Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/JvVBjIVS37lGpa1c9VOz2MPmHLs.roa
File: JvVBjIVS37lGpa1c9VOz2MPmHLs.roa (raw, json)
Hash identifier: q6ySAZv2zhPxzY0nSmdFaI6zSZkHXmEvHC/T+bksOH4=
Subject key identifier: 26:F5:41:8C:85:52:DF:B9:46:A5:AD:5C:F5:53:B3:D8:C3:E6:1C:BB
Certificate issuer: /CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Certificate serial: 019C2797912295E7353FF576A3B50D76CEE1
Authority key identifier: 88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/JvVBjIVS37lGpa1c9VOz2MPmHLs.roa
Signing time: Wed 04 Feb 2026 07:39:30 +0000
ROA not before: Wed 04 Feb 2026 07:39:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 984
IP address blocks: 185.253.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:27:97:91:22:95:e7:35:3f:f5:76:a3:b5:0d:76:ce:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Validity
Not Before: Feb 4 07:39:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=26f5418c8552dfb946a5ad5cf553b3d8c3e61cbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7c:8c:6a:5e:3b:b3:1c:7a:0e:16:b3:7a:d5:
6f:b9:6e:1f:9e:44:83:4e:ab:be:ca:c9:f5:ad:fb:
79:e5:f7:f3:67:06:4a:cf:dc:4b:ff:f4:93:9a:31:
73:fc:b0:5e:17:22:54:4c:c2:0d:c8:54:67:68:aa:
bc:bf:9b:74:ab:1b:1f:66:d8:ce:37:39:8c:72:1c:
e2:31:ed:a5:1f:2d:e9:ca:63:1d:db:9b:11:1b:62:
86:7d:45:ed:68:11:a9:47:3f:9e:58:4f:8a:d8:cc:
cd:f7:1e:db:6f:14:d8:54:b0:8f:34:fa:7b:f1:a9:
d9:3c:48:90:4d:be:38:ad:18:40:62:5d:2b:69:df:
64:43:73:fc:9e:fc:23:c0:b2:de:b0:0c:40:67:fb:
4c:d7:6d:b2:71:99:11:bd:0b:81:9c:31:6d:14:b7:
5b:17:d9:00:1f:fb:0e:fd:97:c8:d1:5d:8c:2c:c6:
0d:29:e8:b9:b7:4a:8f:e8:62:e8:de:fe:b0:7d:67:
c1:56:da:77:7f:ba:b0:df:d1:96:d4:23:92:dc:a2:
28:18:7d:48:fb:2f:cd:f2:e6:d5:49:75:45:72:96:
55:c2:ac:fc:5c:7c:b0:78:f3:c0:49:3c:b5:85:30:
53:ee:25:f4:7f:16:e8:b7:3e:d5:4f:27:c9:93:9d:
e5:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:F5:41:8C:85:52:DF:B9:46:A5:AD:5C:F5:53:B3:D8:C3:E6:1C:BB
X509v3 Authority Key Identifier:
keyid:88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/JvVBjIVS37lGpa1c9VOz2MPmHLs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.253.61.0/24
Signature Algorithm: sha256WithRSAEncryption
35:61:fa:43:80:93:63:82:d8:46:29:a5:da:e9:56:4e:3d:2a:
c8:3f:f0:79:48:3c:9f:f4:0a:8f:c5:cd:b8:88:4a:8f:e3:0b:
83:08:4b:fc:ad:da:30:b4:8a:5d:a9:21:04:64:f4:69:53:e2:
04:e5:23:2c:0a:57:f9:30:a0:ae:83:90:a9:fe:df:9f:3a:6c:
a7:27:0b:62:d2:db:b4:b1:0b:99:c0:27:d5:59:d7:53:31:9b:
4e:6d:cf:c4:77:bb:35:20:79:89:03:e2:fe:f2:af:4f:0f:16:
cd:7d:fe:6f:59:4d:fe:ae:ef:79:0e:e9:64:79:a3:f6:83:79:
d4:24:45:33:cc:5b:7c:85:de:d7:c8:dc:11:9e:89:26:f1:f7:
31:e4:8c:d3:3e:23:d5:f5:59:6e:dd:3f:c9:5f:f1:cd:1f:c5:
c9:9b:20:64:22:4d:4e:d4:ea:97:96:3c:27:47:01:4d:b7:e4:
a2:0e:a9:9c:71:ea:34:bc:42:77:71:ef:ec:3a:b3:12:06:32:
ae:b2:68:28:8a:f2:d5:72:fe:5e:3b:e4:f3:00:5f:f8:b4:49:
a7:63:e8:11:25:7d:59:ba:4b:37:57:63:dc:e4:a4:0d:0f:22:
16:17:9a:b3:6b:36:c1:4d:83:0d:b7:34:0b:ad:73:97:0f:c1:
0c:87:3f:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:43:33 2026 by rpki-client