Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/ju_rZJWK5ut1wUMGQY5H5g30X6s.roa
File: ju_rZJWK5ut1wUMGQY5H5g30X6s.roa (raw, json)
Hash identifier: 4BeQQavNx6D/dkoVaXi0J6SdShclxrWVo50LDhA1aww=
Subject key identifier: 8E:EF:EB:64:95:8A:E6:EB:75:C1:43:06:41:8E:47:E6:0D:F4:5F:AB
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019EF0AC7DCF2780956C97633FF3B7CFBF28
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/ju_rZJWK5ut1wUMGQY5H5g30X6s.roa
Signing time: Mon 22 Jun 2026 18:51:36 +0000
ROA not before: Mon 22 Jun 2026 18:51:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15083
IP address blocks: 2.26.40.0/22 maxlen: 24
2.26.56.0/22 maxlen: 24
31.76.132.0/22 maxlen: 24
31.76.168.0/22 maxlen: 24
144.31.20.0/22 maxlen: 24
144.31.88.0/24 maxlen: 24
144.31.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 20:41:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f0:ac:7d:cf:27:80:95:6c:97:63:3f:f3:b7:cf:bf:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jun 22 18:51:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8eefeb64958ae6eb75c14306418e47e60df45fab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d7:15:2a:4c:4b:6e:b5:ef:3c:de:54:03:f1:
85:40:ac:96:d7:3a:60:d2:91:9f:d8:2a:c4:22:61:
d8:16:e8:cf:d9:4f:16:e9:a1:b5:7b:55:80:69:4c:
c2:b6:bc:3c:53:a7:e2:fc:ca:9f:e8:5f:99:0b:b2:
08:e8:d5:10:2d:21:5c:32:6d:c4:a1:d9:e6:6f:68:
a3:bc:b1:81:43:da:22:05:39:1d:fd:a4:93:aa:7d:
f9:f4:a1:2a:9b:80:3e:9d:51:92:07:03:a9:8e:fa:
c1:1c:68:a7:cc:1c:9c:f7:ea:c8:2d:d9:e9:30:03:
a1:2d:41:40:ad:71:68:a5:c6:c7:e0:ab:28:d3:9e:
c1:b1:e8:c6:dd:c6:98:30:a6:2a:f5:67:74:83:d3:
53:86:49:6f:ec:93:ee:06:02:bc:8f:5a:4f:89:43:
e5:20:45:d7:d1:c3:81:52:5c:5f:e8:4b:aa:5b:e1:
ae:4f:95:f8:7a:d0:4b:be:09:b8:5d:dd:9e:4a:f6:
67:7c:57:ab:cd:06:b1:bc:92:11:e5:d2:2b:67:92:
c5:5f:36:92:3b:c5:e0:11:0a:19:0c:04:1a:35:b7:
9d:f5:12:c5:41:a5:5d:92:e4:4f:24:ca:ed:a0:73:
5d:ae:19:84:c7:98:de:3d:c8:33:85:ff:5a:a6:02:
cb:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:EF:EB:64:95:8A:E6:EB:75:C1:43:06:41:8E:47:E6:0D:F4:5F:AB
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/ju_rZJWK5ut1wUMGQY5H5g30X6s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.40.0/22
2.26.56.0/22
31.76.132.0/22
31.76.168.0/22
144.31.20.0/22
144.31.88.0/24
144.31.124.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:0c:4b:d8:05:cb:32:a3:b1:9d:58:eb:c2:63:69:d3:ac:56:
6f:0b:99:3e:e6:56:fa:48:a7:8c:5e:0d:ef:70:ee:2a:4b:23:
0f:80:33:f3:11:87:43:b7:a1:2a:46:dd:a2:c6:42:1a:c7:48:
ee:8b:1c:6f:dc:83:6f:6c:77:76:c9:84:9d:07:6b:ca:ac:9d:
9b:13:68:4b:43:98:a4:f6:a9:bc:71:da:f2:f7:f2:92:15:0e:
5f:f4:3d:a9:4d:07:22:41:f7:56:40:9a:05:62:96:99:d9:f4:
b6:2e:77:74:37:a6:ee:17:19:99:39:7e:b7:25:16:1d:e3:92:
05:72:03:e1:0c:19:41:22:60:8f:9d:50:38:1b:12:43:d7:34:
af:ee:56:60:f1:5b:22:04:a3:52:2a:7f:3d:c1:51:30:56:01:
40:30:13:f1:87:2b:ce:e8:ab:0f:eb:cb:cf:e6:b8:c9:26:01:
57:9a:39:b6:75:04:28:73:4e:40:85:c3:e6:87:04:90:f6:1a:
56:db:a8:6e:7b:4d:55:e4:ed:c9:a7:99:92:27:c4:56:fd:b0:
9e:5f:41:20:fe:1a:9f:c0:61:cb:4d:90:b8:01:0a:76:fe:20:
d3:d4:17:19:68:b5:0f:76:9f:54:f1:a6:e0:d2:d8:8d:f9:d3:
97:95:8f:a2
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAZ7wrH3PJ4CVbJdjP/O3z78oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4
NDAwMDMwHhcNMjYwNjIyMTg1MTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZWVmZWI2NDk1OGFlNmViNzVjMTQzMDY0MThlNDdlNjBkZjQ1ZmFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNcVKkxLbrXvPN5UA/GFQKyW1zpg
0pGf2CrEImHYFujP2U8W6aG1e1WAaUzCtrw8U6fi/Mqf6F+ZC7II6NUQLSFcMm3E
odnmb2ijvLGBQ9oiBTkd/aSTqn359KEqm4A+nVGSBwOpjvrBHGinzByc9+rILdnp
MAOhLUFArXFopcbH4Kso057BsejG3caYMKYq9Wd0g9NThklv7JPuBgK8j1pPiUPl
IEXX0cOBUlxf6EuqW+GuT5X4etBLvgm4Xd2eSvZnfFerzQaxvJIR5dIrZ5LFXzaS
O8XgEQoZDAQaNbed9RLFQaVdkuRPJMrtoHNdrhmEx5jePcgzhf9apgLLRQIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFI7v62SViubrdcFDBkGOR+YN9F+rMB8GA1UdIwQY
MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt
MTQzOTY3YThmZTA4LzEvanVfclpKV0s1dXQxd1VNR1FZNUg1ZzMwWDZzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4
LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQCAhooAwQC
Aho4AwQCH0yEAwQCH0yoAwQCkB8UAwQAkB9YAwQAkB98MA0GCSqGSIb3DQEBCwUA
A4IBAQB+DEvYBcsyo7GdWOvCY2nTrFZvC5k+5lb6SKeMXg3vcO4qSyMPgDPzEYdD
t6EqRt2ixkIax0juixxv3INvbHd2yYSdB2vKrJ2bE2hLQ5ik9qm8cdry9/KSFQ5f
9D2pTQciQfdWQJoFYpaZ2fS2Lnd0N6buFxmZOX63JRYd45IFcgPhDBlBImCPnVA4
GxJD1zSv7lZg8VsiBKNSKn89wVEwVgFAMBPxhyvO6KsP68vP5rjJJgFXmjm2dQQo
c05AhcPmhwSQ9hpW26hue01V5O3Jp5mSJ8RW/bCeX0Eg/hqfwGHLTZC4AQp2/iDT
1BcZaLUPdp9U8abg0tiN+dOXlY+i
-----END CERTIFICATE-----
Generated at Tue Jul 7 02:42:45 2026 by rpki-client