Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/11db2b-8868-4c43-b0f9-b264858afb19/1/JdshNWWzWPDoGnEpynR-0_yncmk.roa
File: JdshNWWzWPDoGnEpynR-0_yncmk.roa (raw, json)
Hash identifier: 4NdKzjZWez2M4flsHtC7zl6N0sNaTuq1cnyE5IXfYFI=
Subject key identifier: 25:DB:21:35:65:B3:58:F0:E8:1A:71:29:CA:74:7E:D3:FC:A7:72:69
Certificate issuer: /CN=8044a558d15dfc3b9d4a7e0665f86d257cd02a00
Certificate serial: 019FD622CDF77B4791E28AFB32D4CACFEE70
Authority key identifier: 80:44:A5:58:D1:5D:FC:3B:9D:4A:7E:06:65:F8:6D:25:7C:D0:2A:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gESlWNFd_DudSn4GZfhtJXzQKgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/11db2b-8868-4c43-b0f9-b264858afb19/1/JdshNWWzWPDoGnEpynR-0_yncmk.roa
Signing time: Thu 06 Aug 2026 08:13:52 +0000
ROA not before: Thu 06 Aug 2026 08:13:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3269
IP address blocks: 193.207.192.0/20 maxlen: 20
193.207.208.0/20 maxlen: 20
193.207.224.0/21 maxlen: 21
193.207.232.0/21 maxlen: 21
193.207.240.0/22 maxlen: 22
193.207.244.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/11db2b-8868-4c43-b0f9-b264858afb19/1/gESlWNFd_DudSn4GZfhtJXzQKgA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/11db2b-8868-4c43-b0f9-b264858afb19/1/gESlWNFd_DudSn4GZfhtJXzQKgA.mft
rsync://rpki.ripe.net/repository/DEFAULT/gESlWNFd_DudSn4GZfhtJXzQKgA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d6:22:cd:f7:7b:47:91:e2:8a:fb:32:d4:ca:cf:ee:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8044a558d15dfc3b9d4a7e0665f86d257cd02a00
Validity
Not Before: Aug 6 08:13:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=25db213565b358f0e81a7129ca747ed3fca77269
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:53:67:3d:e8:e7:2b:9e:e0:8d:d4:84:49:76:
9f:66:6b:e7:72:ff:6c:db:92:2f:36:5a:53:f2:41:
e1:f7:77:d5:43:d4:d4:d2:28:c8:51:7f:bc:95:b2:
b8:68:ec:fb:3c:54:64:7e:ad:70:66:da:3d:2e:d3:
64:b6:69:ce:08:fb:76:53:c6:54:ea:67:29:52:43:
5f:c8:f5:f6:98:6e:6c:74:b3:e8:3b:20:3a:99:b5:
6d:49:9c:aa:2d:bb:90:02:46:43:cb:44:55:77:e7:
ed:fa:de:a4:7d:cf:9f:80:91:48:35:31:17:fb:9e:
58:f8:e1:ed:5a:a3:66:0b:14:b5:55:67:8a:5e:ee:
4c:5b:da:25:ce:79:6b:24:de:94:8b:c7:86:dd:29:
2a:63:a1:d5:fa:d8:49:98:3a:cb:6e:09:c0:8e:b1:
ca:10:78:cd:0a:7d:33:4b:94:5e:fb:50:33:3d:e6:
d0:4e:58:eb:64:28:a6:f1:7f:22:7e:33:21:5f:7e:
03:c9:5d:0d:55:45:65:03:ee:d6:87:d3:bd:15:e9:
f8:63:a3:64:a6:3b:a6:23:22:c4:56:09:5c:65:3e:
d4:d8:2b:47:c7:3b:62:9d:6f:12:60:58:28:a9:65:
54:bf:af:bb:48:db:85:88:e8:13:14:5f:6f:e0:6d:
e4:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:DB:21:35:65:B3:58:F0:E8:1A:71:29:CA:74:7E:D3:FC:A7:72:69
X509v3 Authority Key Identifier:
keyid:80:44:A5:58:D1:5D:FC:3B:9D:4A:7E:06:65:F8:6D:25:7C:D0:2A:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gESlWNFd_DudSn4GZfhtJXzQKgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/11db2b-8868-4c43-b0f9-b264858afb19/1/JdshNWWzWPDoGnEpynR-0_yncmk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/11db2b-8868-4c43-b0f9-b264858afb19/1/gESlWNFd_DudSn4GZfhtJXzQKgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.207.192.0-193.207.247.255
Signature Algorithm: sha256WithRSAEncryption
9d:31:71:fb:a3:7b:24:b3:e7:d3:60:a4:72:15:f3:dc:52:df:
df:56:2d:ee:03:8c:2b:3d:3c:a0:73:68:cb:e0:32:cd:f8:81:
e8:6a:88:26:6c:36:ea:4f:e6:85:4e:f5:e5:de:db:5d:ae:75:
fe:c0:6a:4f:db:d4:42:63:28:5b:f7:a0:4d:89:34:45:8f:d3:
a2:bf:28:fa:e0:67:e9:a9:3f:d6:49:37:2d:38:0a:88:f6:49:
dc:86:f6:34:8b:36:52:e5:c9:00:10:49:64:59:dc:5d:80:c8:
3c:ae:b0:d6:f2:99:b1:72:bd:53:a4:16:06:c9:c3:4a:1d:20:
ca:8b:89:7e:14:ea:b0:c1:ef:03:84:d1:29:51:6d:d0:c3:47:
b9:b0:8c:57:11:ef:5f:15:54:33:8b:64:2c:bf:5a:a6:d6:7b:
fe:87:7a:b1:16:a6:39:16:90:03:90:ee:da:25:74:22:e0:b6:
10:cd:35:8a:b6:22:83:7c:63:11:51:be:86:22:e3:bf:25:dc:
11:8a:43:27:86:25:b6:a3:df:36:1b:28:94:4d:d7:89:00:3e:
43:6c:5b:b0:98:07:dc:da:b0:7d:bb:b9:0e:50:99:67:21:83:
3a:4c:f7:4c:b2:0e:4a:69:db:e3:a2:57:f8:83:05:45:db:19:
8e:6b:53:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 08:57:26 2026 by rpki-client