Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/379f00-d853-49f3-92b9-f66ac607adb0/1/JZ_2Gis8_FYFbLaeL2m8DGyq5Nc.roa
File: JZ_2Gis8_FYFbLaeL2m8DGyq5Nc.roa (raw, json)
Hash identifier: HE49+Sd04GoBpLYwZc7b9NpqXUFTQByK5MoLgflEpag=
Subject key identifier: 25:9F:F6:1A:2B:3C:FC:56:05:6C:B6:9E:2F:69:BC:0C:6C:AA:E4:D7
Certificate issuer: /CN=a14b6274535bf8537e42d02b1580a468c2dd805a
Certificate serial: 01A0D94BAFEEFA15F868053312DE5C76DAE8
Authority key identifier: A1:4B:62:74:53:5B:F8:53:7E:42:D0:2B:15:80:A4:68:C2:DD:80:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oUtidFNb-FN-QtArFYCkaMLdgFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/379f00-d853-49f3-92b9-f66ac607adb0/1/JZ_2Gis8_FYFbLaeL2m8DGyq5Nc.roa
Signing time: Fri 25 Sep 2026 16:00:11 +0000
ROA not before: Fri 25 Sep 2026 16:00:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 680
IP address blocks: 132.176.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/379f00-d853-49f3-92b9-f66ac607adb0/1/oUtidFNb-FN-QtArFYCkaMLdgFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/379f00-d853-49f3-92b9-f66ac607adb0/1/oUtidFNb-FN-QtArFYCkaMLdgFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/oUtidFNb-FN-QtArFYCkaMLdgFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 19:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:4b:af:ee:fa:15:f8:68:05:33:12:de:5c:76:da:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a14b6274535bf8537e42d02b1580a468c2dd805a
Validity
Not Before: Sep 25 16:00:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=259ff61a2b3cfc56056cb69e2f69bc0c6caae4d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c3:27:af:f9:30:8d:aa:ec:9c:66:82:d6:93:
b6:f4:51:34:cf:f6:29:55:b7:b8:d8:55:4d:86:9b:
f0:bd:e0:a8:27:d2:8a:3f:3d:aa:c6:52:2d:4a:0f:
38:7c:c6:1b:f4:c5:d8:1d:44:6f:85:57:da:eb:ca:
90:97:17:02:31:e0:e8:67:a2:58:9d:4e:93:30:62:
66:93:14:12:18:ab:68:c0:4d:7b:99:74:77:88:d3:
0f:66:85:ae:18:81:6a:6e:c4:82:7f:bf:2b:87:fc:
82:e2:73:85:0e:d3:5b:e4:e9:3a:bd:39:0b:32:5c:
02:43:84:94:4e:96:50:32:ab:40:c2:9b:c8:e8:c0:
fa:f2:94:bb:65:ab:51:05:71:eb:65:29:d8:ab:e4:
4b:a6:55:cf:51:fd:53:56:02:46:b9:08:0f:52:fb:
d2:30:95:66:3e:12:b1:df:97:9a:1b:d7:f3:b4:ac:
46:ee:f6:7b:1f:bb:26:69:5e:f1:d1:49:96:e5:e9:
54:af:25:82:02:24:c2:0d:b4:b0:cc:c0:22:80:2c:
b1:f9:82:23:e9:61:0b:42:c1:d8:cf:dc:9f:13:0b:
96:32:ad:d8:5d:03:20:5c:e1:65:2f:49:ee:66:bd:
ba:3e:89:33:7b:58:40:52:e0:d5:e5:c0:6d:5b:48:
92:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:9F:F6:1A:2B:3C:FC:56:05:6C:B6:9E:2F:69:BC:0C:6C:AA:E4:D7
X509v3 Authority Key Identifier:
keyid:A1:4B:62:74:53:5B:F8:53:7E:42:D0:2B:15:80:A4:68:C2:DD:80:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oUtidFNb-FN-QtArFYCkaMLdgFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/379f00-d853-49f3-92b9-f66ac607adb0/1/JZ_2Gis8_FYFbLaeL2m8DGyq5Nc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/379f00-d853-49f3-92b9-f66ac607adb0/1/oUtidFNb-FN-QtArFYCkaMLdgFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.176.0.0/16
Signature Algorithm: sha256WithRSAEncryption
4f:5a:ef:b0:5e:1c:6c:41:88:f5:ee:58:0c:7b:11:b6:66:6e:
6f:82:ac:2b:ad:b9:1a:8f:ee:c4:b1:5e:5d:d3:b0:b6:10:3c:
88:4e:ec:b9:e8:8b:0c:d2:c8:03:f6:2d:01:0e:00:63:ba:0f:
28:ce:d4:af:75:75:36:4f:a5:f9:77:bb:1c:e5:f3:2a:70:2d:
19:2a:37:5c:d4:ec:75:53:fd:b8:55:f9:13:cd:bc:b3:18:5d:
85:65:e0:89:93:4f:96:b7:fc:f3:eb:b5:a8:08:74:4a:dd:b1:
14:49:6e:79:d8:af:c2:49:a6:a9:68:9c:30:ad:2e:27:0b:d5:
f1:d6:f4:1c:41:51:ee:df:f2:0a:f6:7f:da:53:4f:16:cd:39:
cf:b7:a8:13:51:92:8b:e3:2c:81:e7:69:f3:f0:fe:2d:84:ee:
18:0d:ab:95:b3:09:e4:6a:67:45:2e:2a:07:bb:02:ca:85:6b:
3c:f2:3e:4f:90:47:01:08:a0:05:ca:85:78:82:b7:39:3d:87:
19:d2:b9:3d:f7:ab:f6:be:42:90:ac:7e:87:cd:19:74:5b:6c:
a4:2f:26:9b:b2:7c:11:d0:33:1d:2d:4b:56:a9:43:3b:5c:5d:
aa:bc:ba:cf:44:c0:15:c0:bc:e1:ee:17:38:d4:02:f3:c3:b2:
41:da:9e:ca
-----BEGIN CERTIFICATE-----
MIIE/DCCA+SgAwIBAgISAaDZS6/u+hX4aAUzEt5cdtroMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExNGI2Mjc0NTM1YmY4NTM3ZTQyZDAyYjE1ODBhNDY4YzJk
ZDgwNWEwHhcNMjYwOTI1MTYwMDExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNTlmZjYxYTJiM2NmYzU2MDU2Y2I2OWUyZjY5YmMwYzZjYWFlNGQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcMnr/kwjarsnGaC1pO29FE0z/Yp
Vbe42FVNhpvwveCoJ9KKPz2qxlItSg84fMYb9MXYHURvhVfa68qQlxcCMeDoZ6JY
nU6TMGJmkxQSGKtowE17mXR3iNMPZoWuGIFqbsSCf78rh/yC4nOFDtNb5Ok6vTkL
MlwCQ4SUTpZQMqtAwpvI6MD68pS7ZatRBXHrZSnYq+RLplXPUf1TVgJGuQgPUvvS
MJVmPhKx35eaG9fztKxG7vZ7H7smaV7x0UmW5elUryWCAiTCDbSwzMAigCyx+YIj
6WELQsHYz9yfEwuWMq3YXQMgXOFlL0nuZr26Pokze1hAUuDV5cBtW0iS1QIDAQAB
o4ICCDCCAgQwHQYDVR0OBBYEFCWf9horPPxWBWy2ni9pvAxsquTXMB8GA1UdIwQY
MBaAFKFLYnRTW/hTfkLQKxWApGjC3YBaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1V0aWRGTmItRk4tUXRBckZZQ2thTUxkZ0ZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8zNzlmMDAtZDg1My00OWYzLTkyYjkt
ZjY2YWM2MDdhZGIwLzEvSlpfMkdpczhfRllGYkxhZUwybThER3lxNU5jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC8zNzlmMDAtZDg1My00OWYzLTkyYjktZjY2YWM2MDdhZGIw
LzEvb1V0aWRGTmItRk4tUXRBckZZQ2thTUxkZ0ZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAhLAwDQYJ
KoZIhvcNAQELBQADggEBAE9a77BeHGxBiPXuWAx7EbZmbm+CrCutuRqP7sSxXl3T
sLYQPIhO7LnoiwzSyAP2LQEOAGO6DyjO1K91dTZPpfl3uxzl8ypwLRkqN1zU7HVT
/bhV+RPNvLMYXYVl4ImTT5a3/PPrtagIdErdsRRJbnnYr8JJpqlonDCtLicL1fHW
9BxBUe7f8gr2f9pTTxbNOc+3qBNRkovjLIHnafPw/i2E7hgNq5WzCeRqZ0UuKge7
AsqFazzyPk+QRwEIoAXKhXiCtzk9hxnSuT33q/a+QpCsfofNGXRbbKQvJpuyfBHQ
Mx0tS1apQztcXaq8us9EwBXAvOHuFzjUAvPDskHanso=
-----END CERTIFICATE-----
Generated at Tue Oct 27 06:00:15 2026 by rpki-client