Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/JDnserL7-kZp6PufFEVsEIFtixc.roa
File: JDnserL7-kZp6PufFEVsEIFtixc.roa (raw, json)
Hash identifier: B3BCDo9ccdOnZFxqd0AyuudhQ55NDi4GfocT/dyaSh0=
Subject key identifier: 24:39:EC:7A:B2:FB:FA:46:69:E8:FB:9F:14:45:6C:10:81:6D:8B:17
Certificate issuer: /CN=eac2c1afd4bdec980506fa07df7c8662d554fa46
Certificate serial: 019FD7EC96CF90791AA27DB7DB08AD01DD85
Authority key identifier: EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/JDnserL7-kZp6PufFEVsEIFtixc.roa
Signing time: Thu 06 Aug 2026 16:33:54 +0000
ROA not before: Thu 06 Aug 2026 16:33:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212335
IP address blocks: 147.185.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 23:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d7:ec:96:cf:90:79:1a:a2:7d:b7:db:08:ad:01:dd:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eac2c1afd4bdec980506fa07df7c8662d554fa46
Validity
Not Before: Aug 6 16:33:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2439ec7ab2fbfa4669e8fb9f14456c10816d8b17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ce:1f:87:db:fe:e3:8f:bc:ed:6e:ea:4d:00:
68:81:8b:3d:38:d6:d1:06:d4:bf:19:0e:7f:91:fd:
9e:3b:af:e2:50:fd:81:b9:e6:55:81:db:82:42:4a:
8a:8d:34:d2:5b:a5:aa:2f:5c:b9:4b:83:3d:33:66:
24:df:1a:ab:56:66:a8:47:e8:62:e0:c0:37:53:95:
83:62:09:dc:49:4b:13:a2:95:0d:0a:50:20:a8:9c:
cc:79:1b:ca:c7:9b:63:72:92:9e:f5:51:93:88:14:
be:0b:7f:76:17:57:6c:3d:c7:96:50:c4:99:79:54:
39:d5:8e:ea:e6:9d:72:c9:79:35:b7:a8:00:00:11:
16:de:6b:18:0f:5e:d5:db:ee:2c:fd:c1:63:84:23:
96:73:c4:7c:c4:fb:d1:d3:fe:6b:19:f6:e4:69:1d:
7d:2e:b9:de:42:7c:46:7d:ab:e1:c6:da:84:78:27:
2a:f0:87:9f:9b:c4:1c:4b:33:ee:69:4c:31:5a:bb:
35:e7:9d:e7:4d:b6:c5:da:ca:61:17:2b:fd:65:05:
33:0a:67:9e:66:ad:65:eb:7a:65:59:f6:0e:f8:d6:
fc:59:72:fc:e9:62:a3:a0:0b:10:a8:c4:9c:6e:4c:
f9:45:8e:46:e4:74:72:88:28:cd:4c:bb:7f:6b:dc:
24:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:39:EC:7A:B2:FB:FA:46:69:E8:FB:9F:14:45:6C:10:81:6D:8B:17
X509v3 Authority Key Identifier:
keyid:EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/JDnserL7-kZp6PufFEVsEIFtixc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.185.106.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:fb:ef:28:42:b2:ef:73:90:f2:b9:a7:95:bf:eb:4d:9d:b6:
98:5f:09:76:d0:7f:b7:aa:34:e4:c2:9c:d7:1e:f8:2a:43:6a:
a8:1f:04:9b:f5:c8:d4:45:78:53:70:4f:1b:d3:a5:a3:c7:31:
a8:4b:ee:76:6a:b2:c7:74:a9:07:1f:7c:6b:3a:66:20:2e:ab:
0f:e8:fa:b5:5f:27:b5:9e:65:68:aa:94:f6:cd:b0:37:ff:7c:
5b:f2:13:6c:49:66:c4:4c:12:d4:43:4e:2d:17:c6:e2:9e:57:
6b:99:2b:99:a2:27:80:3b:42:e7:22:12:1e:fd:e7:9f:b0:c1:
4d:06:98:0b:2b:84:e8:1a:77:99:74:27:f2:ec:1e:8f:bd:1b:
6b:c7:b8:8c:35:fb:68:e7:90:ca:3a:98:10:f7:7d:f4:4e:44:
f4:e4:d3:30:c8:a1:6e:34:c4:5d:f6:06:e4:02:90:c7:1f:5a:
8f:2a:85:3e:fc:09:75:99:21:c2:5e:f7:28:82:b7:43:b1:3e:
33:b9:15:41:ea:82:f9:5a:06:1e:6a:bf:eb:cf:70:f4:e0:82:
52:bf:4c:40:7e:f6:17:a8:47:55:6e:67:34:18:ce:4d:b6:4c:
d0:16:37:8d:54:d5:1e:81:2c:6c:bf:38:66:45:53:e8:a4:c8:
ab:bb:82:a1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ/X7JbPkHkaon232witAd2FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhYzJjMWFmZDRiZGVjOTgwNTA2ZmEwN2RmN2M4NjYyZDU1
NGZhNDYwHhcNMjYwODA2MTYzMzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNDM5ZWM3YWIyZmJmYTQ2NjllOGZiOWYxNDQ1NmMxMDgxNmQ4YjE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqs4fh9v+44+87W7qTQBogYs9ONbR
BtS/GQ5/kf2eO6/iUP2BueZVgduCQkqKjTTSW6WqL1y5S4M9M2Yk3xqrVmaoR+hi
4MA3U5WDYgncSUsTopUNClAgqJzMeRvKx5tjcpKe9VGTiBS+C392F1dsPceWUMSZ
eVQ51Y7q5p1yyXk1t6gAABEW3msYD17V2+4s/cFjhCOWc8R8xPvR0/5rGfbkaR19
LrneQnxGfavhxtqEeCcq8Iefm8QcSzPuaUwxWrs1553nTbbF2sphFyv9ZQUzCmee
Zq1l63plWfYO+Nb8WXL86WKjoAsQqMScbkz5RY5G5HRyiCjNTLt/a9wkdwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCQ57Hqy+/pGaej7nxRFbBCBbYsXMB8GA1UdIwQY
MBaAFOrCwa/UveyYBQb6B998hmLVVPpGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnNMQnI5Uzk3SmdGQnZvSDMzeUdZdFZVLWtZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS81ODlhNmItNGQ3ZS00MDEyLWEwZmMt
YzBjZWIwMzdhZDQyLzEvSkRuc2VyTDcta1pwNlB1ZkZFVnNFSUZ0aXhjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS81ODlhNmItNGQ3ZS00MDEyLWEwZmMtYzBjZWIwMzdhZDQy
LzEvNnNMQnI5Uzk3SmdGQnZvSDMzeUdZdFZVLWtZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk7lqMA0G
CSqGSIb3DQEBCwUAA4IBAQCq++8oQrLvc5DyuaeVv+tNnbaYXwl20H+3qjTkwpzX
HvgqQ2qoHwSb9cjURXhTcE8b06WjxzGoS+52arLHdKkHH3xrOmYgLqsP6Pq1Xye1
nmVoqpT2zbA3/3xb8hNsSWbETBLUQ04tF8binldrmSuZoieAO0LnIhIe/eefsMFN
BpgLK4ToGneZdCfy7B6PvRtrx7iMNfto55DKOpgQ9330TkT05NMwyKFuNMRd9gbk
ApDHH1qPKoU+/Al1mSHCXvcogrdDsT4zuRVB6oL5WgYear/rz3D04IJSv0xAfvYX
qEdVbmc0GM5NtkzQFjeNVNUegSxsvzhmRVPopMiru4Kh
-----END CERTIFICATE-----
Generated at Thu Sep 3 08:28:50 2026 by rpki-client