Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/a07834-5fa3-4b40-bb9e-75e3cbb04b60/1/JrvHwhtmk5HkFhO2EcSPUssi-HQ.roa
File: JrvHwhtmk5HkFhO2EcSPUssi-HQ.roa (raw, json)
Hash identifier: n1cOi5A6p7PmyAfumce6tXETVHmm/Nez1OT08WgShXc=
Subject key identifier: 26:BB:C7:C2:1B:66:93:91:E4:16:13:B6:11:C4:8F:52:CB:22:F8:74
Certificate issuer: /CN=072f815e7c1607d0bd3b399fba9a353fec544315
Certificate serial: 019FB8480555E97202C37029FA7C87703B71
Authority key identifier: 07:2F:81:5E:7C:16:07:D0:BD:3B:39:9F:BA:9A:35:3F:EC:54:43:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/By-BXnwWB9C9Ozmfupo1P-xUQxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a07834-5fa3-4b40-bb9e-75e3cbb04b60/1/JrvHwhtmk5HkFhO2EcSPUssi-HQ.roa
Signing time: Fri 31 Jul 2026 13:05:55 +0000
ROA not before: Fri 31 Jul 2026 13:05:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8075
IP address blocks: 65.87.129.0/24 maxlen: 24
65.87.130.0/24 maxlen: 24
65.87.131.0/24 maxlen: 24
65.87.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a07834-5fa3-4b40-bb9e-75e3cbb04b60/1/By-BXnwWB9C9Ozmfupo1P-xUQxU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/a07834-5fa3-4b40-bb9e-75e3cbb04b60/1/By-BXnwWB9C9Ozmfupo1P-xUQxU.mft
rsync://rpki.ripe.net/repository/DEFAULT/By-BXnwWB9C9Ozmfupo1P-xUQxU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b8:48:05:55:e9:72:02:c3:70:29:fa:7c:87:70:3b:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=072f815e7c1607d0bd3b399fba9a353fec544315
Validity
Not Before: Jul 31 13:05:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=26bbc7c21b669391e41613b611c48f52cb22f874
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:5e:3f:e8:05:bc:a7:e5:86:d5:81:66:23:1d:
25:be:ce:d9:5c:1c:20:52:be:c1:bd:d8:7f:6f:cc:
45:23:60:aa:91:11:08:b3:9f:7e:9c:f6:a2:45:21:
53:df:1c:5c:de:74:bc:15:84:dd:80:cb:01:8b:b8:
b9:1e:11:95:35:e9:86:2c:db:3a:a2:80:40:15:33:
63:2b:89:9e:32:7a:ec:66:15:e6:f3:b7:2c:21:de:
bd:14:9d:96:35:aa:54:b1:3d:62:61:5a:e3:69:2c:
4e:6f:15:a1:8b:42:14:d3:92:f0:e6:c9:40:63:7f:
5f:48:c5:ed:1c:a5:e5:b2:d9:93:52:f4:28:bf:06:
9f:75:70:a3:7c:45:d6:d8:1e:ba:22:ca:d0:7e:c0:
75:80:e0:b5:0b:b8:58:e2:d0:50:09:00:d7:6b:c6:
4a:6e:32:b1:15:01:16:f5:e5:c4:d2:c9:45:e9:fe:
fd:f4:3b:42:5a:fe:fb:c4:33:dd:ad:04:f2:51:aa:
0d:bb:35:7e:73:e4:50:a5:27:ae:80:0a:10:18:cf:
e2:75:e5:b1:7e:2d:8c:9d:63:cc:ca:8a:27:85:03:
7b:7f:dc:2f:71:41:29:fb:fb:7b:b6:d4:cc:8b:28:
ab:ae:65:d4:84:ae:d1:9f:61:14:65:dd:ff:1c:c8:
4c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:BB:C7:C2:1B:66:93:91:E4:16:13:B6:11:C4:8F:52:CB:22:F8:74
X509v3 Authority Key Identifier:
keyid:07:2F:81:5E:7C:16:07:D0:BD:3B:39:9F:BA:9A:35:3F:EC:54:43:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/By-BXnwWB9C9Ozmfupo1P-xUQxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a07834-5fa3-4b40-bb9e-75e3cbb04b60/1/JrvHwhtmk5HkFhO2EcSPUssi-HQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a07834-5fa3-4b40-bb9e-75e3cbb04b60/1/By-BXnwWB9C9Ozmfupo1P-xUQxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
65.87.129.0-65.87.132.255
Signature Algorithm: sha256WithRSAEncryption
33:f2:95:61:48:69:f7:e5:ab:92:92:42:d7:0b:74:2b:41:68:
df:42:81:22:9e:9b:f3:3e:39:2d:e1:ce:7e:95:e9:53:36:63:
1f:06:bf:92:7b:3e:6c:12:32:94:e6:fa:fd:f0:1a:ac:f6:07:
78:a2:f0:21:79:22:9d:4a:1e:b7:ff:b2:12:d9:65:32:4e:35:
08:f5:09:4a:c1:cf:b4:09:0b:92:00:cf:cd:f4:12:cc:03:90:
1e:ca:bd:eb:c3:57:12:c3:5b:78:2d:85:85:f6:1a:2b:09:01:
d7:c6:fd:d2:f1:39:44:bd:25:dc:ea:32:96:93:aa:8d:07:45:
c7:4f:9e:e3:11:1d:1a:0e:cd:9f:86:d8:7c:f1:5d:fd:00:e1:
9a:72:ea:0f:09:05:6c:49:b1:7f:85:13:3a:80:fd:31:42:09:
5f:6f:70:47:2a:1b:b8:d9:be:d5:fe:77:01:1d:f5:c5:d7:c0:
23:27:e5:2f:15:3d:ed:40:3c:22:10:54:14:c5:a8:23:f2:2b:
d3:fe:27:a8:84:dd:4e:15:52:a3:e7:c7:75:a7:6e:15:7f:f9:
7d:16:88:7d:b0:97:81:08:b3:84:8c:8d:08:e0:52:86:9c:a4:
a0:59:89:b2:09:a8:53:0f:a8:e1:2c:ac:77:c6:7b:a0:98:7d:
c5:c7:46:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:48:08 2026 by rpki-client