Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/JH20TFN7am4SA4p-6IF1yUx5q4A.roa
File: JH20TFN7am4SA4p-6IF1yUx5q4A.roa (raw, json)
Hash identifier: wxg2wogfqK9f0XMbmYtTkFdDDZUlqMguG1hdMp7AJxE=
Subject key identifier: 24:7D:B4:4C:53:7B:6A:6E:12:03:8A:7E:E8:81:75:C9:4C:79:AB:80
Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Certificate serial: 01A0FCF15A7614934C32E176D9CB792BDCE0
Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/JH20TFN7am4SA4p-6IF1yUx5q4A.roa
Signing time: Fri 02 Oct 2026 14:07:50 +0000
ROA not before: Fri 02 Oct 2026 14:07:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48550
IP address blocks: 185.133.210.0/24 maxlen: 24
2a06:e880::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fc:f1:5a:76:14:93:4c:32:e1:76:d9:cb:79:2b:dc:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Validity
Not Before: Oct 2 14:07:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=247db44c537b6a6e12038a7ee88175c94c79ab80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:14:13:2e:eb:e8:62:87:ff:e7:d7:d4:70:b0:
b6:11:25:43:e2:5e:6b:aa:f5:b0:5a:6f:92:d5:61:
66:0e:cd:83:0d:c2:35:2f:fb:57:2f:db:7f:aa:72:
bd:2c:86:41:49:4a:22:b7:ea:61:0d:20:1a:fd:b9:
da:9d:ec:6f:d8:5e:a7:fb:e7:d4:d3:ac:b5:0d:69:
68:d0:c7:15:a3:82:43:8c:92:36:c1:e6:04:8c:d2:
b4:fe:5e:05:03:55:b5:72:a2:58:7b:3d:f6:ee:a4:
8a:61:02:d1:e3:39:bf:95:2a:f8:c4:dd:21:72:94:
a3:ee:78:3b:b8:cd:de:a4:7b:34:22:47:e6:ef:73:
82:dd:67:18:ae:c2:54:5f:3c:2c:f6:79:0b:a5:93:
04:5b:82:b2:c2:d3:69:1c:76:34:0f:3a:ab:c1:07:
be:3e:c7:76:b3:23:eb:52:b5:15:ff:3b:81:48:da:
50:10:ad:b1:86:56:9a:c5:04:7d:02:62:b2:6f:3a:
20:35:33:8c:da:ca:12:87:d7:bc:d4:b6:f7:b0:78:
b0:1e:dc:b9:ad:d8:40:36:b3:c8:10:18:ed:10:05:
8d:72:74:f3:12:c6:a1:e5:5c:7f:ce:2b:fe:69:d8:
a5:e8:bc:e6:3d:6a:ef:29:4e:e2:99:d8:3a:a9:c3:
22:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:7D:B4:4C:53:7B:6A:6E:12:03:8A:7E:E8:81:75:C9:4C:79:AB:80
X509v3 Authority Key Identifier:
keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/JH20TFN7am4SA4p-6IF1yUx5q4A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.133.210.0/24
IPv6:
2a06:e880::/32
Signature Algorithm: sha256WithRSAEncryption
bc:5f:21:e8:3b:c6:5e:b3:8f:ea:92:20:41:2e:a0:06:15:fb:
4c:93:2d:99:fa:14:be:47:85:3e:5d:b9:d5:5f:ec:f8:42:02:
1d:fe:3c:e1:3a:09:6e:bc:69:af:b0:79:30:78:55:83:89:b5:
cf:92:66:a9:0b:90:52:ed:41:14:1c:8f:5b:33:d6:8c:76:ab:
5b:ad:2d:a9:85:82:2f:1f:f7:f2:b4:f7:9f:b8:08:e1:32:04:
37:34:6f:14:e3:e9:2e:dd:cb:06:3f:ea:d9:8d:ee:24:e7:da:
c3:f4:80:73:57:bd:f3:dd:e3:72:92:72:39:9d:83:58:79:b0:
cd:0b:e5:37:9f:d5:44:0e:7f:32:9b:0f:97:45:1f:0c:f1:db:
df:d3:b9:a1:ca:01:9c:11:b3:a9:84:7d:1c:1b:bd:1b:01:e5:
98:19:72:d7:39:7c:f5:c6:a6:74:9a:cf:be:e2:15:7d:44:8b:
7b:ff:9b:f5:dd:0a:79:43:12:91:55:56:91:50:fc:c6:d3:aa:
97:21:47:23:70:dc:4a:9b:b4:5f:11:c4:99:72:a4:33:e6:68:
37:a9:d1:47:45:cf:c6:f5:be:cf:70:97:66:59:47:77:65:8b:
34:24:b4:97:47:86:65:cd:8f:4e:1a:4c:9e:92:f4:06:bc:5f:
1f:a2:79:12
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAaD88Vp2FJNMMuF22ct5K9zgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4MDc0YjQxOWVhZDRjZWZlYTJmMmFkMmMyNTlkOTc4YzVl
ZDc5NTQwHhcNMjYxMDAyMTQwNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNDdkYjQ0YzUzN2I2YTZlMTIwMzhhN2VlODgxNzVjOTRjNzlhYjgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4BQTLuvoYof/59fUcLC2ESVD4l5r
qvWwWm+S1WFmDs2DDcI1L/tXL9t/qnK9LIZBSUoit+phDSAa/bnanexv2F6n++fU
06y1DWlo0McVo4JDjJI2weYEjNK0/l4FA1W1cqJYez327qSKYQLR4zm/lSr4xN0h
cpSj7ng7uM3epHs0Ikfm73OC3WcYrsJUXzws9nkLpZMEW4KywtNpHHY0DzqrwQe+
Psd2syPrUrUV/zuBSNpQEK2xhlaaxQR9AmKybzogNTOM2soSh9e81Lb3sHiwHty5
rdhANrPIEBjtEAWNcnTzEsah5Vx/ziv+adil6LzmPWrvKU7imdg6qcMiPQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFCR9tExTe2puEgOKfuiBdclMeauAMB8GA1UdIwQY
MBaAFLgHS0GerUzv6i8q0sJZ2XjF7XlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYt
M2Q5MWVkZTViMmIxLzEvSkgyMFRGTjdhbTRTQTRwLTZJRjF5VXg1cTRBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYtM2Q5MWVkZTViMmIx
LzEvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAuYXSMA0E
AgACMAcDBQAqBuiAMA0GCSqGSIb3DQEBCwUAA4IBAQC8XyHoO8Zes4/qkiBBLqAG
FftMky2Z+hS+R4U+XbnVX+z4QgId/jzhOgluvGmvsHkweFWDibXPkmapC5BS7UEU
HI9bM9aMdqtbrS2phYIvH/fytPefuAjhMgQ3NG8U4+ku3csGP+rZje4k59rD9IBz
V73z3eNyknI5nYNYebDNC+U3n9VEDn8ymw+XRR8M8dvf07mhygGcEbOphH0cG70b
AeWYGXLXOXz1xqZ0ms++4hV9RIt7/5v13Qp5QxKRVVaRUPzG06qXIUcjcNxKm7Rf
EcSZcqQz5mg3qdFHRc/G9b7PcJdmWUd3ZYs0JLSXR4ZlzY9OGkyekvQGvF8fonkS
-----END CERTIFICATE-----
Generated at Sun Oct 11 17:47:18 2026 by rpki-client