Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/JCRerR73E3eh6TudJpOPD6hZJWk.roa
File: JCRerR73E3eh6TudJpOPD6hZJWk.roa (raw, json)
Hash identifier: wtYBLQscPamtRitBPemuspgBcf/DSTxrnPhQ9eWrU5I=
Subject key identifier: 24:24:5E:AD:1E:F7:13:77:A1:E9:3B:9D:26:93:8F:0F:A8:59:25:69
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A1703E7E96989A4FC1208930AA3A59B0E3
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/JCRerR73E3eh6TudJpOPD6hZJWk.roa
Signing time: Sat 24 Oct 2026 23:28:26 +0000
ROA not before: Sat 24 Oct 2026 23:28:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218877
IP address blocks: 2.27.154.0/24 maxlen: 24
31.77.229.0/24 maxlen: 24
179.253.108.0/24 maxlen: 24
191.217.203.0/24 maxlen: 24
191.217.233.0/24 maxlen: 24
191.217.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 19:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:70:3e:7e:96:98:9a:4f:c1:20:89:30:aa:3a:59:b0:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Oct 24 23:28:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=24245ead1ef71377a1e93b9d26938f0fa8592569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c2:77:62:e7:bc:cd:b0:95:90:b9:85:c7:cb:
f2:29:94:4e:c7:5c:51:5a:66:0a:db:66:cd:f9:c8:
9c:a1:4d:b3:6f:e8:f2:cc:c0:5a:1e:c5:4d:02:83:
d2:db:3a:b1:fd:77:03:fa:07:91:95:b7:54:2c:9e:
6c:52:95:f7:0f:4a:87:be:4b:37:63:7c:a9:5d:d0:
89:c4:b7:f6:17:a1:8a:fe:00:49:9c:ef:7e:09:bd:
86:5c:0c:f0:8c:44:62:a5:19:3d:24:a2:ca:90:83:
f4:ac:96:6f:a2:ea:ee:93:3f:c0:fe:15:14:85:82:
ea:42:51:0f:46:ca:4f:0a:f8:08:a8:11:3f:4a:a2:
c9:35:fd:3e:38:f8:5a:03:09:9d:6f:d3:a6:fd:65:
cb:8d:d3:c6:18:7d:f4:c0:4f:55:95:76:8c:09:66:
17:93:b5:c5:4a:d5:36:84:42:ba:9b:44:fd:e3:87:
9f:a0:c9:1d:76:c3:db:05:b4:95:b6:ac:30:7b:d7:
6a:61:4e:76:6d:e2:d8:bd:e8:2f:55:17:42:30:ba:
81:9a:c1:60:ff:a6:53:a5:9e:fe:f5:90:6b:b8:bc:
a3:62:15:7f:85:ac:b3:1e:92:e3:37:83:de:a3:6a:
fc:9c:9d:b5:6b:95:04:ba:0b:0d:c7:6f:8f:66:b6:
80:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:24:5E:AD:1E:F7:13:77:A1:E9:3B:9D:26:93:8F:0F:A8:59:25:69
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/JCRerR73E3eh6TudJpOPD6hZJWk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.27.154.0/24
31.77.229.0/24
179.253.108.0/24
191.217.203.0/24
191.217.233.0/24
191.217.250.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:44:82:8a:ff:bb:63:96:eb:52:9e:57:91:a2:c9:41:aa:fb:
19:6b:92:36:61:a4:61:3a:6d:19:33:d0:c7:ed:9c:77:07:41:
75:d5:03:ad:3b:41:5e:69:e0:01:6c:13:5b:e9:a7:11:bb:d3:
7a:1c:ad:77:93:2e:c2:dc:6d:7a:3e:e8:01:82:92:a3:cb:e5:
c2:d6:49:8f:ab:be:46:79:36:d1:eb:47:f2:5b:ba:4d:7c:7c:
7f:57:32:11:16:58:b3:4c:a5:7c:78:40:e3:6f:6b:c0:4a:10:
07:00:fb:0f:79:fa:da:21:a3:8d:9a:f0:78:c4:06:e2:bd:d0:
24:05:1e:62:52:d6:9d:fe:9f:c3:cd:59:00:a3:b8:99:a0:45:
1f:9a:47:af:52:71:81:35:e5:e2:d1:6b:f7:0c:b1:db:ba:70:
4e:ee:08:d2:99:3f:59:8b:fd:cc:d9:3c:62:5a:6b:20:c8:04:
67:e3:26:76:54:83:b1:2a:22:e8:25:95:77:a2:bf:e9:17:60:
aa:eb:f5:72:85:56:df:4d:ec:6d:c9:ae:41:e9:e6:1e:db:56:
e1:c6:86:b9:4e:9f:35:ef:39:dc:cb:73:6b:30:c8:e0:3e:7d:
d2:62:0c:3b:76:0d:5f:ad:18:50:84:8b:10:3f:80:da:73:b1:
e0:12:bb:50
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAaFwPn6WmJpPwSCJMKo6WbDjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4
NDAwMDMwHhcNMjYxMDI0MjMyODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNDI0NWVhZDFlZjcxMzc3YTFlOTNiOWQyNjkzOGYwZmE4NTkyNTY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxMJ3Yue8zbCVkLmFx8vyKZROx1xR
WmYK22bN+cicoU2zb+jyzMBaHsVNAoPS2zqx/XcD+geRlbdULJ5sUpX3D0qHvks3
Y3ypXdCJxLf2F6GK/gBJnO9+Cb2GXAzwjERipRk9JKLKkIP0rJZvourukz/A/hUU
hYLqQlEPRspPCvgIqBE/SqLJNf0+OPhaAwmdb9Om/WXLjdPGGH30wE9VlXaMCWYX
k7XFStU2hEK6m0T944efoMkddsPbBbSVtqwwe9dqYU52beLYvegvVRdCMLqBmsFg
/6ZTpZ7+9ZBruLyjYhV/hayzHpLjN4Peo2r8nJ21a5UEugsNx2+PZraAawIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFCQkXq0e9xN3oek7nSaTjw+oWSVpMB8GA1UdIwQY
MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt
MTQzOTY3YThmZTA4LzEvSkNSZXJSNzNFM2VoNlR1ZEpwT1BENmhaSldrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4
LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAAhuaAwQA
H03lAwQAs/1sAwQAv9nLAwQAv9npAwQAv9n6MA0GCSqGSIb3DQEBCwUAA4IBAQCy
RIKK/7tjlutSnleRoslBqvsZa5I2YaRhOm0ZM9DH7Zx3B0F11QOtO0FeaeABbBNb
6acRu9N6HK13ky7C3G16PugBgpKjy+XC1kmPq75GeTbR60fyW7pNfHx/VzIRFliz
TKV8eEDjb2vAShAHAPsPefraIaONmvB4xAbivdAkBR5iUtad/p/DzVkAo7iZoEUf
mkevUnGBNeXi0Wv3DLHbunBO7gjSmT9Zi/3M2TxiWmsgyARn4yZ2VIOxKiLoJZV3
or/pF2Cq6/VyhVbfTextya5B6eYe21bhxoa5Tp817zncy3NrMMjgPn3SYgw7dg1f
rRhQhIsQP4Dac7HgErtQ
-----END CERTIFICATE-----
Generated at Thu Nov 5 05:28:36 2026 by rpki-client