Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/jVGqt7QzMv9cvgzxduoJ2PU2uAc.roa
File: jVGqt7QzMv9cvgzxduoJ2PU2uAc.roa (raw, json)
Hash identifier: LTF1ObcnPwfd3UlaPU6jnvkAyuWuWrEd58CPMjHxDsM=
Subject key identifier: 8D:51:AA:B7:B4:33:32:FF:5C:BE:0C:F1:76:EA:09:D8:F5:36:B8:07
Certificate issuer: /CN=f30e445195b64d799b822e99947792e0cab32b6d
Certificate serial: 019F9296A5C2D08CFCDCBDA23AE4E130E91C
Authority key identifier: F3:0E:44:51:95:B6:4D:79:9B:82:2E:99:94:77:92:E0:CA:B3:2B:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8w5EUZW2TXmbgi6ZlHeS4MqzK20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/jVGqt7QzMv9cvgzxduoJ2PU2uAc.roa
Signing time: Fri 24 Jul 2026 05:26:14 +0000
ROA not before: Fri 24 Jul 2026 05:26:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401322
IP address blocks: 189.13.251.0/24 maxlen: 24
189.13.252.0/24 maxlen: 24
189.13.253.0/24 maxlen: 24
189.13.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/8w5EUZW2TXmbgi6ZlHeS4MqzK20.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/8w5EUZW2TXmbgi6ZlHeS4MqzK20.mft
rsync://rpki.ripe.net/repository/DEFAULT/8w5EUZW2TXmbgi6ZlHeS4MqzK20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:96:a5:c2:d0:8c:fc:dc:bd:a2:3a:e4:e1:30:e9:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f30e445195b64d799b822e99947792e0cab32b6d
Validity
Not Before: Jul 24 05:26:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8d51aab7b43332ff5cbe0cf176ea09d8f536b807
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:25:a5:cf:55:71:75:72:86:7a:ca:e8:de:05:
ad:9d:ac:7f:65:5b:3f:d1:49:f2:45:49:cd:25:82:
28:e0:1d:49:1d:4c:58:46:d6:0e:b7:b2:9e:2b:1e:
53:04:62:c6:25:15:4c:83:3b:22:59:5f:1c:59:21:
e2:99:92:da:b7:dd:d2:48:0f:a3:1c:8e:4d:c6:34:
26:00:6c:06:96:96:6c:2e:bd:ab:ae:a9:d8:4a:08:
d0:11:44:e0:a7:65:84:bc:d9:0f:1d:21:d6:3e:82:
fc:35:70:a2:f1:98:38:4f:c9:b2:a5:cb:3b:80:9b:
a1:7d:97:73:a6:93:e5:f7:89:7d:ec:74:34:8a:71:
25:e8:bc:9c:07:bb:80:c6:09:80:7c:46:db:3d:94:
1e:f2:8b:8c:4f:43:ab:53:5f:61:2a:98:48:9a:92:
11:56:59:59:60:86:fe:3b:46:24:ca:3e:2f:50:ec:
50:ec:3b:91:12:ce:ca:7f:f1:68:24:4d:72:e0:07:
cb:fa:3c:de:b0:0e:75:b5:db:49:b2:ae:0a:2c:fa:
2b:cc:c2:b0:0c:a0:54:d2:89:f7:4f:5c:88:68:a0:
3d:20:67:e2:cd:c1:e1:47:7f:1e:f7:83:17:5c:41:
f7:44:b7:cb:5b:bf:8f:81:63:86:9f:00:f4:df:8e:
99:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:51:AA:B7:B4:33:32:FF:5C:BE:0C:F1:76:EA:09:D8:F5:36:B8:07
X509v3 Authority Key Identifier:
keyid:F3:0E:44:51:95:B6:4D:79:9B:82:2E:99:94:77:92:E0:CA:B3:2B:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8w5EUZW2TXmbgi6ZlHeS4MqzK20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/jVGqt7QzMv9cvgzxduoJ2PU2uAc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/8w5EUZW2TXmbgi6ZlHeS4MqzK20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.13.251.0-189.13.254.255
Signature Algorithm: sha256WithRSAEncryption
3a:eb:3b:3d:01:a2:1d:a2:b1:63:a2:1f:b7:8c:25:8f:0c:e5:
3c:bf:fb:d8:32:09:7c:42:48:28:44:79:5b:83:ff:c3:fa:07:
c9:8d:ac:85:fa:90:fa:28:3d:07:a0:f9:5b:a5:14:61:95:fc:
50:7b:b4:98:22:e1:05:d6:10:3b:05:11:f7:fc:da:a7:22:5b:
44:24:6d:53:fa:7d:70:42:68:4f:f2:eb:95:9e:3b:2f:a6:74:
4d:48:4d:d6:e6:34:0b:1f:c7:89:83:22:44:2d:51:e8:49:c9:
67:b7:f0:67:0d:0d:52:ac:9b:f7:cf:e7:2d:02:52:87:2e:c7:
16:91:26:8d:48:dc:51:f5:89:bb:34:d5:37:ae:9d:9f:22:45:
ff:1a:8f:b4:2f:ce:43:c3:38:ad:1b:8a:e7:5b:48:f5:4f:78:
88:d5:45:32:47:36:d6:7a:94:cc:50:36:8d:bb:c3:a0:4c:b8:
9c:36:59:e3:7a:51:68:e5:a0:2d:9c:97:47:e3:c3:c0:4a:eb:
1c:44:ac:87:77:0c:07:50:91:a4:11:59:84:62:b2:b1:a7:dd:
43:ef:d2:ba:10:57:91:6b:2f:e4:11:58:6c:ea:62:79:a6:13:
07:fd:bb:4b:15:40:b1:c2:5e:8d:8a:19:2b:fd:4b:10:57:0b:
3a:06:86:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:01:05 2026 by rpki-client