Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/JUfMxdmWF4Ec9BRe8Y6riD7m0eI.roa
File: JUfMxdmWF4Ec9BRe8Y6riD7m0eI.roa (raw, json)
Hash identifier: fjieYCQX4XbC0ymd7c07Bu1eRJhZnHhaknjWpiLljKE=
Subject key identifier: 25:47:CC:C5:D9:96:17:81:1C:F4:14:5E:F1:8E:AB:88:3E:E6:D1:E2
Certificate issuer: /CN=172537601a31697404922d957e74450f5a9cbe73
Certificate serial: 019C75B3A5934518F5AB113A15F2E7F5D42B
Authority key identifier: 17:25:37:60:1A:31:69:74:04:92:2D:95:7E:74:45:0F:5A:9C:BE:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FyU3YBoxaXQEki2VfnRFD1qcvnM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/JUfMxdmWF4Ec9BRe8Y6riD7m0eI.roa
Signing time: Thu 19 Feb 2026 11:40:33 +0000
ROA not before: Thu 19 Feb 2026 11:40:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 81.17.160.0/21 maxlen: 24
109.238.160.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/FyU3YBoxaXQEki2VfnRFD1qcvnM.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/FyU3YBoxaXQEki2VfnRFD1qcvnM.mft
rsync://rpki.ripe.net/repository/DEFAULT/FyU3YBoxaXQEki2VfnRFD1qcvnM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:75:b3:a5:93:45:18:f5:ab:11:3a:15:f2:e7:f5:d4:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=172537601a31697404922d957e74450f5a9cbe73
Validity
Not Before: Feb 19 11:40:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2547ccc5d99617811cf4145ef18eab883ee6d1e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8e:2f:5c:55:de:77:a1:b4:f3:5b:cd:75:c3:
c3:65:39:af:d3:bf:5f:d7:2c:f1:00:70:6d:45:22:
da:2e:c9:d9:88:3c:d0:e5:34:b2:b4:79:9e:3e:1e:
6b:55:b6:11:ac:53:0e:9b:b2:9d:5f:e3:b3:07:51:
be:7f:18:32:54:26:61:67:11:8c:ae:66:28:9a:07:
2f:de:c6:85:6f:95:64:46:98:92:9f:54:2f:c0:72:
88:38:3c:c5:ea:c0:85:7a:72:a5:c8:e3:5c:2c:1b:
81:92:8e:d3:e7:50:d7:ae:34:1a:4c:01:39:6c:6f:
4e:a7:7c:fc:d5:b8:a7:eb:06:65:d8:90:8f:8b:98:
2d:d7:c9:f7:60:a3:2e:f1:63:ee:80:23:34:f7:97:
18:0e:ed:31:1d:d2:50:0f:bf:51:0c:f9:dd:57:6a:
14:02:e9:6a:e1:1b:b8:c9:0b:1d:31:23:07:3f:de:
69:71:47:6c:26:65:16:b5:d8:73:15:04:6a:9e:8f:
40:5d:b3:18:64:05:22:af:50:f3:e8:ea:4c:9f:34:
39:4c:23:95:8d:e2:a0:3b:36:fa:38:88:87:b8:1e:
30:b4:aa:9d:ec:53:ff:07:97:c4:bd:48:f0:94:5b:
8e:34:c1:da:f6:e6:56:e6:35:57:d9:74:50:2f:c0:
90:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:47:CC:C5:D9:96:17:81:1C:F4:14:5E:F1:8E:AB:88:3E:E6:D1:E2
X509v3 Authority Key Identifier:
keyid:17:25:37:60:1A:31:69:74:04:92:2D:95:7E:74:45:0F:5A:9C:BE:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FyU3YBoxaXQEki2VfnRFD1qcvnM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/JUfMxdmWF4Ec9BRe8Y6riD7m0eI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/FyU3YBoxaXQEki2VfnRFD1qcvnM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.17.160.0/21
109.238.160.0/21
Signature Algorithm: sha256WithRSAEncryption
0b:17:25:fa:f3:9f:f3:2f:04:b8:f2:f9:21:59:6c:96:d8:9e:
04:28:85:47:ea:c6:eb:15:cf:10:c3:c4:91:08:0d:d1:ad:ed:
23:85:6c:ae:33:f4:ab:23:c3:56:ce:e5:00:8c:a7:f3:25:78:
26:1e:7c:22:f0:2d:d8:9d:83:df:4f:4a:d7:7f:28:72:fc:cb:
cd:de:b1:a6:7a:cc:23:1e:16:0f:18:68:ff:4e:ee:86:cf:f0:
88:36:c6:e7:57:77:fe:d8:28:47:10:e6:ed:fe:83:d2:19:d7:
80:e9:14:1e:91:bf:32:9d:51:e0:d8:82:09:7e:e8:a4:da:7f:
ca:a2:5c:1c:52:a7:18:23:c1:6c:3d:76:2a:d8:67:4b:e0:54:
af:30:be:32:b6:63:4c:46:f2:1e:da:7a:83:84:16:b6:e4:52:
99:27:5e:79:31:07:0d:d6:d3:41:2d:ae:97:bd:4a:93:37:33:
cf:f1:89:cb:6e:e8:31:69:09:ed:bb:4a:59:98:96:04:2c:46:
be:fb:57:96:79:1f:79:c3:91:ed:37:d5:f8:ed:fc:8f:88:42:
5a:80:d9:1b:e8:aa:82:c2:f5:8e:fd:a8:4f:b7:f7:cc:87:67:
5e:65:cf:ba:ff:9d:52:ac:38:81:c9:71:4b:0d:1a:e2:ad:51:
43:59:86:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:43:38 2026 by rpki-client