Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/JzVOn48opN5OmQw_kWDCZlB03-8.roa
File: JzVOn48opN5OmQw_kWDCZlB03-8.roa (raw, json)
Hash identifier: WnteOYQuoH/SPZnd3lWEYH6qe+d3lLK1B3+/F/zOHBo=
Subject key identifier: 27:35:4E:9F:8F:28:A4:DE:4E:99:0C:3F:91:60:C2:66:50:74:DF:EF
Certificate issuer: /CN=f82554a856a422b061ae64c577630f91d408cd4a
Certificate serial: 019D5D3BAF54674E49D96B907FADCF0A57A4
Authority key identifier: F8:25:54:A8:56:A4:22:B0:61:AE:64:C5:77:63:0F:91:D4:08:CD:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-CVUqFakIrBhrmTFd2MPkdQIzUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/JzVOn48opN5OmQw_kWDCZlB03-8.roa
Signing time: Sun 05 Apr 2026 10:41:25 +0000
ROA not before: Sun 05 Apr 2026 10:41:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60630
IP address blocks: 89.234.141.0/24 maxlen: 24
2a00:5881:8100::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-CVUqFakIrBhrmTFd2MPkdQIzUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:5d:3b:af:54:67:4e:49:d9:6b:90:7f:ad:cf:0a:57:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f82554a856a422b061ae64c577630f91d408cd4a
Validity
Not Before: Apr 5 10:41:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=27354e9f8f28a4de4e990c3f9160c2665074dfef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e3:ac:c7:c1:cd:9e:52:60:f4:2f:67:cf:63:
85:60:27:db:01:e7:00:aa:f5:c1:73:40:9e:16:ab:
c9:0a:f8:b1:48:b7:ba:5b:a6:59:27:01:c4:b6:35:
7b:5a:03:10:1a:ea:37:20:2e:51:51:0f:d2:5c:02:
b6:5a:24:85:2d:cc:bf:8f:25:58:50:ba:5a:e4:c8:
d1:ec:b6:d0:45:74:b1:6c:54:5c:79:58:7d:b8:24:
b5:ed:65:79:fc:5b:e0:58:d0:2e:9c:25:bd:0f:08:
1d:1a:9a:03:b2:5a:bd:4b:15:82:51:eb:a7:97:c1:
68:2d:76:20:b9:95:d4:ca:8d:cc:6f:e4:cc:e6:28:
4e:a3:9e:39:3c:21:49:26:d8:97:f0:d6:8f:ba:e9:
35:4d:d8:f8:2a:dc:cb:c2:c6:7e:2c:d0:d4:24:07:
a3:16:49:ef:6f:a9:14:7e:b1:25:a5:ea:d9:ff:14:
60:b8:92:a1:4a:3f:91:63:43:b4:25:5c:a1:d9:23:
42:63:15:c0:50:1b:59:a6:10:5c:ca:66:fb:9f:a7:
7b:64:4b:d1:a8:e7:03:da:ee:34:99:77:2a:e3:ff:
f1:2b:54:22:e4:fe:a0:a1:d8:0f:6a:61:95:c4:63:
61:69:80:86:26:8f:ce:6f:88:c7:ff:63:94:4a:ed:
87:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:35:4E:9F:8F:28:A4:DE:4E:99:0C:3F:91:60:C2:66:50:74:DF:EF
X509v3 Authority Key Identifier:
keyid:F8:25:54:A8:56:A4:22:B0:61:AE:64:C5:77:63:0F:91:D4:08:CD:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-CVUqFakIrBhrmTFd2MPkdQIzUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/JzVOn48opN5OmQw_kWDCZlB03-8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.234.141.0/24
IPv6:
2a00:5881:8100::/40
Signature Algorithm: sha256WithRSAEncryption
53:aa:dd:18:6d:dd:f3:0a:c5:a8:31:9a:e5:bc:76:bb:7b:b1:
12:29:99:1e:f9:b5:0c:39:62:27:9f:47:e8:a3:c5:99:8f:1c:
c8:e3:14:b5:47:e3:a1:51:e1:d6:71:fa:28:8b:ef:bd:e0:56:
a8:1b:9c:38:45:cb:49:52:4c:b6:3d:6c:80:67:58:06:37:d1:
ff:8a:f8:70:cc:9a:dc:8c:59:83:5f:52:1a:2a:4c:29:e7:a4:
92:48:05:a7:78:02:0b:62:84:2a:56:62:a0:98:4b:88:22:14:
f4:ce:c6:1e:b2:d8:ce:94:10:43:0a:23:cf:b9:8b:21:58:18:
0e:51:ec:c8:a6:2b:7e:f5:7b:ee:d7:9f:46:3e:06:54:5d:b3:
b6:6b:cf:59:74:0a:dc:08:92:4b:29:3d:14:1a:41:ed:e6:c7:
76:8e:13:cb:4f:a2:72:2a:19:23:d0:a1:5f:bf:73:9c:86:3f:
cf:e6:4d:8d:51:1f:6d:0e:0f:84:21:c2:cd:ac:d7:ae:2a:89:
59:0b:f9:66:98:16:2e:b4:b8:91:03:01:16:b2:5e:e8:6a:30:
c0:b8:10:1b:2f:97:dc:2a:b2:68:2d:36:bc:53:e3:df:6d:5c:
10:3c:bd:7c:3f:de:6a:f8:24:68:eb:e0:b8:ee:1c:90:67:17:
cc:96:d1:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:11:57 2026 by rpki-client