Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/85b169-8dad-4b16-baba-0f09b16fdaac/1/JJ3Jrlo4EfsF8fxfWN1mWDQydjo.roa
File: JJ3Jrlo4EfsF8fxfWN1mWDQydjo.roa (raw, json)
Hash identifier: hVX8HYf1U+V3FnobfFS2BDs1NBWEvAMPu9hWuZ6QxQc=
Subject key identifier: 24:9D:C9:AE:5A:38:11:FB:05:F1:FC:5F:58:DD:66:58:34:32:76:3A
Certificate issuer: /CN=28c5aef98f2194b4b37f2585d2b321d2cd051b6a
Certificate serial: 01A06D0FB2DE53518A1622765B5E74273580
Authority key identifier: 28:C5:AE:F9:8F:21:94:B4:B3:7F:25:85:D2:B3:21:D2:CD:05:1B:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KMWu-Y8hlLSzfyWF0rMh0s0FG2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/85b169-8dad-4b16-baba-0f09b16fdaac/1/JJ3Jrlo4EfsF8fxfWN1mWDQydjo.roa
Signing time: Fri 04 Sep 2026 15:35:40 +0000
ROA not before: Fri 04 Sep 2026 15:35:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60781
IP address blocks: 185.38.184.0/24 maxlen: 24
185.38.185.0/24 maxlen: 24
185.38.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/85b169-8dad-4b16-baba-0f09b16fdaac/1/KMWu-Y8hlLSzfyWF0rMh0s0FG2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/85b169-8dad-4b16-baba-0f09b16fdaac/1/KMWu-Y8hlLSzfyWF0rMh0s0FG2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/KMWu-Y8hlLSzfyWF0rMh0s0FG2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 03:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6d:0f:b2:de:53:51:8a:16:22:76:5b:5e:74:27:35:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28c5aef98f2194b4b37f2585d2b321d2cd051b6a
Validity
Not Before: Sep 4 15:35:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=249dc9ae5a3811fb05f1fc5f58dd66583432763a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:af:9b:ce:e5:a3:e2:dc:f9:2e:d8:85:79:e2:
52:19:ef:a8:55:39:83:28:75:b5:65:ab:dc:10:b3:
ce:53:76:cc:bc:22:b6:18:4b:ca:0f:6d:9e:fc:7e:
c0:49:84:25:d7:18:54:b5:26:2a:84:51:d6:1e:fc:
a5:57:ec:41:0c:11:3f:ce:ff:37:8a:b9:3d:d7:bc:
36:ac:31:91:14:2e:5c:4e:57:33:66:e8:7b:df:9f:
03:45:43:e7:9b:47:ac:10:34:83:d3:a1:80:5e:47:
8a:a7:1b:7f:ed:ba:e1:e7:03:e1:32:26:35:1f:7d:
0c:00:7f:37:38:92:28:df:7d:1b:df:08:39:dd:2b:
45:26:c6:15:9d:cb:ab:38:ef:0b:a0:64:9a:83:83:
2b:36:55:33:a6:ef:ed:c6:25:0a:ff:9b:28:01:4f:
73:18:ad:d5:f4:72:00:92:6e:7d:c7:68:87:14:46:
fc:57:0a:53:a3:b7:9d:84:0a:00:9b:07:f3:b4:f9:
99:b4:77:47:43:6a:71:7e:d3:a5:86:35:44:33:2f:
b1:2b:f5:4f:2a:87:77:79:3b:2f:e2:00:a7:7e:1d:
f9:76:61:1f:d5:40:7a:ad:30:65:af:4c:02:66:d4:
e2:49:05:64:4e:69:a9:6a:7a:ce:04:f6:e2:23:af:
88:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:9D:C9:AE:5A:38:11:FB:05:F1:FC:5F:58:DD:66:58:34:32:76:3A
X509v3 Authority Key Identifier:
keyid:28:C5:AE:F9:8F:21:94:B4:B3:7F:25:85:D2:B3:21:D2:CD:05:1B:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KMWu-Y8hlLSzfyWF0rMh0s0FG2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/85b169-8dad-4b16-baba-0f09b16fdaac/1/JJ3Jrlo4EfsF8fxfWN1mWDQydjo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/85b169-8dad-4b16-baba-0f09b16fdaac/1/KMWu-Y8hlLSzfyWF0rMh0s0FG2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.38.184.0/23
185.38.187.0/24
Signature Algorithm: sha256WithRSAEncryption
19:b2:3c:68:4c:5c:46:a3:0d:da:c3:63:f1:ee:99:7a:2b:79:
c0:ff:57:b9:a8:9e:0f:12:10:5b:55:f2:e5:07:50:76:f7:21:
76:fb:da:dc:ae:ab:8d:df:a9:d7:15:7d:48:8f:ba:f8:81:61:
b5:36:aa:ba:af:3c:60:aa:43:69:8f:ff:cc:c6:99:c6:ab:3d:
79:9f:a3:1f:33:34:a2:f8:58:6a:b8:56:54:a9:62:c3:2b:e3:
ee:1b:fa:4a:fb:6d:38:f9:8c:d7:47:77:f6:2a:86:b0:eb:00:
67:97:7c:7a:31:44:a0:44:db:da:e8:52:e7:da:8d:f2:90:0f:
9b:a4:e3:5a:ab:29:7c:4f:35:0e:48:cd:b4:18:12:78:16:0e:
ff:14:c9:0d:86:16:b3:29:28:4a:3a:b8:a7:61:6a:31:b6:32:
95:6d:42:f0:54:d7:2f:67:29:bc:73:ba:5d:8c:0b:75:d3:33:
f8:ec:cb:89:02:b3:b8:9b:9a:0b:dd:13:02:71:dc:d2:b6:46:
f2:4c:16:08:a6:b8:65:ee:da:0f:c7:be:e8:6f:22:b0:38:d5:
be:8e:40:b4:a7:51:96:bd:95:16:03:49:87:ab:1a:68:0f:2e:
0a:10:81:9b:85:27:b4:88:01:70:fc:25:7d:8c:e8:af:8b:60:
59:fe:8a:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:17:50 2026 by rpki-client