Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/79/c22c08-56a7-42d4-bea5-877dda192379/1/Jv6aM-T4E53okxsgSiKKVaAWuo8.roa
File: Jv6aM-T4E53okxsgSiKKVaAWuo8.roa (raw, json)
Hash identifier: 0kVE7VkGG3guJPgaF+wxm02gk/hco1CAwA0gCPvpIYY=
Subject key identifier: 26:FE:9A:33:E4:F8:13:9D:E8:93:1B:20:4A:22:8A:55:A0:16:BA:8F
Certificate issuer: /CN=8eaded0b83fa4e31ce0a0840eb429ba8a9f18e39
Certificate serial: 01A10FCE52C490EEC93491ED87A16954993D
Authority key identifier: 8E:AD:ED:0B:83:FA:4E:31:CE:0A:08:40:EB:42:9B:A8:A9:F1:8E:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jq3tC4P6TjHOCghA60KbqKnxjjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/c22c08-56a7-42d4-bea5-877dda192379/1/Jv6aM-T4E53okxsgSiKKVaAWuo8.roa
Signing time: Tue 06 Oct 2026 06:02:22 +0000
ROA not before: Tue 06 Oct 2026 06:02:22 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 394192
IP address blocks: 185.31.19.0/24 maxlen: 24
2a04:4e41:18::/48 maxlen: 48
2a04:4e41:1c::/48 maxlen: 48
2a04:4e41:24::/48 maxlen: 48
2a04:4e41:30::/48 maxlen: 48
2a04:4e41:34::/48 maxlen: 48
2a04:4e41:38::/48 maxlen: 48
2a04:4e41:3c::/48 maxlen: 48
2a04:4e41:40::/48 maxlen: 48
2a04:4e41:44::/48 maxlen: 48
2a04:4e41:48::/48 maxlen: 48
2a04:4e41:4c::/48 maxlen: 48
2a04:4e41:50::/48 maxlen: 48
2a04:4e41:58::/48 maxlen: 48
2a04:4e41:60::/48 maxlen: 48
2a04:4e41:64::/48 maxlen: 48
2a04:4e41:68::/48 maxlen: 48
2a04:4e41:6c::/48 maxlen: 48
2a04:4e41:70::/48 maxlen: 48
2a04:4e41:90::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/c22c08-56a7-42d4-bea5-877dda192379/1/jq3tC4P6TjHOCghA60KbqKnxjjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/c22c08-56a7-42d4-bea5-877dda192379/1/jq3tC4P6TjHOCghA60KbqKnxjjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jq3tC4P6TjHOCghA60KbqKnxjjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 14:43:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0f:ce:52:c4:90:ee:c9:34:91:ed:87:a1:69:54:99:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eaded0b83fa4e31ce0a0840eb429ba8a9f18e39
Validity
Not Before: Oct 6 06:02:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=26fe9a33e4f8139de8931b204a228a55a016ba8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:04:b5:ca:d0:a2:b9:4d:0e:28:84:93:df:4e:
1c:47:2c:dc:5e:d1:d1:27:a2:19:6c:bd:a3:aa:79:
0f:7a:28:45:92:bf:d9:24:aa:5b:4e:a0:26:02:2d:
ba:17:9a:72:03:d5:89:9b:c7:e4:cf:37:92:ec:8f:
ad:f4:c8:82:23:a1:96:e2:84:e6:65:ca:03:20:78:
1a:17:67:33:41:c1:f5:bd:2d:09:ff:25:60:f4:46:
96:9f:de:f4:77:19:ab:bc:a7:24:49:eb:ce:57:37:
d6:77:c5:19:00:65:26:82:2c:6d:05:b9:2f:db:f8:
5b:a6:1e:03:23:89:79:35:ab:e3:8b:21:50:0f:cb:
4e:b1:a1:54:7c:c9:c6:d9:91:09:f2:68:09:8f:d8:
37:b8:55:a8:f7:9e:ca:8b:70:84:12:83:2f:8b:3d:
24:a8:3d:e8:e1:88:03:c4:e3:e0:90:5d:cb:ac:81:
64:5c:10:23:80:e1:28:c4:97:92:c3:5b:fe:f0:53:
81:05:f6:4a:58:5d:d9:6f:c0:82:4d:5f:e7:24:be:
fe:ed:bc:0c:49:6b:93:ab:b1:c6:fc:bf:7b:eb:b7:
09:80:a0:7f:17:61:a9:8b:aa:3d:be:41:ad:88:f2:
0f:45:51:12:45:04:68:80:9d:8c:47:c9:28:0e:b9:
8c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:FE:9A:33:E4:F8:13:9D:E8:93:1B:20:4A:22:8A:55:A0:16:BA:8F
X509v3 Authority Key Identifier:
keyid:8E:AD:ED:0B:83:FA:4E:31:CE:0A:08:40:EB:42:9B:A8:A9:F1:8E:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jq3tC4P6TjHOCghA60KbqKnxjjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c22c08-56a7-42d4-bea5-877dda192379/1/Jv6aM-T4E53okxsgSiKKVaAWuo8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c22c08-56a7-42d4-bea5-877dda192379/1/jq3tC4P6TjHOCghA60KbqKnxjjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.31.19.0/24
IPv6:
2a04:4e41:18::/48
2a04:4e41:1c::/48
2a04:4e41:24::/48
2a04:4e41:30::/48
2a04:4e41:34::/48
2a04:4e41:38::/48
2a04:4e41:3c::/48
2a04:4e41:40::/48
2a04:4e41:44::/48
2a04:4e41:48::/48
2a04:4e41:4c::/48
2a04:4e41:50::/48
2a04:4e41:58::/48
2a04:4e41:60::/48
2a04:4e41:64::/48
2a04:4e41:68::/48
2a04:4e41:6c::/48
2a04:4e41:70::/48
2a04:4e41:90::/48
Signature Algorithm: sha256WithRSAEncryption
5a:2a:d3:10:b3:bf:ae:db:fd:4a:62:0a:a5:ac:49:12:8d:9b:
b5:4e:f1:f2:b5:a3:5e:46:e0:df:f0:c9:1f:01:16:f1:75:43:
25:9d:06:a6:49:a3:9a:21:ec:87:15:06:90:80:51:da:d4:0b:
78:51:8f:64:15:a8:c3:7a:b4:99:45:8d:72:03:df:75:e7:c4:
87:44:db:8c:ad:10:a7:7c:be:4a:7c:36:01:7f:5f:5e:2d:fd:
98:ce:4e:3f:fe:88:08:92:4b:96:c8:07:6a:41:b7:78:c4:4a:
02:64:0f:8a:25:6a:60:28:f5:bb:03:8f:d7:45:f9:19:a2:a3:
ee:f6:56:de:11:49:b7:b9:36:fe:50:11:b5:60:cb:62:6f:9d:
b4:25:89:10:f4:58:f9:82:53:fc:b8:92:5b:28:47:18:7d:35:
67:f3:26:5a:3b:06:1a:1c:e6:9b:fb:d1:6f:19:bb:00:c8:ed:
f1:71:78:1a:90:62:21:57:d6:41:6f:f7:55:86:17:3d:25:af:
1e:64:4a:a7:6b:f0:d0:ad:f0:5e:f0:32:47:eb:db:01:b6:27:
79:b8:35:46:1a:d7:31:d8:4f:a6:ba:ae:e6:af:f7:bd:35:01:
89:7f:40:dd:9b:35:b9:98:b3:0d:48:0d:f8:87:1d:e6:0f:e7:
99:27:03:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 00:13:21 2026 by rpki-client