Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/Jrz2xA2mQpo2Q1ZZaR7k0Jn_Dk4.roa
File: Jrz2xA2mQpo2Q1ZZaR7k0Jn_Dk4.roa (raw, json)
Hash identifier: cGNycfZbTmQsfCD7PYzBfa8+3CZ+9W0RQ36+xTRQr5g=
Subject key identifier: 26:BC:F6:C4:0D:A6:42:9A:36:43:56:59:69:1E:E4:D0:99:FF:0E:4E
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 019FFA7A5E25B9A3868C938C9B0C68CB2F77
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/Jrz2xA2mQpo2Q1ZZaR7k0Jn_Dk4.roa
Signing time: Thu 13 Aug 2026 09:35:51 +0000
ROA not before: Thu 13 Aug 2026 09:35:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204205
IP address blocks: 91.208.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fa:7a:5e:25:b9:a3:86:8c:93:8c:9b:0c:68:cb:2f:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Aug 13 09:35:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=26bcf6c40da6429a36435659691ee4d099ff0e4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:de:9b:11:10:bd:d4:dd:8f:cb:50:55:88:b6:
38:15:83:ac:ec:b3:ae:1c:97:e7:ff:84:63:90:ec:
04:c2:ca:c2:57:d4:16:39:c6:c8:c1:e8:a9:8d:b9:
c8:18:7f:9a:c5:83:6e:1f:19:c7:c5:76:f0:a2:f0:
d3:f1:28:43:d9:5a:a1:70:d2:97:f2:e2:9e:57:54:
1e:8c:47:b7:2d:d8:20:37:e9:9e:ab:91:92:6a:21:
70:f5:c2:77:d4:a3:72:22:cd:5a:dd:71:e8:a4:50:
1a:78:f2:06:c5:d2:ed:74:d9:33:bb:26:5c:ff:39:
36:9e:f9:ab:b1:b1:0f:ea:d3:aa:6e:d8:df:ec:b9:
cb:4e:73:79:84:95:79:e0:6f:88:85:42:81:7e:cd:
81:e1:43:96:b1:dd:4a:fe:ec:51:8e:15:82:c2:e8:
19:9b:50:f1:ac:27:3d:39:9f:98:7f:16:3f:15:db:
fe:a9:18:fc:34:1c:53:36:86:be:aa:ff:15:69:e2:
ec:3e:c9:a1:10:26:f9:4f:20:c7:f5:bf:88:80:a7:
0a:2d:2d:a4:e4:b9:b8:48:60:a6:91:8c:a7:73:4b:
03:b6:00:3c:4d:2d:73:22:29:4b:2b:62:79:83:ad:
8b:b9:9d:9d:44:fc:57:56:3a:f1:f7:1f:11:3e:46:
0a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:BC:F6:C4:0D:A6:42:9A:36:43:56:59:69:1E:E4:D0:99:FF:0E:4E
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/Jrz2xA2mQpo2Q1ZZaR7k0Jn_Dk4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.204.0/24
Signature Algorithm: sha256WithRSAEncryption
99:60:05:80:8e:ec:63:7f:6a:79:a3:d0:91:82:b1:a0:8c:ea:
4d:75:65:c6:2c:5b:01:e5:ca:d8:b7:17:6b:d2:7e:a4:80:4f:
1f:1c:22:a7:f1:a5:74:58:06:66:6e:49:9b:82:b9:0f:df:0e:
58:ad:e4:2c:cd:95:d0:34:35:87:37:13:02:99:fe:0e:1c:15:
11:ba:80:7c:09:5d:36:be:b7:87:80:aa:6c:bc:50:6a:cb:f6:
0a:9e:be:5c:8b:91:bf:89:2c:8c:5c:06:fe:2e:cb:c9:50:47:
69:24:2e:e7:16:c0:0b:3f:34:8a:1e:07:ac:9b:d4:30:58:d8:
c0:7d:51:29:a1:55:1f:62:cd:20:35:da:d3:3d:3b:0a:20:14:
23:8e:53:2c:44:c3:c7:d8:98:00:66:f7:83:2e:12:e9:18:01:
eb:d5:20:a7:b5:ef:2c:50:09:64:d2:74:5c:28:ec:f0:66:e7:
a1:14:4e:f6:06:df:04:11:07:48:e2:6f:f5:be:fb:5b:24:90:
ab:9e:27:2f:ef:7b:12:32:c6:0c:6c:d0:b4:ed:0c:21:db:3d:
24:6c:9c:3b:d1:42:5e:14:1d:9a:7a:09:0e:8a:45:05:8d:81:
c2:35:99:13:15:00:c3:4c:8c:eb:8c:b5:d0:4b:19:5a:e9:9a:
93:d1:69:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:58:11 2026 by rpki-client