Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/JUcvuyeTGukHCqTR6Mz7mT8UzrM.roa
File: JUcvuyeTGukHCqTR6Mz7mT8UzrM.roa (raw, json)
Hash identifier: ApgtiPp395Jbu4eMbjIE9qm3tPStuEmPFB0TljPswyE=
Subject key identifier: 25:47:2F:BB:27:93:1A:E9:07:0A:A4:D1:E8:CC:FB:99:3F:14:CE:B3
Certificate issuer: /CN=6f5e0230be799e44829c8720ca38347045494e20
Certificate serial: 019D95FEDAC8B52E1548AD287809CF19E1D7
Authority key identifier: 6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/JUcvuyeTGukHCqTR6Mz7mT8UzrM.roa
Signing time: Thu 16 Apr 2026 11:13:20 +0000
ROA not before: Thu 16 Apr 2026 11:13:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 26769
IP address blocks: 85.232.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:95:fe:da:c8:b5:2e:15:48:ad:28:78:09:cf:19:e1:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f5e0230be799e44829c8720ca38347045494e20
Validity
Not Before: Apr 16 11:13:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=25472fbb27931ae9070aa4d1e8ccfb993f14ceb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:3b:c8:54:d2:82:70:10:4b:ba:ef:9c:2a:a4:
43:c5:3b:d0:87:d1:57:43:a0:33:93:5b:2b:e9:85:
57:24:90:60:4f:cd:ae:4d:45:5b:bd:56:57:31:69:
ba:92:1a:61:0c:f0:b7:5d:c8:03:70:88:af:7c:9c:
3a:0f:55:0f:a3:9d:81:0d:85:a3:4a:a9:91:03:63:
44:3e:f6:31:19:1c:f2:41:28:a7:c6:48:20:a5:72:
91:fc:f2:33:77:96:54:3a:dc:d9:87:ed:38:01:2b:
8a:20:96:47:2b:28:74:0f:d9:aa:e9:14:5b:0d:f3:
d1:f5:6a:f7:76:54:56:b6:9b:ec:8a:58:9d:0e:65:
0a:91:c7:96:71:79:8f:33:7b:da:e1:e4:cb:47:99:
72:56:44:ee:95:46:0d:d3:5a:35:71:5a:22:30:12:
65:0b:b0:37:60:42:13:f0:2f:ea:cc:9f:f8:43:15:
47:f1:ed:c3:08:c3:47:c5:e1:39:7e:fe:cf:90:33:
5d:d6:9e:97:2e:1f:74:3f:30:e5:45:dc:ab:c6:6c:
a2:7d:7d:92:5e:50:da:a3:2e:2b:f6:ee:bc:30:01:
66:d6:3d:1b:6f:36:fe:e2:d2:4a:62:79:0c:13:97:
bb:31:46:2d:77:c6:68:4f:12:84:dd:89:63:ef:7f:
1d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:47:2F:BB:27:93:1A:E9:07:0A:A4:D1:E8:CC:FB:99:3F:14:CE:B3
X509v3 Authority Key Identifier:
keyid:6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/JUcvuyeTGukHCqTR6Mz7mT8UzrM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.232.183.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:b4:84:38:63:c9:56:9c:43:33:ed:8b:e6:da:f7:e0:7b:c6:
0a:60:9f:65:d8:84:eb:a9:8f:2d:0b:e2:39:2d:c8:72:fc:a0:
39:9b:97:4b:17:97:e6:6f:0c:4a:7e:8a:31:60:36:e8:7f:53:
da:ac:a4:02:26:97:98:ee:b3:eb:a7:f2:77:34:70:d7:44:63:
05:61:3a:8e:af:b4:82:f2:1c:fc:ac:65:2f:58:8a:3d:dc:36:
77:da:55:a6:fc:f5:a2:f7:c4:e1:4e:b4:44:33:ec:9f:f1:e3:
5a:fe:0d:32:37:65:90:6a:0d:32:e3:16:63:84:e5:a1:33:ae:
7d:7e:70:b0:2d:bc:19:29:5c:7f:88:96:cf:9c:de:ea:22:fe:
bc:33:08:23:9e:c9:7f:b4:0b:ad:1f:53:9b:b2:20:7e:cb:cf:
87:23:dd:79:6a:9e:03:7e:2e:d5:e2:ac:8f:55:50:36:cf:dd:
56:57:69:5c:8a:61:2e:86:38:70:1e:4d:36:a0:72:94:0d:3d:
e7:7f:4d:44:5f:23:c7:35:5b:2d:7f:b9:19:48:0f:33:1d:70:
d8:68:64:8a:7a:7e:ba:26:d4:7b:70:b5:bb:72:7a:82:3f:a2:
6c:ca:84:52:2e:a5:54:4c:02:a0:e4:4a:5b:9c:fa:10:1f:eb:
28:40:76:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:41:56 2026 by rpki-client