Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/jGzo-LGYzb7CYqn7ucZhTJCu-J4.roa
File: jGzo-LGYzb7CYqn7ucZhTJCu-J4.roa (raw, json)
Hash identifier: jH2N1rCW9x0MEKs5j+JGZ5MzgEB48AlY6lztiP5flQw=
Subject key identifier: 8C:6C:E8:F8:B1:98:CD:BE:C2:62:A9:FB:B9:C6:61:4C:90:AE:F8:9E
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 019F1D00901C3955F2BBED95667E1BAEF916
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/jGzo-LGYzb7CYqn7ucZhTJCu-J4.roa
Signing time: Wed 01 Jul 2026 09:26:43 +0000
ROA not before: Wed 01 Jul 2026 09:26:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206033
IP address blocks: 185.227.72.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1d:00:90:1c:39:55:f2:bb:ed:95:66:7e:1b:ae:f9:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jul 1 09:26:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8c6ce8f8b198cdbec262a9fbb9c6614c90aef89e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:77:59:9c:58:89:8f:e1:d3:fb:f6:65:49:df:
0a:b6:25:c2:b3:8b:5a:95:62:d5:e1:bb:12:52:4d:
63:bb:a7:6c:a8:fc:53:e5:5b:5c:8a:75:70:04:b3:
99:20:b7:2e:35:3c:b2:94:97:ab:9f:38:60:96:5f:
d8:5b:0f:6a:2e:44:01:51:1e:c9:5a:4a:c9:67:b0:
88:cb:d8:4c:ff:a5:5e:d7:00:1a:f6:a7:4f:0e:7f:
61:2b:b9:d2:fe:34:19:0b:d0:7c:d3:a8:2b:78:4b:
73:44:45:1a:d3:d2:a9:09:63:d7:77:6d:b9:38:73:
bb:9f:cd:bd:a4:5e:13:8f:c7:7f:be:40:fd:25:4e:
5f:22:77:35:70:c4:3f:04:47:a2:e8:11:94:7c:4a:
9a:bc:75:34:f7:9f:ca:c9:8e:19:0e:01:22:50:58:
8e:a8:41:bf:91:08:25:62:00:b1:b1:6c:38:aa:0c:
ac:d7:16:57:0e:56:f0:d5:df:80:82:4c:d3:97:9d:
82:f2:73:03:8a:37:19:cc:ba:05:e4:50:47:9c:47:
8b:3b:82:fc:f1:8e:3a:01:2e:f3:2d:67:49:68:62:
47:11:da:0a:03:20:c9:89:fb:51:b6:36:b3:36:6b:
2c:88:5b:c4:8e:d3:16:1f:f5:f0:09:5f:c6:f9:64:
63:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:6C:E8:F8:B1:98:CD:BE:C2:62:A9:FB:B9:C6:61:4C:90:AE:F8:9E
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/jGzo-LGYzb7CYqn7ucZhTJCu-J4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.227.72.0/24
Signature Algorithm: sha256WithRSAEncryption
70:b4:8d:ee:ed:e0:0f:9d:a9:a2:dc:6b:3b:27:35:0d:bd:41:
87:74:d0:7e:89:e5:61:ee:b4:8f:9c:58:50:fb:ee:d3:ed:ea:
24:0f:f9:ec:ab:39:70:35:73:9c:bf:28:68:9c:86:8a:d2:1d:
22:0a:b4:69:73:73:21:4b:ae:81:df:f7:59:6d:25:3d:82:e2:
f5:d0:c5:4e:9f:35:87:b2:0e:cb:44:da:07:83:1e:57:c4:62:
35:68:09:cd:8e:4b:5b:0f:08:cf:17:a0:4b:1a:fa:ca:75:08:
f2:2a:a0:4b:d5:cd:8d:f1:f7:53:6d:be:6c:21:6b:82:3d:49:
f1:83:f7:cd:c7:1e:64:0c:c5:7a:1f:ac:e0:68:9d:b0:06:e9:
29:5e:6a:ec:c2:4d:8a:56:62:b1:66:87:dd:1b:4f:c5:41:c1:
b8:d1:29:98:6c:30:c8:ef:ef:03:55:71:24:8b:53:94:5a:9f:
84:ad:1d:db:72:ff:42:52:55:e4:29:aa:05:7e:3e:dd:fc:f1:
3e:56:f9:94:0e:81:e0:4a:bd:41:30:f0:6d:2f:e9:bd:13:4f:
2b:4a:d9:b7:f8:8f:1e:17:25:1d:dd:0d:22:8e:e8:ea:8e:5d:
15:9a:55:2a:b2:e1:8d:cd:c6:3f:00:ec:08:86:ea:73:da:31:
ca:00:e3:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:14:20 2026 by rpki-client