Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/fc9e1f-5ff2-4e82-b81c-cd463927f0f0/1/jgpzu-ESfiekXnmQsWtfxfFMnls.roa
File: jgpzu-ESfiekXnmQsWtfxfFMnls.roa (raw, json)
Hash identifier: VKgBSq4j9tQnrdlFEiguu7TMFYsGEpDcXU1dHxHAkww=
Subject key identifier: 8E:0A:73:BB:E1:12:7E:27:A4:5E:79:90:B1:6B:5F:C5:F1:4C:9E:5B
Certificate issuer: /CN=3db8820a6b1020ec6e22bc7716fed8e520ad2664
Certificate serial: 019CE654EB7CCC2B31F57904491FF95556DD
Authority key identifier: 3D:B8:82:0A:6B:10:20:EC:6E:22:BC:77:16:FE:D8:E5:20:AD:26:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PbiCCmsQIOxuIrx3Fv7Y5SCtJmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/fc9e1f-5ff2-4e82-b81c-cd463927f0f0/1/jgpzu-ESfiekXnmQsWtfxfFMnls.roa
Signing time: Fri 13 Mar 2026 08:34:10 +0000
ROA not before: Fri 13 Mar 2026 08:34:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8881
IP address blocks: 185.211.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/fc9e1f-5ff2-4e82-b81c-cd463927f0f0/1/PbiCCmsQIOxuIrx3Fv7Y5SCtJmQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/fc9e1f-5ff2-4e82-b81c-cd463927f0f0/1/PbiCCmsQIOxuIrx3Fv7Y5SCtJmQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PbiCCmsQIOxuIrx3Fv7Y5SCtJmQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 23 Mar 2026 08:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:54:eb:7c:cc:2b:31:f5:79:04:49:1f:f9:55:56:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3db8820a6b1020ec6e22bc7716fed8e520ad2664
Validity
Not Before: Mar 13 08:34:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8e0a73bbe1127e27a45e7990b16b5fc5f14c9e5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:12:54:e6:b2:d1:cc:ba:3a:65:f9:70:ee:2d:
59:9b:d2:4c:d9:23:2d:8f:3d:c8:1c:44:8f:6d:85:
8b:40:0a:a6:4f:de:0e:28:b2:c2:6f:43:09:9a:69:
04:e0:67:e2:8d:33:65:61:c1:45:40:00:3d:05:db:
a1:5d:1b:dc:6b:1b:b1:d6:cb:41:6a:a5:e7:d4:c8:
48:b5:94:78:a1:bb:c0:8a:8f:9a:ae:3a:27:b7:cc:
4d:52:7e:77:d0:67:14:2a:7b:91:78:d1:5b:db:b5:
29:c1:df:dd:43:53:0a:ec:04:24:d3:be:1a:c0:37:
fa:f5:3a:6a:1a:1b:01:6e:fa:0a:53:e1:76:5f:20:
42:a5:45:36:9a:c2:fa:0f:a4:e4:eb:1b:92:34:d3:
0c:48:b0:60:f1:4f:b7:07:31:dd:f3:6f:8e:5a:c2:
0d:29:fb:c3:bc:18:d2:f3:a5:0d:d0:37:c2:ff:16:
12:0a:1f:51:6b:24:09:e4:7a:23:39:f3:f6:61:aa:
11:07:d0:a4:7e:7e:34:38:80:2a:fb:1e:00:3c:55:
37:fa:69:3e:77:88:bc:1a:bb:f6:b6:4c:c7:82:30:
29:54:6b:fb:95:b2:c4:fc:50:9e:a5:c4:8e:b1:cc:
17:18:96:18:10:55:0d:d5:e4:7f:0e:fd:d2:d4:a2:
dc:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:0A:73:BB:E1:12:7E:27:A4:5E:79:90:B1:6B:5F:C5:F1:4C:9E:5B
X509v3 Authority Key Identifier:
keyid:3D:B8:82:0A:6B:10:20:EC:6E:22:BC:77:16:FE:D8:E5:20:AD:26:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PbiCCmsQIOxuIrx3Fv7Y5SCtJmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/fc9e1f-5ff2-4e82-b81c-cd463927f0f0/1/jgpzu-ESfiekXnmQsWtfxfFMnls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/fc9e1f-5ff2-4e82-b81c-cd463927f0f0/1/PbiCCmsQIOxuIrx3Fv7Y5SCtJmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.211.76.0/24
Signature Algorithm: sha256WithRSAEncryption
22:18:15:63:af:09:61:f0:a1:5a:aa:75:ac:c8:ba:fd:7f:64:
0c:69:78:21:1b:6d:1b:c7:80:35:c8:d6:bb:04:09:bf:8a:15:
5f:b2:95:1e:ac:76:19:4c:a4:53:19:71:de:20:33:c7:9f:36:
7b:9e:c8:34:9a:da:80:05:dc:65:4d:e1:0e:e0:b8:d7:da:9c:
05:74:6d:08:ce:30:c6:df:d4:31:f0:41:93:7d:6f:27:2d:78:
f4:e0:0c:1a:8b:2c:c3:f3:67:cc:04:67:73:e8:6f:9e:cb:6a:
b9:63:6b:2a:61:6d:7f:00:2a:7a:b5:56:8d:cd:9f:8b:58:09:
48:b6:39:81:47:dd:45:23:73:10:82:f8:5d:2f:f5:28:62:32:
93:98:c3:ff:f8:d6:cf:78:45:43:34:4e:f4:28:c7:aa:de:3a:
0d:40:88:b4:27:94:39:4f:5a:fa:09:76:ed:07:4f:c3:81:95:
dd:a3:25:3c:88:a4:15:87:cc:c6:57:cc:26:9a:18:98:9b:77:
c8:75:e9:4d:c7:18:66:70:3b:7a:64:5b:9e:16:04:75:2c:d7:
af:51:98:a0:f7:a2:7e:ca:a7:b4:54:2f:3a:61:a7:6b:dd:be:
2e:d9:1e:16:b0:16:b7:2e:4f:66:2b:a4:5a:0e:ca:5e:1d:ee:
b0:36:1c:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 22 14:52:34 2026 by rpki-client