Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/JvSklV-wlWBMdiMFZHYwnOO4qno.roa
File: JvSklV-wlWBMdiMFZHYwnOO4qno.roa (raw, json)
Hash identifier: 2Y5pgGlMimFGDoHDIk55HXcJoD340d10aMUaMx1CDGE=
Subject key identifier: 26:F4:A4:95:5F:B0:95:60:4C:76:23:05:64:76:30:9C:E3:B8:AA:7A
Certificate issuer: /CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5
Certificate serial: 019D915E27C971AB0184F2DB8AE9514F9B1F
Authority key identifier: 8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/JvSklV-wlWBMdiMFZHYwnOO4qno.roa
Signing time: Wed 15 Apr 2026 13:39:20 +0000
ROA not before: Wed 15 Apr 2026 13:39:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199055
IP address blocks: 185.29.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.mft
rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 10:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:91:5e:27:c9:71:ab:01:84:f2:db:8a:e9:51:4f:9b:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5
Validity
Not Before: Apr 15 13:39:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=26f4a4955fb095604c7623056476309ce3b8aa7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:b0:9e:27:b9:f0:f6:4f:78:fd:46:5b:dc:a9:
5f:80:f2:2e:f9:2a:76:05:95:6e:27:f0:5c:54:b4:
b5:f5:98:95:3c:1f:96:c4:df:80:c2:9b:3b:5f:9b:
e7:c3:7c:2b:49:49:be:9f:f3:f2:03:66:8b:b5:1c:
f6:51:ad:4a:e3:e7:16:be:43:3b:05:ee:52:cf:a1:
5a:f0:c0:94:3e:a1:73:e9:fc:58:17:f1:f5:68:e4:
28:96:c3:46:2c:af:b9:e8:1d:cb:23:be:f4:48:cc:
50:99:1f:6c:b6:c4:bc:89:26:6e:6b:f3:aa:a0:df:
fc:df:94:a5:dd:32:de:f6:7e:0c:00:ab:50:23:a3:
84:8f:f1:6f:59:05:77:04:a1:a3:6c:3b:16:d6:79:
ac:07:80:23:21:69:f3:2e:ec:af:15:68:c3:48:c2:
18:21:98:ba:09:3b:b3:45:eb:16:35:77:88:e0:53:
dc:3a:63:d5:74:cd:1a:3f:ed:06:c1:dd:b8:85:1a:
c1:b5:8c:6d:00:7e:1c:91:8a:fe:5e:7f:77:32:51:
ac:06:55:ea:96:6f:dc:8b:21:a5:01:32:62:c6:11:
14:2f:3e:e6:f6:ac:7f:05:92:80:f0:ec:10:53:a0:
00:27:36:fe:44:05:b9:e0:23:cb:a8:1e:f4:b7:df:
19:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:F4:A4:95:5F:B0:95:60:4C:76:23:05:64:76:30:9C:E3:B8:AA:7A
X509v3 Authority Key Identifier:
keyid:8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/JvSklV-wlWBMdiMFZHYwnOO4qno.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.29.252.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:7e:91:01:27:a5:ac:64:0f:e4:b6:b2:1f:c4:b9:1f:55:35:
d3:75:fa:1a:db:35:5d:1d:b7:44:82:f2:da:8b:ac:3f:f7:8a:
0a:95:fc:18:d6:75:38:1c:d1:a6:2d:83:05:b7:df:94:b1:93:
36:57:56:0a:8b:e0:8f:0e:6a:f3:0b:6c:17:02:5e:76:a9:a4:
0f:3b:44:50:c1:ae:b4:dc:c3:91:7b:f7:57:cb:9c:1f:77:3c:
2e:dd:78:7c:05:b8:11:52:91:8b:4d:71:cb:2b:a9:da:34:22:
17:eb:5c:46:7f:65:2a:2d:01:a1:b9:4a:3c:cd:5a:cd:49:ad:
1d:92:0e:0e:46:fd:7a:fe:6f:92:4d:7e:09:1c:e2:bf:cd:9e:
8f:9a:ca:6e:25:cd:ee:f2:39:e0:8e:00:e8:26:9b:cb:ba:74:
eb:55:06:0a:c7:18:b8:67:1d:fa:81:89:5e:73:53:7d:a0:d2:
33:f3:7a:f4:0b:ca:23:db:b5:d2:80:f1:92:e5:58:99:a5:07:
87:e3:ab:92:df:92:ff:42:3e:11:02:52:41:e8:68:02:10:91:
87:83:6e:8b:5d:40:ae:7a:63:d5:e5:c9:47:b7:82:e2:0c:24:
3d:50:bc:12:e9:be:68:54:fd:fc:d5:64:63:ff:ed:e0:3f:bb:
af:3b:13:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:07:29 2026 by rpki-client