Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/JpauRmDmCbHFVnVEUgKKhJVZS6o.roa
File: JpauRmDmCbHFVnVEUgKKhJVZS6o.roa (raw, json)
Hash identifier: xuDXXboJS3Rx8iTCxFhoV4xpzws2mEM5Qz8xariIxSc=
Subject key identifier: 26:96:AE:46:60:E6:09:B1:C5:56:75:44:52:02:8A:84:95:59:4B:AA
Certificate issuer: /CN=5bc2724ba1f58f0fb239ec39f6e1a09d58094458
Certificate serial: 019F236927E4C3EAF5B09891824F6BC97918
Authority key identifier: 5B:C2:72:4B:A1:F5:8F:0F:B2:39:EC:39:F6:E1:A0:9D:58:09:44:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W8JyS6H1jw-yOew59uGgnVgJRFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/JpauRmDmCbHFVnVEUgKKhJVZS6o.roa
Signing time: Thu 02 Jul 2026 15:18:41 +0000
ROA not before: Thu 02 Jul 2026 15:18:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206509
IP address blocks: 86.54.164.0/24 maxlen: 24
193.108.169.0/24 maxlen: 24
194.164.181.0/24 maxlen: 24
213.254.171.0/24 maxlen: 24
213.254.178.0/24 maxlen: 24
213.254.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/W8JyS6H1jw-yOew59uGgnVgJRFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/W8JyS6H1jw-yOew59uGgnVgJRFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/W8JyS6H1jw-yOew59uGgnVgJRFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:27:e4:c3:ea:f5:b0:98:91:82:4f:6b:c9:79:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bc2724ba1f58f0fb239ec39f6e1a09d58094458
Validity
Not Before: Jul 2 15:18:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2696ae4660e609b1c556754452028a8495594baa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:eb:79:fc:11:08:a7:25:ae:6e:da:2c:bc:c6:
df:ce:cd:d6:8a:1f:e6:94:ca:d2:04:91:67:8b:ff:
e5:5c:1c:d3:0e:d0:27:59:3e:b6:c4:8e:e7:6c:b4:
2f:b1:06:a9:26:21:39:a9:d8:d6:4d:2c:b8:15:07:
97:7b:83:45:13:55:54:ea:34:3f:52:47:fd:73:ff:
bc:5f:98:2c:bb:e1:40:bf:2c:ff:29:c7:55:b4:74:
14:3b:54:d1:38:c0:fa:1a:cc:9f:c0:de:4e:9b:c3:
e0:c1:0e:71:87:f2:b7:e2:66:ec:d3:46:4d:f8:c7:
0e:bc:d6:dd:d6:3b:0f:bc:a4:97:51:32:3a:fd:b5:
ae:48:df:8d:a8:3f:22:5f:5a:4e:eb:5b:02:32:22:
55:98:1f:d0:a0:d2:6a:c3:99:ee:58:65:1e:15:26:
de:c7:c4:78:de:b1:7d:fd:70:ce:d0:8f:6d:d9:a4:
5f:f1:ce:be:38:63:b2:81:c2:45:ae:ff:30:29:03:
44:5f:fa:06:e0:e0:85:d9:76:fe:95:00:ea:65:c7:
7c:2a:20:f2:2f:4c:84:54:27:2a:31:a1:95:47:69:
87:6a:a2:d4:3c:e4:23:7d:0f:c7:97:25:b4:cc:dd:
de:5c:e0:12:75:83:b9:86:42:59:76:43:ee:cf:5b:
4c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:96:AE:46:60:E6:09:B1:C5:56:75:44:52:02:8A:84:95:59:4B:AA
X509v3 Authority Key Identifier:
keyid:5B:C2:72:4B:A1:F5:8F:0F:B2:39:EC:39:F6:E1:A0:9D:58:09:44:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W8JyS6H1jw-yOew59uGgnVgJRFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/JpauRmDmCbHFVnVEUgKKhJVZS6o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/W8JyS6H1jw-yOew59uGgnVgJRFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.54.164.0/24
193.108.169.0/24
194.164.181.0/24
213.254.171.0/24
213.254.178.0/24
213.254.185.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:13:02:98:02:fd:19:4c:1e:17:e4:32:c4:04:39:03:9d:6a:
35:a4:ec:39:6e:8e:67:bb:9e:79:db:aa:ac:05:b2:3d:49:08:
9a:3a:7c:f5:24:8c:70:74:c9:1c:48:56:c8:b3:4c:bd:fc:b2:
fc:01:ee:ba:cb:9a:e1:f6:a1:5e:b0:52:02:12:8c:fa:18:94:
44:7a:45:ce:da:a7:02:44:7f:a8:47:06:8f:42:f8:5b:ba:67:
25:31:45:a7:e7:e2:b7:d9:bc:64:36:94:ba:54:98:6f:99:80:
a8:f0:e9:28:56:c9:ad:76:64:3e:d5:1f:d7:de:0f:3b:24:01:
92:f5:bd:38:80:d8:09:f0:af:d6:c0:ec:e9:2b:8b:4e:c1:55:
a4:59:f8:ee:bb:7c:cc:ef:38:ac:e8:92:de:46:97:41:a1:2c:
6b:f8:aa:22:e9:fe:a4:4d:fc:24:eb:12:2c:02:c0:e9:b1:44:
df:f6:bd:2a:ce:53:5c:1f:94:64:21:88:84:3f:77:7a:1b:63:
d4:bf:9c:c5:37:98:bd:d6:ce:a2:c9:57:e0:70:e2:6c:3b:4e:
23:a8:a9:fb:8b:35:0f:b3:de:40:48:08:0d:e1:06:77:31:a9:
61:97:44:69:36:c1:40:dc:53:87:db:65:52:ec:68:de:7e:fc:
50:9d:04:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 20:06:03 2026 by rpki-client