Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/718c49-c12d-4ab6-b56d-15450368cebd/1/JFFtDqyTv4_kU-MVBcXMX9rjX0A.roa
File: JFFtDqyTv4_kU-MVBcXMX9rjX0A.roa (raw, json)
Hash identifier: jgaXFzX24dTUUL0bgVwsijmvIQoU9DaEh5pE24f8j/U=
Subject key identifier: 24:51:6D:0E:AC:93:BF:8F:E4:53:E3:15:05:C5:CC:5F:DA:E3:5F:40
Certificate issuer: /CN=562e3ee91937129042437a741cb5b5a0c3ea9f65
Certificate serial: 019FB1BBE053A805D8F39F5B893DD4CE8026
Authority key identifier: 56:2E:3E:E9:19:37:12:90:42:43:7A:74:1C:B5:B5:A0:C3:EA:9F:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vi4-6Rk3EpBCQ3p0HLW1oMPqn2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/718c49-c12d-4ab6-b56d-15450368cebd/1/JFFtDqyTv4_kU-MVBcXMX9rjX0A.roa
Signing time: Thu 30 Jul 2026 06:35:07 +0000
ROA not before: Thu 30 Jul 2026 06:35:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213731
IP address blocks: 185.210.230.0/24 maxlen: 25
2a14:a800::/29 maxlen: 29
2a14:a800::/30 maxlen: 30
2a14:a804::/30 maxlen: 30
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/718c49-c12d-4ab6-b56d-15450368cebd/1/Vi4-6Rk3EpBCQ3p0HLW1oMPqn2U.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/718c49-c12d-4ab6-b56d-15450368cebd/1/Vi4-6Rk3EpBCQ3p0HLW1oMPqn2U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vi4-6Rk3EpBCQ3p0HLW1oMPqn2U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b1:bb:e0:53:a8:05:d8:f3:9f:5b:89:3d:d4:ce:80:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=562e3ee91937129042437a741cb5b5a0c3ea9f65
Validity
Not Before: Jul 30 06:35:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=24516d0eac93bf8fe453e31505c5cc5fdae35f40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:df:88:d7:34:8d:8b:1c:34:ad:26:ee:e4:97:
a5:82:1e:46:c5:2c:24:16:fe:f8:df:f9:23:0f:6e:
06:c6:7b:51:52:01:e6:f6:24:f7:a3:a0:8b:b2:41:
09:13:53:73:39:c0:6c:3f:14:28:24:41:3f:2a:64:
1f:7d:1c:9e:8d:03:b4:59:62:04:34:d5:f3:c4:1d:
59:44:5e:5a:86:8b:ca:7d:54:71:b2:90:2e:51:7c:
74:93:17:7a:c2:45:05:ff:5c:a2:19:74:b6:34:41:
74:0d:5f:ea:cc:99:71:3f:86:38:ee:d0:f0:54:33:
e3:77:7f:cc:30:1c:62:bb:31:71:fd:cb:8a:18:56:
d4:31:72:60:a3:b6:4f:ed:19:6c:36:a6:e5:7e:20:
a0:5a:ff:71:b7:ba:f4:14:34:b4:79:5e:3b:c1:1c:
b1:8e:6c:83:93:b6:1b:a8:ba:f3:b9:5e:26:fd:e3:
57:b6:c8:52:01:ad:30:fd:88:7b:7d:9a:84:c6:27:
4d:13:88:0a:06:f4:18:86:7b:5e:ab:a0:d2:2a:c5:
d9:4b:f3:c4:4d:66:53:75:d9:3c:6d:0b:7c:ff:38:
36:57:4a:e2:ef:03:fc:1e:3a:98:de:72:97:5a:d4:
b1:08:bc:4d:94:91:00:8a:34:6f:d2:2e:e9:46:27:
65:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:51:6D:0E:AC:93:BF:8F:E4:53:E3:15:05:C5:CC:5F:DA:E3:5F:40
X509v3 Authority Key Identifier:
keyid:56:2E:3E:E9:19:37:12:90:42:43:7A:74:1C:B5:B5:A0:C3:EA:9F:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vi4-6Rk3EpBCQ3p0HLW1oMPqn2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/718c49-c12d-4ab6-b56d-15450368cebd/1/JFFtDqyTv4_kU-MVBcXMX9rjX0A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/718c49-c12d-4ab6-b56d-15450368cebd/1/Vi4-6Rk3EpBCQ3p0HLW1oMPqn2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.210.230.0/24
IPv6:
2a14:a800::/29
Signature Algorithm: sha256WithRSAEncryption
6b:ef:78:cd:42:82:85:fe:db:5c:60:6a:a9:97:0d:ba:8f:26:
ed:6c:a8:07:74:aa:0e:cd:eb:29:18:36:93:11:0f:0a:72:66:
95:a0:75:ac:92:ae:83:c6:6d:29:ed:c0:cf:88:24:40:a3:bb:
c2:89:c1:82:2c:6d:22:ff:5a:08:43:14:95:21:6e:35:d4:fb:
f2:61:65:ff:97:51:61:78:83:ce:ab:df:8e:74:75:ae:0a:b9:
ac:92:ad:1e:9b:9d:dd:19:9d:e9:d8:e5:99:e8:1b:11:0e:29:
c5:e1:3c:cf:43:ce:65:44:07:b6:f6:d7:3c:d5:99:58:77:4e:
c6:d8:a3:94:a4:08:d0:39:51:ed:8e:cd:f2:c0:fd:b2:9b:58:
b3:0d:ae:b2:44:0a:c5:53:c0:ee:03:1d:14:25:0f:dd:55:1c:
bf:ce:60:1f:c1:bf:1e:b3:14:e9:58:b5:41:45:c5:94:66:45:
7e:ac:d6:90:8a:4c:77:67:ad:16:13:6b:11:f3:01:7d:1c:a5:
13:6a:5b:1e:84:bc:c6:06:0c:2a:6f:b9:58:e9:ae:38:0d:73:
6d:18:c4:1c:f7:4f:a3:6c:30:02:86:75:9f:ff:9c:57:4d:b1:
c3:d4:81:f5:cb:a5:3a:30:8e:90:6e:8e:51:b4:f7:9a:fd:14:
06:0b:66:76
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZ+xu+BTqAXY859biT3UzoAmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2MmUzZWU5MTkzNzEyOTA0MjQzN2E3NDFjYjViNWEwYzNl
YTlmNjUwHhcNMjYwNzMwMDYzNTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNDUxNmQwZWFjOTNiZjhmZTQ1M2UzMTUwNWM1Y2M1ZmRhZTM1ZjQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmt+I1zSNixw0rSbu5Jelgh5GxSwk
Fv743/kjD24GxntRUgHm9iT3o6CLskEJE1NzOcBsPxQoJEE/KmQffRyejQO0WWIE
NNXzxB1ZRF5ahovKfVRxspAuUXx0kxd6wkUF/1yiGXS2NEF0DV/qzJlxP4Y47tDw
VDPjd3/MMBxiuzFx/cuKGFbUMXJgo7ZP7RlsNqblfiCgWv9xt7r0FDS0eV47wRyx
jmyDk7YbqLrzuV4m/eNXtshSAa0w/Yh7fZqExidNE4gKBvQYhnteq6DSKsXZS/PE
TWZTddk8bQt8/zg2V0ri7wP8HjqY3nKXWtSxCLxNlJEAijRv0i7pRidlnwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFCRRbQ6sk7+P5FPjFQXFzF/a419AMB8GA1UdIwQY
MBaAFFYuPukZNxKQQkN6dBy1taDD6p9lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVmk0LTZSazNFcEJDUTNwMEhMVzFvTVBxbjJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy83MThjNDktYzEyZC00YWI2LWI1NmQt
MTU0NTAzNjhjZWJkLzEvSkZGdERxeVR2NF9rVS1NVkJjWE1YOXJqWDBBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy83MThjNDktYzEyZC00YWI2LWI1NmQtMTU0NTAzNjhjZWJk
LzEvVmk0LTZSazNFcEJDUTNwMEhMVzFvTVBxbjJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAudLmMA0E
AgACMAcDBQMqFKgAMA0GCSqGSIb3DQEBCwUAA4IBAQBr73jNQoKF/ttcYGqplw26
jybtbKgHdKoOzespGDaTEQ8KcmaVoHWskq6Dxm0p7cDPiCRAo7vCicGCLG0i/1oI
QxSVIW411PvyYWX/l1FheIPOq9+OdHWuCrmskq0em53dGZ3p2OWZ6BsRDinF4TzP
Q85lRAe29tc81ZlYd07G2KOUpAjQOVHtjs3ywP2ym1izDa6yRArFU8DuAx0UJQ/d
VRy/zmAfwb8esxTpWLVBRcWUZkV+rNaQikx3Z60WE2sR8wF9HKUTalsehLzGBgwq
b7lY6a44DXNtGMQc90+jbDAChnWf/5xXTbHD1IH1y6U6MI6Qbo5RtPea/RQGC2Z2
-----END CERTIFICATE-----
Generated at Thu Aug 13 08:45:34 2026 by rpki-client