Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/Jy711VAoxenODzPGLw7G_OFLSfE.roa
File: Jy711VAoxenODzPGLw7G_OFLSfE.roa (raw, json)
Hash identifier: 3tYh87fzy5krYQPjB5twbzqIDDMDseYtCpQ7A06l34Y=
Subject key identifier: 27:2E:F5:D5:50:28:C5:E9:CE:0F:33:C6:2F:0E:C6:FC:E1:4B:49:F1
Certificate issuer: /CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2
Certificate serial: 01A1947D5CB425EEB98836C647A94DA6DA16
Authority key identifier: 22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/Jy711VAoxenODzPGLw7G_OFLSfE.roa
Signing time: Sun 01 Nov 2026 00:23:25 +0000
ROA not before: Sun 01 Nov 2026 00:23:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9009
IP address blocks: 91.219.17.0/24 maxlen: 24
91.219.18.0/23 maxlen: 23
91.232.182.0/24 maxlen: 24
91.232.184.0/24 maxlen: 24
91.232.185.0/24 maxlen: 24
91.233.192.0/24 maxlen: 24
91.242.48.0/23 maxlen: 23
109.166.36.0/22 maxlen: 24
151.248.68.0/23 maxlen: 24
195.54.54.0/24 maxlen: 24
195.54.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 03:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:94:7d:5c:b4:25:ee:b9:88:36:c6:47:a9:4d:a6:da:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2
Validity
Not Before: Nov 1 00:23:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=272ef5d55028c5e9ce0f33c62f0ec6fce14b49f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:77:19:d9:17:0f:f5:77:a2:18:45:b8:17:7c:
26:ae:16:4e:ee:6e:50:d7:5b:84:84:f0:45:39:85:
7a:14:fe:58:c0:a6:62:c6:de:87:82:66:f7:27:6e:
27:b7:ec:6a:3b:ed:56:1e:5a:3f:fa:6d:9f:c4:24:
ae:1f:d3:18:77:30:3b:cf:ac:dc:1d:71:fd:ec:5b:
de:14:1d:44:17:72:3e:fc:44:c4:e5:2a:fd:23:a1:
bd:08:3e:2e:4e:89:b5:88:c0:a5:77:c6:4d:14:b8:
79:75:c9:37:a5:09:a3:92:67:61:8c:87:4b:43:f6:
8b:09:59:ad:71:3a:95:4e:2c:33:76:de:b0:45:9e:
57:9d:88:9a:2c:1b:9b:89:a1:80:b7:a6:51:44:3a:
a3:b6:df:48:10:18:81:87:df:de:6e:b6:3f:c1:4b:
29:6a:ab:e3:3e:5a:a4:67:0f:3f:11:3c:13:81:9b:
e0:f9:bb:a7:64:aa:0a:93:3f:dd:95:4e:16:c1:65:
dd:92:cd:3f:69:b9:52:13:3a:07:54:df:99:18:66:
82:21:41:a7:41:ce:78:94:2c:28:e1:2d:dd:70:95:
3f:7e:74:22:f3:43:84:38:11:bc:1c:44:75:8b:37:
af:1c:b1:f5:e6:e3:b8:f7:f2:ba:e0:e8:e8:25:db:
1b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:2E:F5:D5:50:28:C5:E9:CE:0F:33:C6:2F:0E:C6:FC:E1:4B:49:F1
X509v3 Authority Key Identifier:
keyid:22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/Jy711VAoxenODzPGLw7G_OFLSfE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.219.17.0-91.219.19.255
91.232.182.0/24
91.232.184.0/23
91.233.192.0/24
91.242.48.0/23
109.166.36.0/22
151.248.68.0/23
195.54.54.0/23
Signature Algorithm: sha256WithRSAEncryption
43:b0:72:bf:61:8f:96:d7:71:20:53:7a:6d:36:a7:b2:72:94:
88:bf:6e:0a:c3:3d:32:1a:dc:3a:de:f0:a3:52:80:52:31:31:
14:23:92:86:33:db:08:df:e4:f4:b0:d9:cb:8a:14:89:01:e1:
13:7f:fe:b5:fe:df:d5:b2:29:4d:b1:b0:1d:39:10:1d:0b:eb:
70:a7:a1:ad:aa:00:4e:c4:bb:35:54:4e:9d:2b:c8:34:20:f6:
a5:05:14:05:98:b5:9a:64:7b:95:5e:0b:a5:31:1c:6e:1e:92:
3c:3f:51:cd:93:00:1a:6d:c2:e3:99:f9:ea:cf:e8:c4:bc:40:
33:c1:7d:fe:6e:ab:8f:8f:a1:63:16:e7:c4:0e:a9:ee:c2:ed:
fd:7f:45:0b:98:a1:8f:2a:ee:21:8f:80:69:73:4a:30:37:dd:
d9:8a:a7:90:71:bb:3a:ea:b7:11:5d:31:c3:8e:11:6d:24:f4:
f9:42:e3:28:b8:18:59:e6:90:21:e6:25:24:8f:cf:77:f0:b1:
ca:89:58:ae:4e:6b:83:a4:20:44:91:8b:8e:23:51:7b:7d:87:
2f:ee:2b:05:9e:a7:6c:36:57:d9:ed:b5:35:9f:a8:6b:42:45:
83:d2:a8:c0:fd:5b:86:23:2b:0d:10:99:e7:98:b7:40:3d:4b:
4c:23:cb:93
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgISAaGUfVy0Je65iDbGR6lNptoWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyZjJjMmU3YmMxZGE1NGQ5MTljYTViNTk0MWQzNzg4OTJi
MmNjYjIwHhcNMjYxMTAxMDAyMzI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNzJlZjVkNTUwMjhjNWU5Y2UwZjMzYzYyZjBlYzZmY2UxNGI0OWYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3XcZ2RcP9XeiGEW4F3wmrhZO7m5Q
11uEhPBFOYV6FP5YwKZixt6Hgmb3J24nt+xqO+1WHlo/+m2fxCSuH9MYdzA7z6zc
HXH97FveFB1EF3I+/ETE5Sr9I6G9CD4uTom1iMCld8ZNFLh5dck3pQmjkmdhjIdL
Q/aLCVmtcTqVTiwzdt6wRZ5XnYiaLBubiaGAt6ZRRDqjtt9IEBiBh9/ebrY/wUsp
aqvjPlqkZw8/ETwTgZvg+bunZKoKkz/dlU4WwWXdks0/ablSEzoHVN+ZGGaCIUGn
Qc54lCwo4S3dcJU/fnQi80OEOBG8HER1izevHLH15uO49/K64OjoJdsbDQIDAQAB
o4ICOzCCAjcwHQYDVR0OBBYEFCcu9dVQKMXpzg8zxi8OxvzhS0nxMB8GA1UdIwQY
MBaAFCLywue8HaVNkZyltZQdN4iSssyyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXZMQzU3d2RwVTJSbktXMWxCMDNpSkt5ekxJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi82MDI1MzAtNmQyMi00NmYxLThlMDUt
MDJkZWY2ZTg0YzkxLzEvSnk3MTFWQW94ZW5PRHpQR0x3N0dfT0ZMU2ZFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi82MDI1MzAtNmQyMi00NmYxLThlMDUtMDJkZWY2ZTg0Yzkx
LzEvSXZMQzU3d2RwVTJSbktXMWxCMDNpSkt5ekxJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFEGCCsGAQUFBwEHAQH/BEIwQDA+BAIAATA4MAwDBABb2xED
BAJb2xADBABb6LYDBAFb6LgDBABb6cADBAFb8jADBAJtpiQDBAGX+EQDBAHDNjYw
DQYJKoZIhvcNAQELBQADggEBAEOwcr9hj5bXcSBTem02p7JylIi/bgrDPTIa3Dre
8KNSgFIxMRQjkoYz2wjf5PSw2cuKFIkB4RN//rX+39WyKU2xsB05EB0L63Cnoa2q
AE7EuzVUTp0ryDQg9qUFFAWYtZpke5VeC6UxHG4ekjw/Uc2TABptwuOZ+erP6MS8
QDPBff5uq4+PoWMW58QOqe7C7f1/RQuYoY8q7iGPgGlzSjA33dmKp5BxuzrqtxFd
McOOEW0k9PlC4yi4GFnmkCHmJSSPz3fwscqJWK5Oa4OkIESRi44jUXt9hy/uKwWe
p2w2V9nttTWfqGtCRYPSqMD9W4YjKw0QmeeYt0A9S0wjy5M=
-----END CERTIFICATE-----
Generated at Thu Nov 5 09:39:10 2026 by rpki-client