Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/JkmCJQaQoD31a9G80M07RYcqWDc.roa
File: JkmCJQaQoD31a9G80M07RYcqWDc.roa (raw, json)
Hash identifier: X8PYnSV1Z/bxPAeWp4ISqBsTtAcgEKcf3dQRI9yc2BI=
Subject key identifier: 26:49:82:25:06:90:A0:3D:F5:6B:D1:BC:D0:CD:3B:45:87:2A:58:37
Certificate issuer: /CN=e58024b729d99f05133ec6d14390c73eb36db99e
Certificate serial: 01A0F2F9EA8DC57A658749A7B3A0B8D30B70
Authority key identifier: E5:80:24:B7:29:D9:9F:05:13:3E:C6:D1:43:90:C7:3E:B3:6D:B9:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/JkmCJQaQoD31a9G80M07RYcqWDc.roa
Signing time: Wed 30 Sep 2026 15:40:59 +0000
ROA not before: Wed 30 Sep 2026 15:40:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206119
IP address blocks: 80.91.92.0/22 maxlen: 24
82.129.32.0/22 maxlen: 24
82.138.108.0/22 maxlen: 24
82.138.120.0/21 maxlen: 24
212.20.136.0/21 maxlen: 24
212.20.144.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 03:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f2:f9:ea:8d:c5:7a:65:87:49:a7:b3:a0:b8:d3:0b:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e58024b729d99f05133ec6d14390c73eb36db99e
Validity
Not Before: Sep 30 15:40:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=264982250690a03df56bd1bcd0cd3b45872a5837
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ed:e2:61:f9:83:2d:cf:27:00:80:97:57:36:
b3:75:fa:30:7b:79:6c:ef:d0:8f:be:9f:41:b8:f8:
67:6f:df:71:98:f1:86:93:cd:48:1f:51:e4:02:b1:
35:0f:ec:c5:21:bf:4e:68:15:e2:29:fa:7f:d7:72:
e6:5e:e1:40:6a:49:bb:af:d7:39:81:38:97:c2:f1:
91:c2:03:02:d7:2a:43:ab:1a:06:ca:9c:ff:4d:18:
b0:34:89:f6:6f:b6:1f:74:be:39:29:7b:54:6d:10:
e9:c7:1b:5f:69:44:bd:a7:22:ca:e9:78:7b:51:a4:
0a:9a:07:8b:a5:dd:7c:87:c8:12:e5:6d:14:83:1b:
4e:02:2a:5c:9e:03:8b:7c:4d:f9:a5:b5:dd:59:3d:
80:ea:2d:be:8b:a9:27:05:a4:9c:3b:bf:da:b0:a3:
e9:25:fd:2b:72:d1:c0:41:a6:1b:7e:af:e0:36:ce:
f9:35:f6:c5:72:e0:67:7f:fa:3e:b9:0d:b4:af:a3:
c4:cb:a5:ae:bf:12:59:53:de:2a:f9:39:59:02:a0:
b5:14:58:b9:92:f5:46:3c:c7:53:68:c9:a7:57:a4:
54:32:79:5b:a5:40:c7:08:31:57:e0:bb:39:24:bb:
e4:ea:31:78:5b:64:cf:f8:59:e3:72:3b:92:6b:66:
0d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:49:82:25:06:90:A0:3D:F5:6B:D1:BC:D0:CD:3B:45:87:2A:58:37
X509v3 Authority Key Identifier:
keyid:E5:80:24:B7:29:D9:9F:05:13:3E:C6:D1:43:90:C7:3E:B3:6D:B9:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/JkmCJQaQoD31a9G80M07RYcqWDc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.91.92.0/22
82.129.32.0/22
82.138.108.0/22
82.138.120.0/21
212.20.136.0-212.20.147.255
Signature Algorithm: sha256WithRSAEncryption
0e:62:b3:24:db:ba:d7:75:a4:d0:a6:ae:87:1a:87:4f:e3:b0:
c0:82:06:81:d9:fc:8c:d2:8b:6a:8f:f3:9f:6f:da:ea:75:6c:
20:e5:ed:6a:5d:69:e5:c8:4e:03:12:9f:d7:ad:f3:3b:84:47:
29:69:26:74:67:65:79:6d:9e:17:31:fc:01:af:c6:fb:e1:11:
24:7d:40:56:3d:9c:a8:26:6b:22:f1:aa:24:8a:4e:1f:2c:ec:
fe:cd:09:f1:51:06:76:22:c9:89:6d:ee:16:a8:c1:af:dc:48:
74:e9:15:cd:0f:0b:2c:2a:a0:99:cd:4b:da:51:76:5d:3f:26:
a2:c5:d2:fd:58:ef:cf:a4:92:05:ae:db:32:aa:1b:76:65:95:
08:77:81:c2:e3:3f:c4:79:ae:72:bc:fa:01:2c:18:49:10:b3:
c1:ff:c2:62:3e:ce:e8:07:15:12:b1:cf:33:52:1d:3c:d2:bc:
08:5b:63:ed:67:ae:f9:ef:33:f2:a5:91:50:bd:70:73:93:d9:
05:f8:f5:af:ca:f3:26:bb:c2:20:46:6b:e6:6c:13:68:df:0b:
d9:d2:8a:61:52:2b:2d:82:83:7f:2d:d1:17:33:7d:14:7e:84:
28:e3:c8:61:06:f2:92:a9:74:c6:82:ef:f8:4e:3f:88:d1:e8:
e6:72:02:ab
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAaDy+eqNxXplh0mns6C40wtwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1ODAyNGI3MjlkOTlmMDUxMzNlYzZkMTQzOTBjNzNlYjM2
ZGI5OWUwHhcNMjYwOTMwMTU0MDU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNjQ5ODIyNTA2OTBhMDNkZjU2YmQxYmNkMGNkM2I0NTg3MmE1ODM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyu3iYfmDLc8nAICXVzazdfowe3ls
79CPvp9BuPhnb99xmPGGk81IH1HkArE1D+zFIb9OaBXiKfp/13LmXuFAakm7r9c5
gTiXwvGRwgMC1ypDqxoGypz/TRiwNIn2b7YfdL45KXtUbRDpxxtfaUS9pyLK6Xh7
UaQKmgeLpd18h8gS5W0UgxtOAipcngOLfE35pbXdWT2A6i2+i6knBaScO7/asKPp
Jf0rctHAQaYbfq/gNs75NfbFcuBnf/o+uQ20r6PEy6WuvxJZU94q+TlZAqC1FFi5
kvVGPMdTaMmnV6RUMnlbpUDHCDFX4Ls5JLvk6jF4W2TP+FnjcjuSa2YNMQIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFCZJgiUGkKA99WvRvNDNO0WHKlg3MB8GA1UdIwQY
MBaAFOWAJLcp2Z8FEz7G0UOQxz6zbbmeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVlBa3R5blpud1VUUHNiUlE1REhQck50dVo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9kNTYyOGEtZDliMS00ZGE5LWE3NDQt
OTU2ZjZiNWM2MTcwLzEvSmttQ0pRYVFvRDMxYTlHODBNMDdSWWNxV0RjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC9kNTYyOGEtZDliMS00ZGE5LWE3NDQtOTU2ZjZiNWM2MTcw
LzEvNVlBa3R5blpud1VUUHNiUlE1REhQck50dVo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmAwQCUFtcAwQC
UoEgAwQCUopsAwQDUop4MAwDBAPUFIgDBALUFJAwDQYJKoZIhvcNAQELBQADggEB
AA5isyTbutd1pNCmrocah0/jsMCCBoHZ/IzSi2qP859v2up1bCDl7WpdaeXITgMS
n9et8zuERylpJnRnZXltnhcx/AGvxvvhESR9QFY9nKgmayLxqiSKTh8s7P7NCfFR
BnYiyYlt7haowa/cSHTpFc0PCywqoJnNS9pRdl0/JqLF0v1Y78+kkgWu2zKqG3Zl
lQh3gcLjP8R5rnK8+gEsGEkQs8H/wmI+zugHFRKxzzNSHTzSvAhbY+1nrvnvM/Kl
kVC9cHOT2QX49a/K8ya7wiBGa+ZsE2jfC9nSimFSKy2Cg38t0RczfRR+hCjjyGEG
8pKpdMaC7/hOP4jR6OZyAqs=
-----END CERTIFICATE-----
Generated at Sun Oct 25 14:20:43 2026 by rpki-client