Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/ju19Ml_OHB7pFKKdF2qhctNBUpA.roa
File: ju19Ml_OHB7pFKKdF2qhctNBUpA.roa (raw, json)
Hash identifier: L11J0d0RtRda0RlXVaM0YihW0lereKUSJ7Fak2Vqs0M=
Subject key identifier: 8E:ED:7D:32:5F:CE:1C:1E:E9:14:A2:9D:17:6A:A1:72:D3:41:52:90
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01A080860271E08BC72153761529C3C0806D
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/ju19Ml_OHB7pFKKdF2qhctNBUpA.roa
Signing time: Tue 08 Sep 2026 10:17:41 +0000
ROA not before: Tue 08 Sep 2026 10:17:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 147281
IP address blocks: 185.225.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Sep 2026 10:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:80:86:02:71:e0:8b:c7:21:53:76:15:29:c3:c0:80:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Sep 8 10:17:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8eed7d325fce1c1ee914a29d176aa172d3415290
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:5b:5e:57:77:d8:a5:9b:1e:e9:44:e7:3d:d9:
cb:64:de:92:51:67:29:c2:63:77:66:8c:43:62:e8:
9c:f7:67:b1:9a:a7:b7:5c:de:28:76:e5:fa:5e:a6:
d4:61:eb:63:8e:8d:6d:9e:40:45:27:fa:45:1a:a5:
07:9b:46:23:3b:0c:b2:ee:ca:b0:eb:49:ce:fe:7e:
b9:71:a4:87:a0:a8:c3:06:2c:93:68:cd:ae:62:9a:
29:63:60:29:a9:a5:a1:c4:b7:3a:5c:30:41:d1:16:
30:04:ad:78:9a:f6:1e:0f:d5:6a:5e:3a:9b:c7:5f:
d1:9a:3e:0a:c0:2e:69:5d:d7:85:9f:11:db:87:6c:
e4:0b:60:a5:5b:09:c2:bf:b7:a0:47:e0:ec:f9:00:
07:98:13:9f:23:58:e9:92:c5:70:e6:8c:3c:4c:cc:
f5:55:a9:40:e2:19:ff:d8:77:ff:9d:80:c3:37:be:
f7:4a:ef:62:18:9f:99:61:0d:08:8e:05:23:a0:b2:
d1:7f:07:6d:ac:d8:1f:6e:0f:11:88:7c:b4:ba:3c:
19:e3:80:f0:3e:26:88:0a:82:54:9a:c5:77:ee:d8:
fd:13:b7:69:9a:b9:0d:87:3c:f5:3d:f3:40:5c:57:
f7:2d:31:9f:e5:a9:5a:4f:6e:23:ee:2e:9d:22:57:
8f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:ED:7D:32:5F:CE:1C:1E:E9:14:A2:9D:17:6A:A1:72:D3:41:52:90
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/ju19Ml_OHB7pFKKdF2qhctNBUpA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.225.21.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:13:cd:18:07:fe:64:21:f6:51:2e:93:c9:b3:2e:05:f5:ba:
45:49:f4:f8:60:ee:78:9c:48:1f:f4:6f:0a:e0:ab:f1:f9:0f:
26:b6:fc:09:26:b2:c0:60:4b:fe:b0:0e:3b:ad:a7:69:dc:24:
c1:8c:34:4d:c4:b9:b6:69:99:1d:bc:ef:4a:6c:8b:a8:72:84:
1a:3e:9a:8c:1f:fd:ae:80:ef:17:8d:2c:62:e8:be:54:fb:a1:
8d:ec:14:dd:f1:fb:96:f6:a0:1b:10:da:b9:2b:f9:99:dc:d3:
45:26:8e:97:22:36:ae:e3:76:a8:b8:9b:f0:a8:84:5e:22:6c:
88:ea:8e:3b:0c:ad:da:10:ad:4d:e3:83:e5:b6:ee:f8:0b:49:
95:8d:37:a2:b4:95:e4:13:af:98:c3:4c:f4:a4:47:df:16:09:
fb:e3:76:e0:49:ef:58:c2:43:61:03:92:e0:d0:63:73:7b:83:
97:78:14:e2:5f:d5:70:f4:3d:bf:99:92:bd:57:71:5a:19:7e:
74:fc:31:77:2a:da:b6:f0:c4:f9:c1:33:3b:9b:ed:6a:e9:7d:
b6:8c:d7:15:04:36:53:aa:c0:bd:39:fa:f4:f2:11:37:cb:fb:
ed:ac:da:9f:8a:49:56:9e:78:f6:36:5c:0e:6c:74:b9:a6:d3:
ce:bd:d6:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 8 13:37:04 2026 by rpki-client