Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/jvk6n_RnjcVRgkfuh-yDyKrsKa0.roa
File: jvk6n_RnjcVRgkfuh-yDyKrsKa0.roa (raw, json)
Hash identifier: 2KjhqQ8H78xGXBBm5J3fxYf4qp7FfHp4g44MaB56yOE=
Subject key identifier: 8E:F9:3A:9F:F4:67:8D:C5:51:82:47:EE:87:EC:83:C8:AA:EC:29:AD
Certificate issuer: /CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Certificate serial: 01A0589FF3FAE6BD9E7F2EB1A3E5B324462C
Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/jvk6n_RnjcVRgkfuh-yDyKrsKa0.roa
Signing time: Mon 31 Aug 2026 16:21:12 +0000
ROA not before: Mon 31 Aug 2026 16:21:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152698
IP address blocks: 88.223.43.0/24 maxlen: 24
88.223.46.0/24 maxlen: 24
95.173.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:58:9f:f3:fa:e6:bd:9e:7f:2e:b1:a3:e5:b3:24:46:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Validity
Not Before: Aug 31 16:21:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8ef93a9ff4678dc5518247ee87ec83c8aaec29ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b0:46:53:96:49:b1:42:ef:b8:b2:f3:61:b3:
1a:e6:65:6e:24:44:c7:61:7c:57:61:b3:75:b3:20:
40:72:9c:3e:d0:e0:e8:9c:23:26:b7:9c:1e:96:25:
28:60:f3:ea:bf:9b:d8:39:78:12:cb:90:1a:f0:40:
b1:ed:9a:ed:4d:b1:85:5d:19:72:e0:f4:b9:7f:15:
90:91:32:ee:96:6b:e9:d8:b1:c5:b2:31:07:7b:ea:
42:fb:22:d8:65:d3:b3:1e:76:89:84:f9:8c:01:24:
71:a0:ad:a4:45:68:af:2b:45:c6:3a:27:2b:16:da:
02:ee:67:bb:f8:a7:92:6f:95:de:9f:79:00:fb:26:
d1:54:52:8f:75:e4:7c:ee:1e:d7:b3:d1:0d:c8:2c:
89:b6:9b:15:ed:0f:37:a0:a5:f5:b2:7e:dd:a3:ba:
8d:e0:26:b9:31:50:43:e6:29:a7:41:02:ae:66:d2:
15:16:9e:4f:8c:41:80:55:ba:1b:ff:a9:2d:56:6c:
c1:0c:d7:9b:1e:50:1a:00:1e:c3:8b:3e:8e:c7:06:
13:5b:cc:67:d0:ea:9d:b7:3a:1b:e5:19:6b:f3:5a:
4b:bc:16:f9:52:89:3e:e4:44:40:9d:b2:30:de:86:
31:43:6f:be:c2:46:df:44:1c:5d:9a:df:e1:67:e8:
0f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:F9:3A:9F:F4:67:8D:C5:51:82:47:EE:87:EC:83:C8:AA:EC:29:AD
X509v3 Authority Key Identifier:
keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/jvk6n_RnjcVRgkfuh-yDyKrsKa0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.223.43.0/24
88.223.46.0/24
95.173.43.0/24
Signature Algorithm: sha256WithRSAEncryption
59:80:d6:b3:fe:dc:05:43:30:b0:cd:3c:f8:36:36:11:7c:1d:
b5:48:0f:f5:87:97:fc:97:f2:7e:d7:9e:5a:5a:b6:fa:b9:f5:
5b:07:5e:fc:84:cd:0e:6f:33:e4:5b:d8:12:76:d8:9c:f0:a6:
61:fd:8c:ba:6f:6c:2c:3d:bd:31:09:6c:d1:c1:8c:c7:06:ca:
2d:d4:d8:cf:29:0e:28:90:34:9b:d1:99:6c:2a:92:9d:92:31:
7d:2c:44:76:d5:cf:d3:7c:d9:fb:82:0b:f3:62:d1:70:73:78:
8a:d1:3d:30:e4:ca:c7:02:fd:1b:57:68:e5:f5:0d:80:2a:8c:
05:c2:ac:f6:ce:8d:8a:30:a1:e0:90:64:02:4c:b4:d5:57:bc:
b5:28:09:97:6c:bd:87:70:88:2f:0c:0d:f3:29:f5:c7:a4:8f:
f6:5a:f2:8d:c0:00:f6:b7:93:23:a2:0f:12:33:68:30:1b:4c:
97:f5:0b:e3:57:e2:c3:fa:37:11:f7:65:3f:40:c9:cd:9f:d8:
ec:74:f2:e6:8a:42:58:a4:f2:97:34:ec:f2:25:a4:ea:01:64:
8c:83:fa:05:4d:32:25:ee:75:cf:8e:07:fd:97:a8:12:51:a9:
74:4c:0a:cb:6f:66:6f:c0:2b:c5:96:78:e4:03:7d:f3:c7:50:
c2:02:f8:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 08:22:02 2026 by rpki-client