Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/9ae221-c101-497f-91fe-508099c133bb/1/jv5OsjGRKcgeFQVQV3zovqWzVIw.roa
File: jv5OsjGRKcgeFQVQV3zovqWzVIw.roa (raw, json)
Hash identifier: RrWjK9co9zjcBxKsUyNwdo88EIEb3efvk+y4T/I6npY=
Subject key identifier: 8E:FE:4E:B2:31:91:29:C8:1E:15:05:50:57:7C:E8:BE:A5:B3:54:8C
Certificate issuer: /CN=877aad307ad330ebb8cf44ec21389a170436fd53
Certificate serial: 019FEA72F8420BAB01B0A951C2944F8402F2
Authority key identifier: 87:7A:AD:30:7A:D3:30:EB:B8:CF:44:EC:21:38:9A:17:04:36:FD:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3qtMHrTMOu4z0TsITiaFwQ2_VM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/9ae221-c101-497f-91fe-508099c133bb/1/jv5OsjGRKcgeFQVQV3zovqWzVIw.roa
Signing time: Mon 10 Aug 2026 06:53:51 +0000
ROA not before: Mon 10 Aug 2026 06:53:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 185.14.26.0/24 maxlen: 24
185.14.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/9ae221-c101-497f-91fe-508099c133bb/1/h3qtMHrTMOu4z0TsITiaFwQ2_VM.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/9ae221-c101-497f-91fe-508099c133bb/1/h3qtMHrTMOu4z0TsITiaFwQ2_VM.mft
rsync://rpki.ripe.net/repository/DEFAULT/h3qtMHrTMOu4z0TsITiaFwQ2_VM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 13:32:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ea:72:f8:42:0b:ab:01:b0:a9:51:c2:94:4f:84:02:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=877aad307ad330ebb8cf44ec21389a170436fd53
Validity
Not Before: Aug 10 06:53:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8efe4eb2319129c81e150550577ce8bea5b3548c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:75:1a:d3:9d:b9:ac:c9:77:65:2e:5c:41:b9:
b0:ca:35:71:2f:1f:02:f3:18:5e:33:37:fd:e2:f2:
5d:7d:05:f0:d5:44:ab:ad:2c:e5:e1:75:b5:62:e8:
73:a7:f8:75:ce:c5:9e:c8:97:e7:f8:b3:3f:7a:ef:
5a:f7:6e:da:96:40:68:96:b7:da:4c:f2:b1:74:bd:
2a:53:a6:0b:67:bb:21:42:f4:75:aa:b8:ba:a6:1f:
13:06:fb:cc:8a:6c:86:de:72:1b:1b:d7:ba:fe:b1:
52:e9:5b:a0:3a:57:d4:bf:2b:f8:9c:f5:7b:50:24:
e9:1b:c4:9f:bc:4b:17:c3:d9:aa:74:9c:49:a7:99:
11:0c:e2:af:6d:13:73:43:9a:93:3c:9c:b7:2a:4a:
72:2f:31:ef:1b:a4:5e:99:b2:1e:d6:0b:c2:34:55:
75:db:a2:3d:f3:bc:bc:14:6a:c7:da:99:d7:e0:a8:
74:4a:6b:93:95:3f:76:2e:d3:0d:aa:c6:61:2d:60:
9a:d6:56:5c:45:99:3b:39:5c:a8:05:8e:8c:91:52:
3c:d1:fa:9c:78:c6:c5:3a:8a:63:e1:ae:f9:78:37:
f0:2a:fd:c1:a4:7b:c8:ab:66:de:e2:65:7b:20:6b:
39:9f:46:f8:55:e0:24:9d:b0:f6:18:eb:07:f1:71:
c5:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:FE:4E:B2:31:91:29:C8:1E:15:05:50:57:7C:E8:BE:A5:B3:54:8C
X509v3 Authority Key Identifier:
keyid:87:7A:AD:30:7A:D3:30:EB:B8:CF:44:EC:21:38:9A:17:04:36:FD:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3qtMHrTMOu4z0TsITiaFwQ2_VM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9ae221-c101-497f-91fe-508099c133bb/1/jv5OsjGRKcgeFQVQV3zovqWzVIw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9ae221-c101-497f-91fe-508099c133bb/1/h3qtMHrTMOu4z0TsITiaFwQ2_VM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.14.26.0/23
Signature Algorithm: sha256WithRSAEncryption
0c:ce:4c:3b:c3:c2:f2:bc:ba:0a:29:8f:49:4f:0b:9d:09:5e:
bd:9e:9e:da:5b:ed:c2:c1:3e:97:0a:f0:58:9d:c0:8f:1e:66:
ec:31:94:9e:f0:e5:bf:f1:df:d0:e3:ad:8e:a8:f1:25:d2:70:
06:83:e8:67:f2:15:4b:86:88:1b:50:65:81:27:22:f1:a6:00:
c4:ca:34:92:9e:93:e8:58:75:70:b1:03:69:53:14:8a:b2:58:
96:46:26:22:51:b4:b8:f0:25:86:57:3f:2d:e1:cc:13:b4:27:
fa:bb:cf:f3:21:75:e5:e8:89:67:e9:16:46:a6:0f:1b:17:55:
4d:13:25:42:18:ea:12:5d:d8:14:ce:ac:9f:81:b2:79:b5:28:
99:1c:d4:1c:67:28:7a:f2:77:c3:57:d5:11:3b:f2:04:fc:54:
4f:1a:4f:47:94:7c:b4:21:5a:6a:6a:e0:76:d6:70:78:5b:4f:
a2:60:4b:d0:fa:08:d1:07:96:41:44:16:ff:ed:ce:d4:e7:89:
f6:9b:e5:5d:61:9a:66:b1:dd:66:9c:d0:3b:13:78:f1:a3:06:
c9:d4:29:ba:5f:2a:e3:de:e4:fb:f2:6a:a8:8c:cc:d9:7a:c9:
f1:b8:28:3c:c8:c0:0e:a0:95:1f:e7:09:59:6f:6c:74:f4:a8:
73:27:d7:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 21:54:37 2026 by rpki-client