Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/58c9a0-ffcf-40b8-97bc-ef0a7c150716/1/J-ZrGngsinzzxKhty_0eOSBvSyE.roa
File: J-ZrGngsinzzxKhty_0eOSBvSyE.roa (raw, json)
Hash identifier: yEjmBQt7jbBwQjbfz6E3LLZh+zLBv/2IV7cQ/+10/as=
Subject key identifier: 27:E6:6B:1A:78:2C:8A:7C:F3:C4:A8:6D:CB:FD:1E:39:20:6F:4B:21
Certificate issuer: /CN=7319770ffb487e3910dd44d9db0a534d8def78fa
Certificate serial: 019F93F1A1EC18173CE6C1247F63670A8988
Authority key identifier: 73:19:77:0F:FB:48:7E:39:10:DD:44:D9:DB:0A:53:4D:8D:EF:78:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cxl3D_tIfjkQ3UTZ2wpTTY3vePo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/58c9a0-ffcf-40b8-97bc-ef0a7c150716/1/J-ZrGngsinzzxKhty_0eOSBvSyE.roa
Signing time: Fri 24 Jul 2026 11:45:14 +0000
ROA not before: Fri 24 Jul 2026 11:45:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49556
IP address blocks: 185.238.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/58c9a0-ffcf-40b8-97bc-ef0a7c150716/1/cxl3D_tIfjkQ3UTZ2wpTTY3vePo.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/58c9a0-ffcf-40b8-97bc-ef0a7c150716/1/cxl3D_tIfjkQ3UTZ2wpTTY3vePo.mft
rsync://rpki.ripe.net/repository/DEFAULT/cxl3D_tIfjkQ3UTZ2wpTTY3vePo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:f1:a1:ec:18:17:3c:e6:c1:24:7f:63:67:0a:89:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7319770ffb487e3910dd44d9db0a534d8def78fa
Validity
Not Before: Jul 24 11:45:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=27e66b1a782c8a7cf3c4a86dcbfd1e39206f4b21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e4:74:fe:13:b4:22:2d:46:5a:3e:0f:2b:52:
be:5d:e0:50:17:2e:60:58:48:81:82:f4:8a:0e:d2:
0e:8c:88:c9:a8:cc:e1:5f:bd:c7:8d:94:21:e7:36:
0b:93:c9:1f:5d:d5:ff:cb:5a:84:43:ea:56:c0:8b:
5a:7a:2d:8b:f9:c8:56:07:55:7c:cd:a3:df:34:3e:
ca:79:dc:46:04:ef:ae:8d:f9:d1:3d:f9:55:b8:4d:
21:5d:32:36:0f:20:ce:d3:8b:78:93:82:df:5e:2f:
90:4a:04:08:c6:5a:c2:8e:02:b3:f4:a6:a6:bf:51:
96:a6:80:8e:df:2c:a6:b2:d5:26:8d:4e:52:65:d1:
3c:08:0e:ce:44:ae:2b:68:82:81:b0:f7:16:c5:dd:
fc:be:a2:d0:88:19:bd:04:2d:66:a4:de:33:0d:be:
dc:67:b0:38:6b:ae:f5:32:d4:d1:a7:69:45:2e:7d:
62:bb:44:d2:1f:45:83:38:d1:ee:6f:89:96:24:5a:
8f:77:23:d4:4a:c1:f5:3c:55:45:c1:95:ab:1b:33:
4f:63:28:24:a6:88:54:a4:12:84:36:5d:45:6e:9e:
69:36:69:cd:17:6f:19:97:b6:7b:4d:98:07:7c:48:
52:24:5b:7e:c2:06:c1:33:74:c0:21:80:90:de:a0:
bd:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:E6:6B:1A:78:2C:8A:7C:F3:C4:A8:6D:CB:FD:1E:39:20:6F:4B:21
X509v3 Authority Key Identifier:
keyid:73:19:77:0F:FB:48:7E:39:10:DD:44:D9:DB:0A:53:4D:8D:EF:78:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cxl3D_tIfjkQ3UTZ2wpTTY3vePo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/58c9a0-ffcf-40b8-97bc-ef0a7c150716/1/J-ZrGngsinzzxKhty_0eOSBvSyE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/58c9a0-ffcf-40b8-97bc-ef0a7c150716/1/cxl3D_tIfjkQ3UTZ2wpTTY3vePo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.238.167.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:93:b6:c7:7f:e6:6a:24:99:f5:3a:ae:25:7f:5c:b5:6f:15:
03:3d:06:a1:0b:a1:63:67:47:30:5b:cd:c0:04:41:83:33:99:
35:4c:a2:6f:ee:ee:d8:de:4a:50:4f:dc:b7:5b:59:b6:9d:90:
cd:82:23:ee:77:e8:40:cf:91:0c:b3:bc:65:31:a7:96:83:6a:
1f:02:42:6f:92:7e:8e:17:b1:52:b6:6e:e3:4f:da:3f:c0:a3:
c2:7d:b2:09:2f:d9:2b:bc:ae:fc:ed:fd:99:14:20:0e:28:19:
cb:d8:bb:d4:a3:0c:8c:c8:27:a5:ce:75:1e:b8:48:cc:00:36:
db:b3:5d:28:f3:d5:34:3c:5b:93:1d:79:2e:bb:a5:c3:2e:5a:
8a:02:14:48:b8:83:7f:d6:0e:fe:dd:20:14:34:18:8c:dc:ed:
7f:b2:4a:7d:7f:9a:bc:dd:56:1a:4e:72:d5:0d:41:05:45:b9:
3c:a5:15:51:4c:63:29:dd:e3:13:06:e0:20:bd:df:17:69:25:
7f:47:ef:64:f1:4e:26:6c:9c:fb:8f:90:23:82:8d:38:e0:96:
18:3c:05:88:20:91:b4:a3:87:b4:ec:a6:64:9b:6a:f7:40:02:
e0:37:c0:af:4e:63:50:63:22:bc:e1:40:2b:3e:22:66:0b:bb:
70:5d:ba:55
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ+T8aHsGBc85sEkf2NnComIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczMTk3NzBmZmI0ODdlMzkxMGRkNDRkOWRiMGE1MzRkOGRl
Zjc4ZmEwHhcNMjYwNzI0MTE0NTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyN2U2NmIxYTc4MmM4YTdjZjNjNGE4NmRjYmZkMWUzOTIwNmY0YjIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOR0/hO0Ii1GWj4PK1K+XeBQFy5g
WEiBgvSKDtIOjIjJqMzhX73HjZQh5zYLk8kfXdX/y1qEQ+pWwItaei2L+chWB1V8
zaPfND7KedxGBO+ujfnRPflVuE0hXTI2DyDO04t4k4LfXi+QSgQIxlrCjgKz9Kam
v1GWpoCO3yymstUmjU5SZdE8CA7ORK4raIKBsPcWxd38vqLQiBm9BC1mpN4zDb7c
Z7A4a671MtTRp2lFLn1iu0TSH0WDONHub4mWJFqPdyPUSsH1PFVFwZWrGzNPYygk
pohUpBKENl1Fbp5pNmnNF28Zl7Z7TZgHfEhSJFt+wgbBM3TAIYCQ3qC9UwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCfmaxp4LIp888Sobcv9Hjkgb0shMB8GA1UdIwQY
MBaAFHMZdw/7SH45EN1E2dsKU02N73j6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3hsM0RfdElmamtRM1VUWjJ3cFRUWTN2ZVBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi81OGM5YTAtZmZjZi00MGI4LTk3YmMt
ZWYwYTdjMTUwNzE2LzEvSi1ackduZ3Npbnp6eEtodHlfMGVPU0J2U3lFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi81OGM5YTAtZmZjZi00MGI4LTk3YmMtZWYwYTdjMTUwNzE2
LzEvY3hsM0RfdElmamtRM1VUWjJ3cFRUWTN2ZVBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAue6nMA0G
CSqGSIb3DQEBCwUAA4IBAQBPk7bHf+ZqJJn1Oq4lf1y1bxUDPQahC6FjZ0cwW83A
BEGDM5k1TKJv7u7Y3kpQT9y3W1m2nZDNgiPud+hAz5EMs7xlMaeWg2ofAkJvkn6O
F7FStm7jT9o/wKPCfbIJL9krvK787f2ZFCAOKBnL2LvUowyMyCelznUeuEjMADbb
s10o89U0PFuTHXkuu6XDLlqKAhRIuIN/1g7+3SAUNBiM3O1/skp9f5q83VYaTnLV
DUEFRbk8pRVRTGMp3eMTBuAgvd8XaSV/R+9k8U4mbJz7j5Ajgo044JYYPAWIIJG0
o4e07KZkm2r3QALgN8CvTmNQYyK84UArPiJmC7twXbpV
-----END CERTIFICATE-----
Generated at Mon Jul 27 05:38:44 2026 by rpki-client