Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/JIzumWR9ZaBMHKWV38cONz0MM_Q.roa
File: JIzumWR9ZaBMHKWV38cONz0MM_Q.roa (raw, json)
Hash identifier: FojNGwPz7kaSMBdA7Z56U4g+tMgU9kXfu14ftnRtBns=
Subject key identifier: 24:8C:EE:99:64:7D:65:A0:4C:1C:A5:95:DF:C7:0E:37:3D:0C:33:F4
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 01A1789AACEAF85EBCC3949E8D659332D887
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/JIzumWR9ZaBMHKWV38cONz0MM_Q.roa
Signing time: Mon 26 Oct 2026 14:26:05 +0000
ROA not before: Mon 26 Oct 2026 14:26:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6205
IP address blocks: 45.131.2.0/24 maxlen: 24
212.87.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 14:29:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:9a:ac:ea:f8:5e:bc:c3:94:9e:8d:65:93:32:d8:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Oct 26 14:26:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=248cee99647d65a04c1ca595dfc70e373d0c33f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:92:88:20:2a:56:74:da:d7:ff:e1:6c:c6:63:
64:4d:65:14:67:c3:5e:2f:76:a2:4f:9f:9e:e6:f0:
9f:58:54:7e:87:dd:a7:29:81:61:b9:96:45:2d:b5:
c0:19:9e:d1:56:96:df:5c:c8:7d:36:79:a8:b8:d2:
e7:e0:61:a2:2a:d5:80:de:26:5b:07:36:94:b9:6b:
9a:ba:25:5e:fd:c7:c1:68:54:34:54:7d:50:d6:32:
2f:a5:55:ac:c2:bc:a7:da:3d:25:5b:ca:c7:5b:f9:
1f:62:42:e0:a8:80:e2:eb:32:7b:df:ab:c9:ee:8e:
07:a1:45:93:3a:47:61:84:64:9f:a6:77:c2:ec:93:
82:0c:9c:a9:2c:96:90:b0:54:5d:e1:63:d5:a2:43:
cb:6c:a4:41:6c:ba:28:c8:b3:97:23:c3:79:be:83:
e3:73:27:77:53:7b:a9:3c:9e:0c:87:ac:28:88:9a:
83:ce:9c:df:06:8a:77:42:ac:ba:a2:d9:28:d1:2c:
ca:b9:ed:79:ee:12:62:a4:3a:5e:78:3c:bb:be:b7:
2d:a6:51:83:53:da:88:e4:6c:c9:37:e4:bd:ce:1b:
fa:1b:7c:1f:de:e3:ef:fb:aa:75:e9:8a:4a:b3:7f:
e5:69:36:9b:f7:df:6d:e1:ec:a1:df:ca:22:4f:5b:
48:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:8C:EE:99:64:7D:65:A0:4C:1C:A5:95:DF:C7:0E:37:3D:0C:33:F4
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/JIzumWR9ZaBMHKWV38cONz0MM_Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.2.0/24
212.87.197.0/24
Signature Algorithm: sha256WithRSAEncryption
21:07:33:1b:b6:ef:17:3e:0b:71:9b:16:0c:31:53:22:18:de:
b1:19:1a:21:2e:f7:3c:fa:62:80:fe:25:26:13:9e:1a:e7:a0:
57:40:6e:d2:98:7c:ba:a5:1c:99:ea:1b:d6:a6:3e:e7:93:36:
e1:48:93:6c:d6:1a:eb:3b:45:59:b0:ab:da:5d:63:82:38:8e:
cf:b2:15:50:5c:87:91:72:cf:51:d9:60:16:0f:5d:0f:25:4b:
91:ee:e3:f1:49:07:7b:2a:f7:5e:c1:16:f8:64:4b:ec:fb:40:
a1:40:0e:44:59:98:58:65:2d:22:b8:51:22:41:5f:9e:ba:f6:
25:93:58:44:d4:7c:a6:f5:f1:df:67:fe:ca:ec:1f:e3:e9:67:
da:08:92:b1:a1:87:ff:ea:ec:55:a6:2b:e9:85:5e:be:9e:aa:
08:b4:07:4b:6b:72:5e:b9:20:28:d1:f4:cf:34:d0:c5:12:25:
75:c9:db:1d:a3:98:8a:52:06:ab:57:32:44:3e:68:52:b1:28:
7d:3f:3a:e4:7a:aa:c5:f3:07:7e:b8:2c:37:bf:ea:8c:b6:dd:
50:4c:af:de:30:7f:d8:16:cd:9b:ba:97:94:ad:fb:29:ae:3a:
ba:63:00:78:b7:c2:cc:02:ae:06:7c:08:bb:b8:4d:57:8b:7c:
71:85:34:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 23:49:40 2026 by rpki-client