Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/JN0ilfIsZo2XXPEwko31VwFa3Oo.roa
File: JN0ilfIsZo2XXPEwko31VwFa3Oo.roa (raw, json)
Hash identifier: HbmaVnwmoIfffNETniSuGQ3pcEJ6cmvu6IuLGalxVi0=
Subject key identifier: 24:DD:22:95:F2:2C:66:8D:97:5C:F1:30:92:8D:F5:57:01:5A:DC:EA
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 019F50B199409C6D075EA4476D4475F9DA56
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/JN0ilfIsZo2XXPEwko31VwFa3Oo.roa
Signing time: Sat 11 Jul 2026 10:20:44 +0000
ROA not before: Sat 11 Jul 2026 10:20:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12083
IP address blocks: 82.197.192.0/24 maxlen: 24
82.197.196.0/24 maxlen: 24
82.197.197.0/24 maxlen: 24
82.197.203.0/24 maxlen: 24
82.197.204.0/24 maxlen: 24
82.197.205.0/24 maxlen: 24
82.197.208.0/20 maxlen: 24
84.245.32.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 17:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:50:b1:99:40:9c:6d:07:5e:a4:47:6d:44:75:f9:da:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jul 11 10:20:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=24dd2295f22c668d975cf130928df557015adcea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ee:a9:8f:4c:a9:bb:b5:20:fc:90:82:81:71:
2a:bd:7e:64:c7:38:09:99:98:33:f7:ba:9e:5a:a0:
4d:32:08:1f:3b:95:dc:d4:1d:cf:4f:6a:2d:71:de:
32:cf:a7:7d:a3:ea:73:b6:65:8f:2b:43:42:46:7d:
07:b5:74:e4:e2:35:06:77:f1:7a:07:b0:07:ac:a0:
04:7f:51:5a:33:30:fa:55:96:13:b9:53:fb:b8:b2:
90:25:03:6f:ad:3b:e0:dc:1a:2f:c0:f0:cb:b7:23:
cd:4c:0b:4d:20:6d:b9:d7:8a:30:d6:19:dd:7f:f8:
5d:de:9d:e6:6d:bc:6a:87:b1:ba:20:f3:7c:e2:a5:
e4:63:41:4c:fd:ab:1e:43:69:fa:6e:8f:ba:ab:a4:
7b:23:aa:22:ee:c0:63:41:09:f1:55:3c:c5:fc:24:
a6:46:13:d3:da:c3:fa:e4:58:94:05:29:9a:1a:fc:
03:ed:c9:70:9b:1c:10:30:8e:c2:cd:00:3f:68:d3:
22:48:96:31:c6:90:2a:3c:83:a3:d5:c3:92:51:d7:
2c:52:12:b3:dd:4a:1e:e1:d7:c9:6c:80:63:db:f8:
ab:36:7b:4e:6a:0f:31:48:52:e6:ce:04:14:b1:bb:
b3:8e:a9:be:13:2f:2b:97:37:f3:24:f4:a8:d6:c8:
3a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:DD:22:95:F2:2C:66:8D:97:5C:F1:30:92:8D:F5:57:01:5A:DC:EA
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/JN0ilfIsZo2XXPEwko31VwFa3Oo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.197.192.0/24
82.197.196.0/23
82.197.203.0-82.197.205.255
82.197.208.0/20
84.245.32.0/20
Signature Algorithm: sha256WithRSAEncryption
82:5a:69:7f:01:c9:dd:ae:a4:7b:a4:b6:9d:e2:46:da:ba:24:
5b:71:2a:90:4b:29:b9:6c:51:ed:31:f1:32:b7:0b:c8:81:28:
e2:c5:f8:46:73:dd:e3:6a:6f:8d:54:dd:25:07:8e:62:90:15:
6d:87:a6:e4:ee:33:8b:7e:f9:a7:8e:cd:71:c4:5b:08:d7:52:
74:af:63:7a:bc:35:9a:44:ce:ad:5c:cc:f7:36:a8:a8:5f:99:
a2:f2:01:76:d9:ee:66:51:62:5c:1a:8e:89:42:16:98:5d:68:
35:b5:9e:fe:e9:7a:d5:20:79:bb:c9:0d:c0:f0:61:dc:67:84:
22:ea:59:9b:74:18:48:f5:b1:c7:4c:aa:e7:44:a3:f0:50:b0:
70:97:0b:05:cf:b5:1a:55:ac:13:a2:32:42:bf:37:0e:e4:64:
30:4c:64:e8:20:28:60:3b:9f:58:90:8d:e9:11:37:01:d8:3f:
97:a7:b9:77:95:ab:e7:43:51:11:f6:7d:0a:49:90:36:37:c5:
fd:7f:e2:c5:d2:aa:71:31:4f:cf:cd:08:31:72:77:fd:6a:70:
2a:e4:6c:9d:c0:2b:01:30:b4:fd:34:bc:3c:02:ee:73:2f:9d:
66:5e:b3:d6:ad:e6:c7:c3:99:ac:95:3a:c0:33:cb:10:1c:20:
72:27:39:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:46:55 2026 by rpki-client