Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/49/dd1ec7-3446-4709-b93c-089c89ef63c8/1/YHstncILgUNpuXbgCO8c6P_6Xvs.roa
File: YHstncILgUNpuXbgCO8c6P_6Xvs.roa (raw, json)
Hash identifier: VEQs6oTBQxcEcwuJMfcyYhtknh4yEhLqGT+OW+Zz7+E=
Subject key identifier: 60:7B:2D:9D:C2:0B:81:43:69:B9:76:E0:08:EF:1C:E8:FF:FA:5E:FB
Certificate issuer: /CN=25907f90d9f9d902fcf04bd0b46152c3827a7d50
Certificate serial: 01A11F6FDA1098F947FF6214E67DDE55F164
Authority key identifier: 25:90:7F:90:D9:F9:D9:02:FC:F0:4B:D0:B4:61:52:C3:82:7A:7D:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JZB_kNn52QL88EvQtGFSw4J6fVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/dd1ec7-3446-4709-b93c-089c89ef63c8/1/YHstncILgUNpuXbgCO8c6P_6Xvs.roa
Signing time: Fri 09 Oct 2026 06:53:06 +0000
ROA not before: Fri 09 Oct 2026 06:53:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199393
IP address blocks: 192.118.132.0/22 maxlen: 22
192.118.132.0/23 maxlen: 23
192.118.132.0/24 maxlen: 24
192.118.133.0/24 maxlen: 24
192.118.134.0/23 maxlen: 23
192.118.134.0/24 maxlen: 24
192.118.135.0/24 maxlen: 24
194.169.183.0/24 maxlen: 24
2a13:c480::/48 maxlen: 48
2a13:c480:1::/48 maxlen: 48
2a13:c480:2::/48 maxlen: 48
2a13:c480:3::/48 maxlen: 48
2a13:c480:4::/48 maxlen: 48
2a13:c480:5::/48 maxlen: 48
2a13:c480:6::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/dd1ec7-3446-4709-b93c-089c89ef63c8/1/JZB_kNn52QL88EvQtGFSw4J6fVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/dd1ec7-3446-4709-b93c-089c89ef63c8/1/JZB_kNn52QL88EvQtGFSw4J6fVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JZB_kNn52QL88EvQtGFSw4J6fVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 14:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1f:6f:da:10:98:f9:47:ff:62:14:e6:7d:de:55:f1:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25907f90d9f9d902fcf04bd0b46152c3827a7d50
Validity
Not Before: Oct 9 06:53:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=607b2d9dc20b814369b976e008ef1ce8fffa5efb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:65:b4:6a:db:40:5f:fa:25:7e:51:01:d7:6b:
31:5f:2f:51:7e:1e:e8:6b:e9:3b:6e:37:d8:ba:5e:
66:b4:2b:c1:52:b7:14:6c:e8:a2:19:95:51:da:2b:
ef:ca:8e:00:80:c5:fd:42:d4:58:00:e7:ab:bf:d1:
2d:4d:d8:b6:7d:b0:e6:49:79:ef:ea:51:6a:15:b4:
53:4c:69:82:5b:e7:43:df:0e:7c:bc:58:d6:8f:8a:
d6:c3:c4:04:29:96:61:29:68:45:c6:e4:19:b4:98:
98:47:21:a0:ac:69:36:9d:7c:57:97:23:b5:31:aa:
e6:5d:ea:91:75:08:d3:2d:89:d6:91:f9:52:bb:a9:
14:5d:8a:3b:59:eb:09:96:74:bd:b8:7c:64:c7:a8:
36:02:33:f5:31:b6:aa:f4:e4:db:05:28:b9:d9:cc:
b1:97:16:1a:f0:50:95:d9:ca:f4:7a:fc:9c:f5:91:
9a:e4:0a:6b:25:27:13:df:69:ef:d3:51:9c:66:09:
5e:2f:a2:08:12:7d:4e:3d:1f:d4:6e:58:46:ef:bb:
c9:51:a6:1e:c9:eb:0f:79:b4:07:55:5d:c6:09:23:
67:af:28:99:46:ad:33:c3:f9:32:e1:cf:d6:aa:ad:
08:86:19:79:52:0a:7f:47:da:79:94:5e:5f:a2:ad:
08:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:7B:2D:9D:C2:0B:81:43:69:B9:76:E0:08:EF:1C:E8:FF:FA:5E:FB
X509v3 Authority Key Identifier:
keyid:25:90:7F:90:D9:F9:D9:02:FC:F0:4B:D0:B4:61:52:C3:82:7A:7D:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JZB_kNn52QL88EvQtGFSw4J6fVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/dd1ec7-3446-4709-b93c-089c89ef63c8/1/YHstncILgUNpuXbgCO8c6P_6Xvs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/dd1ec7-3446-4709-b93c-089c89ef63c8/1/JZB_kNn52QL88EvQtGFSw4J6fVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.118.132.0/22
194.169.183.0/24
IPv6:
2a13:c480::-2a13:c480:6:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
71:1e:ce:0e:cc:5a:07:2e:3b:02:e4:1a:32:14:49:a9:0d:ca:
7a:57:52:b1:ae:95:e4:66:f9:5f:21:2b:ac:31:0d:4a:49:56:
9d:be:d7:4c:d9:52:ae:d9:3a:9d:94:b8:65:0d:fb:1f:68:ac:
8f:38:67:96:a8:54:01:5c:49:ce:3a:61:53:8b:c5:08:f6:b2:
85:66:09:4b:5b:ea:01:30:ac:0d:35:25:be:9f:cf:dc:96:85:
91:a5:bd:ba:ef:de:7d:2a:db:be:5b:04:e3:d8:d5:34:65:27:
38:43:18:a9:b0:92:1d:4e:23:9b:d7:4a:2d:70:f9:05:44:84:
bd:b8:75:4f:95:9d:27:b4:d7:cb:ee:76:45:c6:2e:c8:31:43:
48:36:ba:6d:d6:1e:50:a9:30:55:4c:8e:8d:09:76:eb:b5:d7:
e7:df:95:4c:07:a4:33:9e:78:9b:30:3b:fa:0f:ea:8b:09:a0:
e5:41:09:d3:9c:1d:03:9e:c2:c3:50:24:63:e9:a1:bc:df:1e:
a7:09:b0:90:95:82:a8:8f:bb:93:ce:95:cf:a2:60:89:4c:58:
ed:14:18:77:a6:d0:3f:f0:98:6a:66:5c:3e:74:68:79:d9:64:
77:04:ae:45:1b:74:8a:0a:ad:2a:d4:e0:4c:70:8d:dd:63:12:
d0:5c:16:98
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAaEfb9oQmPlH/2IU5n3eVfFkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1OTA3ZjkwZDlmOWQ5MDJmY2YwNGJkMGI0NjE1MmMzODI3
YTdkNTAwHhcNMjYxMDA5MDY1MzA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MDdiMmQ5ZGMyMGI4MTQzNjliOTc2ZTAwOGVmMWNlOGZmZmE1ZWZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8mW0attAX/olflEB12sxXy9Rfh7o
a+k7bjfYul5mtCvBUrcUbOiiGZVR2ivvyo4AgMX9QtRYAOerv9EtTdi2fbDmSXnv
6lFqFbRTTGmCW+dD3w58vFjWj4rWw8QEKZZhKWhFxuQZtJiYRyGgrGk2nXxXlyO1
MarmXeqRdQjTLYnWkflSu6kUXYo7WesJlnS9uHxkx6g2AjP1Mbaq9OTbBSi52cyx
lxYa8FCV2cr0evyc9ZGa5AprJScT32nv01GcZgleL6IIEn1OPR/UblhG77vJUaYe
yesPebQHVV3GCSNnryiZRq0zw/ky4c/Wqq0Ihhl5Ugp/R9p5lF5foq0IjwIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFGB7LZ3CC4FDabl24AjvHOj/+l77MB8GA1UdIwQY
MBaAFCWQf5DZ+dkC/PBL0LRhUsOCen1QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSlpCX2tObjUyUUw4OEV2UXRHRlN3NEo2ZlZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9kZDFlYzctMzQ0Ni00NzA5LWI5M2Mt
MDg5Yzg5ZWY2M2M4LzEvWUhzdG5jSUxnVU5wdVhiZ0NPOGM2UF82WHZzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS9kZDFlYzctMzQ0Ni00NzA5LWI5M2MtMDg5Yzg5ZWY2M2M4
LzEvSlpCX2tObjUyUUw4OEV2UXRHRlN3NEo2ZlZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjASBAIAATAMAwQCwHaEAwQA
wqm3MBgEAgACMBIwEAMFByoTxIADBwAqE8SAAAYwDQYJKoZIhvcNAQELBQADggEB
AHEezg7MWgcuOwLkGjIUSakNynpXUrGuleRm+V8hK6wxDUpJVp2+10zZUq7ZOp2U
uGUN+x9orI84Z5aoVAFcSc46YVOLxQj2soVmCUtb6gEwrA01Jb6fz9yWhZGlvbrv
3n0q275bBOPY1TRlJzhDGKmwkh1OI5vXSi1w+QVEhL24dU+VnSe018vudkXGLsgx
Q0g2um3WHlCpMFVMjo0Jduu11+fflUwHpDOeeJswO/oP6osJoOVBCdOcHQOewsNQ
JGPpobzfHqcJsJCVgqiPu5POlc+iYIlMWO0UGHem0D/wmGpmXD50aHnZZHcErkUb
dIoKrSrU4Exwjd1jEtBcFpg=
-----END CERTIFICATE-----
Generated at Tue Oct 13 21:30:15 2026 by rpki-client