Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/jr-PunQRQJFZJ7OYQwdFrKrkWJ8.roa
File: jr-PunQRQJFZJ7OYQwdFrKrkWJ8.roa (raw, json)
Hash identifier: q7R0ND36zZ5sAUsSRpGvv9igpHz56injhoG5j1zS828=
Subject key identifier: 8E:BF:8F:BA:74:11:40:91:59:27:B3:98:43:07:45:AC:AA:E4:58:9F
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 01A05CD3B18BE8E5E598D2A79249DA9B92A9
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/jr-PunQRQJFZJ7OYQwdFrKrkWJ8.roa
Signing time: Tue 01 Sep 2026 11:56:12 +0000
ROA not before: Tue 01 Sep 2026 11:56:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210820
IP address blocks: 85.133.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 10:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5c:d3:b1:8b:e8:e5:e5:98:d2:a7:92:49:da:9b:92:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Sep 1 11:56:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8ebf8fba741140915927b398430745acaae4589f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9d:f4:76:7f:07:12:9b:b0:ea:f5:d5:5a:58:
64:f6:56:b8:e5:a6:d5:46:1d:71:89:f8:d3:aa:74:
10:0f:24:07:2d:3d:53:da:47:04:3e:06:cc:b7:48:
a1:75:59:3d:27:d9:94:ff:44:e4:cb:3f:b7:9f:bc:
57:e6:cb:f9:10:2a:14:01:58:58:03:21:2c:7a:5b:
cc:dd:1a:13:4e:b3:18:8d:f2:43:2e:b0:e1:7a:b4:
d7:89:53:b1:eb:5f:71:f8:95:40:96:4e:6d:27:1b:
09:38:08:1d:56:a0:1d:a7:5a:91:ba:4c:d5:00:fe:
ac:85:04:42:af:40:57:7f:5d:d3:23:d9:f4:67:cb:
42:44:a9:e4:f6:d7:67:1c:d3:06:a2:d1:23:c2:07:
30:d4:9e:d3:7e:f3:52:6a:b2:03:3c:c2:af:c1:34:
d9:2d:db:63:01:55:5c:c5:dd:94:57:ec:22:12:f3:
8b:7c:73:0e:6b:1a:d1:fe:e0:d5:86:b1:c1:58:de:
b1:6e:b7:1c:12:22:a9:07:65:eb:3b:82:5d:de:20:
d6:69:1f:72:a5:b5:d5:53:92:08:09:72:5a:4a:7d:
e7:6d:55:b7:94:12:ce:23:63:ed:02:18:f0:fb:5f:
cf:7e:45:c5:00:93:2a:36:a6:f0:59:2d:33:59:cc:
1d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:BF:8F:BA:74:11:40:91:59:27:B3:98:43:07:45:AC:AA:E4:58:9F
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/jr-PunQRQJFZJ7OYQwdFrKrkWJ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.217.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:c0:90:a1:29:ca:d8:fe:ed:ee:86:23:46:16:ff:0c:9d:de:
46:64:61:31:22:8d:b0:5f:21:1e:f9:3c:a7:78:ca:51:37:43:
7a:d2:ad:58:fd:f0:e2:9e:90:5e:07:78:4d:32:3d:08:cc:12:
c6:a8:44:36:6e:d1:1e:14:0d:f4:3a:69:c9:ff:13:bb:68:f9:
36:30:d9:00:62:c9:d5:e5:91:55:da:fd:cf:7e:da:47:35:b8:
b8:20:50:cc:40:4d:05:7b:4b:80:7e:c6:b5:8e:94:58:b1:05:
8a:03:3d:1b:08:ff:a1:02:c7:1b:3c:2b:15:d4:e9:8a:3c:18:
2d:55:2f:14:31:9a:2d:1e:7f:d3:d4:1e:6d:6c:f7:30:94:7b:
4b:d8:2a:2f:f8:d3:18:bd:5e:5d:30:7b:1b:f7:fe:d8:6c:f4:
1a:c7:30:4c:2b:6b:d9:8d:fe:7f:75:90:13:6d:24:e5:48:ff:
3a:14:d9:b7:07:47:87:5d:44:c9:50:ba:94:00:4a:eb:31:13:
0a:16:d6:c8:89:06:37:52:45:7b:5c:e2:b7:cd:b7:3e:b2:cf:
a5:0d:72:ef:c2:73:c3:d5:96:8e:75:a6:31:b5:fa:b8:96:2e:
cb:ab:ea:26:32:db:82:16:2e:22:58:39:e3:0b:d9:b8:39:ba:
7a:a0:31:bc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaBc07GL6OXlmNKnkknam5KpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkNWUzOTY1OGEzZWY2ZjEzY2EyMWNjMTFhNGUzM2ViY2Q5
NDY3MDIwHhcNMjYwOTAxMTE1NjEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZWJmOGZiYTc0MTE0MDkxNTkyN2IzOTg0MzA3NDVhY2FhZTQ1ODlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJ30dn8HEpuw6vXVWlhk9la45abV
Rh1xifjTqnQQDyQHLT1T2kcEPgbMt0ihdVk9J9mU/0Tkyz+3n7xX5sv5ECoUAVhY
AyEselvM3RoTTrMYjfJDLrDherTXiVOx619x+JVAlk5tJxsJOAgdVqAdp1qRukzV
AP6shQRCr0BXf13TI9n0Z8tCRKnk9tdnHNMGotEjwgcw1J7TfvNSarIDPMKvwTTZ
LdtjAVVcxd2UV+wiEvOLfHMOaxrR/uDVhrHBWN6xbrccEiKpB2XrO4Jd3iDWaR9y
pbXVU5IICXJaSn3nbVW3lBLOI2PtAhjw+1/PfkXFAJMqNqbwWS0zWcwdnwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFI6/j7p0EUCRWSezmEMHRayq5FifMB8GA1UdIwQY
MBaAFM1eOWWKPvbxPKIcwRpOM+vNlGcCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUt
NWQxZmE2NmMzNjNiLzEvanItUHVuUVJRSkZaSjdPWVF3ZEZyS3JrV0o4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUtNWQxZmE2NmMzNjNi
LzEvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVYXZMA0G
CSqGSIb3DQEBCwUAA4IBAQB/wJChKcrY/u3uhiNGFv8Mnd5GZGExIo2wXyEe+Tyn
eMpRN0N60q1Y/fDinpBeB3hNMj0IzBLGqEQ2btEeFA30OmnJ/xO7aPk2MNkAYsnV
5ZFV2v3PftpHNbi4IFDMQE0Fe0uAfsa1jpRYsQWKAz0bCP+hAscbPCsV1OmKPBgt
VS8UMZotHn/T1B5tbPcwlHtL2Cov+NMYvV5dMHsb9/7YbPQaxzBMK2vZjf5/dZAT
bSTlSP86FNm3B0eHXUTJULqUAErrMRMKFtbIiQY3UkV7XOK3zbc+ss+lDXLvwnPD
1ZaOdaYxtfq4li7Lq+omMtuCFi4iWDnjC9m4Obp6oDG8
-----END CERTIFICATE-----
Generated at Thu Sep 10 17:49:37 2026 by rpki-client