:3f:
0b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:D1:DE:39:C1:83:24:97:4C:E9:40:96:05:77:D6:73:1D:53:9B:B2
X509v3 Authority Key Identifier:
keyid:69:FA:26:23:B2:22:D0:8D:93:56:97:50:44:B9:40:7B:5F:EA:48:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/JdHeOcGDJJdM6UCWBXfWcx1Tm7I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.13.68.0/24
201.50.114.0/24
201.50.119.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:df:e6:0d:b0:35:0b:44:6e:70:9a:29:61:fe:c2:09:0b:4b:
aa:9e:47:cb:ae:a7:47:2c:80:a1:d5:fa:6a:49:37:f6:48:45:
de:6f:3c:cc:83:6b:0c:59:3a:45:8d:b9:21:8d:20:b5:fc:d0:
80:f6:91:7a:31:4b:9e:67:7c:54:f1:67:40:85:61:a1:12:93:
18:17:1c:87:ad:06:68:09:06:04:b7:3b:54:79:85:ca:25:14:
fe:1f:36:44:0d:05:02:f9:1f:6b:e5:e1:c6:bd:fa:1f:6c:26:
18:6d:50:94:ba:fd:fd:27:79:68:4a:bc:56:d2:95:f0:e0:b0:
15:c2:3c:7a:8e:46:21:63:e3:0d:22:8e:a7:9c:5d:59:b6:ee:
5d:b4:ee:37:29:aa:7f:04:26:4d:09:6f:4a:17:94:b7:c4:3d:
a1:c1:e8:31:ab:55:25:2a:9b:0b:b7:59:2f:1b:84:86:9f:3f:
b0:a9:d4:92:2f:66:50:19:94:fc:17:c6:9a:9f:19:cf:fc:a3:
fd:4b:d0:9c:ba:a1:8f:b1:61:c6:eb:84:96:0c:3f:d3:d7:03:
ba:ef:64:0d:55:52:f1:b7:5d:04:87:9f:da:20:7a:0a:c0:c6:
40:b7:72:24:2c:d5:2e:68:bd:44:ab:69:2f:86:88:a2:77:7a:
20:9c:84:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:44:20 2026 by rpki-client