Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/Jdvr0pOlTbqtvdte8z_DkDkyczY.roa
File: Jdvr0pOlTbqtvdte8z_DkDkyczY.roa (raw, json)
Hash identifier: amg0+pr/DB8XzXgrSXF6K+o2fm6qdJrZPiGxNalnS4g=
Subject key identifier: 25:DB:EB:D2:93:A5:4D:BA:AD:BD:DB:5E:F3:3F:C3:90:39:32:73:36
Certificate issuer: /CN=edf36b243560346053bc60ced4e98aa48ea1a063
Certificate serial: 01A0A75E42C049A64CCAB2FD65A267265290
Authority key identifier: ED:F3:6B:24:35:60:34:60:53:BC:60:CE:D4:E9:8A:A4:8E:A1:A0:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7fNrJDVgNGBTvGDO1OmKpI6hoGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/Jdvr0pOlTbqtvdte8z_DkDkyczY.roa
Signing time: Tue 15 Sep 2026 23:19:27 +0000
ROA not before: Tue 15 Sep 2026 23:19:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199741
IP address blocks: 198.33.139.0/24 maxlen: 24
198.34.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/7fNrJDVgNGBTvGDO1OmKpI6hoGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/7fNrJDVgNGBTvGDO1OmKpI6hoGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/7fNrJDVgNGBTvGDO1OmKpI6hoGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Sep 2026 02:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a7:5e:42:c0:49:a6:4c:ca:b2:fd:65:a2:67:26:52:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edf36b243560346053bc60ced4e98aa48ea1a063
Validity
Not Before: Sep 15 23:19:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=25dbebd293a54dbaadbddb5ef33fc39039327336
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c6:5a:8c:a9:38:7c:ab:d5:06:ed:dd:35:10:
15:62:ce:64:23:6b:6f:4b:cc:09:fe:62:b9:e7:b1:
5c:8d:41:4e:52:af:20:07:72:5c:8b:c4:b8:bb:eb:
c1:90:d2:3e:59:fa:ce:60:94:c8:eb:1c:e1:dc:bd:
60:7a:1b:3e:ff:19:04:66:4f:cf:06:3b:f5:49:f9:
84:ab:34:d4:45:12:79:75:9c:ac:ea:5d:a5:00:50:
63:ce:d7:b8:01:5d:c3:4a:e7:89:f8:4f:1e:4f:5d:
19:54:bc:63:87:72:4d:07:8c:4f:eb:fc:1d:6b:65:
65:0a:97:8a:66:36:93:76:64:04:7e:9b:f5:a8:ef:
3c:af:0c:74:3e:a1:77:5a:e6:4a:73:3a:41:22:d5:
ca:44:51:39:f5:4e:ab:51:f7:64:6a:d4:31:fa:01:
ed:20:ae:41:d5:fe:bf:14:b2:9d:56:13:aa:69:0d:
3f:bf:5a:f7:22:5d:d9:e7:be:76:25:fc:17:35:2a:
8c:77:ff:d6:96:22:8a:6c:c9:2a:82:08:e3:05:5a:
17:83:6c:59:99:6c:2c:6a:9a:4f:a2:a8:20:aa:5c:
c8:5c:3a:32:e0:8d:b1:d6:88:4d:4a:91:74:73:d8:
de:1d:60:fa:ce:d6:0f:a0:bf:9e:ab:ee:52:21:5f:
88:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:DB:EB:D2:93:A5:4D:BA:AD:BD:DB:5E:F3:3F:C3:90:39:32:73:36
X509v3 Authority Key Identifier:
keyid:ED:F3:6B:24:35:60:34:60:53:BC:60:CE:D4:E9:8A:A4:8E:A1:A0:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7fNrJDVgNGBTvGDO1OmKpI6hoGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/Jdvr0pOlTbqtvdte8z_DkDkyczY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/7fNrJDVgNGBTvGDO1OmKpI6hoGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
198.33.139.0/24
198.34.79.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:77:2c:27:27:ae:6a:d0:5d:08:09:4f:69:66:f8:77:b6:98:
fa:8c:34:fe:03:d5:1a:b9:b6:d0:8f:fd:a6:55:f3:4f:de:d7:
fc:32:b4:2b:c8:4b:ea:65:12:7a:93:53:0c:80:33:d9:e0:a7:
49:ee:b6:3f:ae:15:b5:c8:34:d6:48:2d:31:0c:4e:82:04:3f:
eb:bc:4f:1d:77:c8:83:8f:16:97:5a:63:b1:e1:4b:3a:10:40:
0a:5c:80:9e:e0:2d:a3:28:bc:54:fc:2a:f7:00:34:93:fb:9e:
92:70:53:35:e1:51:1e:1c:15:0c:f5:a4:3c:8c:c9:db:d6:d7:
90:0a:2f:b5:c2:44:38:a6:67:fd:4c:2a:83:83:d9:a1:7f:58:
d5:3c:b1:67:3c:68:3f:64:10:1f:f8:3d:40:b6:0e:f3:a8:a9:
c5:73:27:eb:29:7a:83:a3:c7:f2:bb:c1:09:10:29:82:53:92:
b5:84:be:fa:99:81:5f:e7:19:99:b3:2a:db:68:f2:46:2a:b0:
bc:eb:6c:a2:10:e9:da:62:22:ec:ff:31:65:ba:76:9c:13:89:
fa:73:61:fb:a3:cb:f0:40:34:48:e5:8a:cb:34:f7:99:61:45:
29:d3:8d:9b:ee:b0:3e:88:dc:54:3d:14:b6:d6:cc:b7:2b:7e:
ce:99:de:32
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaCnXkLASaZMyrL9ZaJnJlKQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkZjM2YjI0MzU2MDM0NjA1M2JjNjBjZWQ0ZTk4YWE0OGVh
MWEwNjMwHhcNMjYwOTE1MjMxOTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNWRiZWJkMjkzYTU0ZGJhYWRiZGRiNWVmMzNmYzM5MDM5MzI3MzM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8ZajKk4fKvVBu3dNRAVYs5kI2tv
S8wJ/mK557FcjUFOUq8gB3Jci8S4u+vBkNI+WfrOYJTI6xzh3L1gehs+/xkEZk/P
Bjv1SfmEqzTURRJ5dZys6l2lAFBjzte4AV3DSueJ+E8eT10ZVLxjh3JNB4xP6/wd
a2VlCpeKZjaTdmQEfpv1qO88rwx0PqF3WuZKczpBItXKRFE59U6rUfdkatQx+gHt
IK5B1f6/FLKdVhOqaQ0/v1r3Il3Z5752JfwXNSqMd//WliKKbMkqggjjBVoXg2xZ
mWwsappPoqggqlzIXDoy4I2x1ohNSpF0c9jeHWD6ztYPoL+eq+5SIV+IiwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFCXb69KTpU26rb3bXvM/w5A5MnM2MB8GA1UdIwQY
MBaAFO3zayQ1YDRgU7xgztTpiqSOoaBjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2ZOckpEVmdOR0JUdkdETzFPbUtwSTZob0dNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC80YzcwNzQtOThjMS00MzM5LWEwNGUt
N2NiMmZkMjMyY2NjLzEvSmR2cjBwT2xUYnF0dmR0ZTh6X0RrRGt5Y3pZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC80YzcwNzQtOThjMS00MzM5LWEwNGUtN2NiMmZkMjMyY2Nj
LzEvN2ZOckpEVmdOR0JUdkdETzFPbUtwSTZob0dNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAxiGLAwQA
xiJPMA0GCSqGSIb3DQEBCwUAA4IBAQBbdywnJ65q0F0ICU9pZvh3tpj6jDT+A9Ua
ubbQj/2mVfNP3tf8MrQryEvqZRJ6k1MMgDPZ4KdJ7rY/rhW1yDTWSC0xDE6CBD/r
vE8dd8iDjxaXWmOx4Us6EEAKXICe4C2jKLxU/Cr3ADST+56ScFM14VEeHBUM9aQ8
jMnb1teQCi+1wkQ4pmf9TCqDg9mhf1jVPLFnPGg/ZBAf+D1Atg7zqKnFcyfrKXqD
o8fyu8EJECmCU5K1hL76mYFf5xmZsyrbaPJGKrC862yiEOnaYiLs/zFlunacE4n6
c2H7o8vwQDRI5YrLNPeZYUUp042b7rA+iNxUPRS21sy3K37Omd4y
-----END CERTIFICATE-----
Generated at Sat Sep 19 11:43:53 2026 by rpki-client