Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9c/37a93b-87b5-4995-9e8c-6635debc395c/1/dJnM4Aji8F9k9x7fwqc1WDmTCQY.roa
File: dJnM4Aji8F9k9x7fwqc1WDmTCQY.roa (raw, json)
Hash identifier: +s4+0GBPzri+fw8PFD10DrB6N0Bg/rzpv7QNIxt0TBU=
Subject key identifier: 74:99:CC:E0:08:E2:F0:5F:64:F7:1E:DF:C2:A7:35:58:39:93:09:06
Certificate issuer: /CN=617252ebbb33484adcec7405adea4de08a0afb04
Certificate serial: 019F474701CE129776E4457C4237714FE0DF
Authority key identifier: 61:72:52:EB:BB:33:48:4A:DC:EC:74:05:AD:EA:4D:E0:8A:0A:FB:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YXJS67szSErc7HQFrepN4IoK-wQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/37a93b-87b5-4995-9e8c-6635debc395c/1/dJnM4Aji8F9k9x7fwqc1WDmTCQY.roa
Signing time: Thu 09 Jul 2026 14:27:43 +0000
ROA not before: Thu 09 Jul 2026 14:27:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34420
IP address blocks: 195.149.119.0/24 maxlen: 24
2a0b:8bc7::/32 maxlen: 32
2a0b:8bc7:1::/48 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/37a93b-87b5-4995-9e8c-6635debc395c/1/YXJS67szSErc7HQFrepN4IoK-wQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/37a93b-87b5-4995-9e8c-6635debc395c/1/YXJS67szSErc7HQFrepN4IoK-wQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/YXJS67szSErc7HQFrepN4IoK-wQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:47:47:01:ce:12:97:76:e4:45:7c:42:37:71:4f:e0:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=617252ebbb33484adcec7405adea4de08a0afb04
Validity
Not Before: Jul 9 14:27:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7499cce008e2f05f64f71edfc2a7355839930906
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:35:4d:29:88:4d:72:78:dc:e4:b3:15:13:5d:
69:ef:ab:ca:3b:7b:7f:8f:bf:1d:7d:54:6a:3d:7f:
3a:79:6a:cf:6f:5e:8e:2d:ea:68:1d:38:2b:c7:26:
df:20:fa:9c:a8:8e:cb:11:ab:66:90:47:eb:5e:50:
c3:22:4b:c1:b3:87:4a:c8:2a:04:d4:a7:f7:e4:8a:
8c:78:03:23:e8:1d:5e:73:9b:59:7a:16:98:c2:ec:
d6:f6:08:84:88:5f:94:19:48:7b:f5:a3:01:81:38:
90:03:67:ec:18:2e:96:d4:df:f5:c6:0e:f5:d8:e2:
d5:1a:34:58:53:cc:d8:c3:56:91:25:1e:cc:4d:56:
82:eb:9f:fb:0b:ee:f7:c3:86:fc:f4:93:4e:b7:dc:
41:cd:d9:c3:b8:ed:37:4f:96:c0:b8:15:92:aa:d6:
3a:3f:01:28:e5:3e:9c:37:2f:1f:90:13:0d:2a:c8:
96:f9:7e:d7:38:62:79:cd:f2:8d:60:5b:83:a8:0f:
0b:f0:57:56:bd:7d:a6:7d:2d:1a:39:22:88:8c:f3:
5b:f1:b1:43:45:a3:dc:69:a3:61:c9:08:db:28:05:
36:b4:5a:85:8b:ac:f5:fc:d5:63:ae:7a:21:23:1b:
77:d5:50:7c:81:57:0a:47:26:ce:b3:2e:03:a1:93:
31:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:99:CC:E0:08:E2:F0:5F:64:F7:1E:DF:C2:A7:35:58:39:93:09:06
X509v3 Authority Key Identifier:
keyid:61:72:52:EB:BB:33:48:4A:DC:EC:74:05:AD:EA:4D:E0:8A:0A:FB:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YXJS67szSErc7HQFrepN4IoK-wQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/37a93b-87b5-4995-9e8c-6635debc395c/1/dJnM4Aji8F9k9x7fwqc1WDmTCQY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/37a93b-87b5-4995-9e8c-6635debc395c/1/YXJS67szSErc7HQFrepN4IoK-wQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.149.119.0/24
IPv6:
2a0b:8bc7::/32
Signature Algorithm: sha256WithRSAEncryption
01:dc:67:fb:81:40:70:27:72:da:47:3e:eb:c0:9d:82:31:61:
f6:e1:29:bd:0f:11:15:10:cc:eb:02:cc:54:6d:60:fb:e6:19:
11:78:c4:9e:de:56:c2:5d:13:c3:dc:c2:17:1e:40:5f:00:6b:
14:cd:47:b6:b8:3b:fc:5c:03:73:6b:17:91:63:fd:27:cc:40:
6b:e3:b6:86:04:50:71:e6:9b:38:d3:6b:59:93:d3:fd:8c:63:
aa:d3:73:11:53:e6:d9:d2:4f:06:67:d6:f9:92:00:6d:46:41:
f2:ae:56:03:45:0c:37:85:1a:ca:73:71:98:06:d9:4f:6c:7e:
5a:77:14:ed:fb:65:8a:41:c7:23:15:5a:fd:c5:a4:e3:7b:61:
12:db:87:09:4e:08:52:9f:12:87:59:3a:e2:19:93:f3:5f:b3:
2d:de:2c:a4:fb:21:f9:e9:d9:a1:d0:01:3f:11:b9:72:0b:28:
ef:7b:b0:7b:01:2a:7e:0b:41:30:29:76:6b:cb:49:7c:02:db:
67:36:de:ec:e8:93:29:e2:26:ba:ac:89:0d:13:5c:dc:b7:3a:
4a:91:d0:7d:86:f5:0f:e3:2c:18:a8:3e:79:50:ab:dd:a8:4a:
04:27:97:53:9b:12:f2:71:9f:dd:da:c5:eb:78:ab:29:f3:42:
5d:be:ab:98
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZ9HRwHOEpd25EV8QjdxT+DfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxNzI1MmViYmIzMzQ4NGFkY2VjNzQwNWFkZWE0ZGUwOGEw
YWZiMDQwHhcNMjYwNzA5MTQyNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NDk5Y2NlMDA4ZTJmMDVmNjRmNzFlZGZjMmE3MzU1ODM5OTMwOTA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTVNKYhNcnjc5LMVE11p76vKO3t/
j78dfVRqPX86eWrPb16OLepoHTgrxybfIPqcqI7LEatmkEfrXlDDIkvBs4dKyCoE
1Kf35IqMeAMj6B1ec5tZehaYwuzW9giEiF+UGUh79aMBgTiQA2fsGC6W1N/1xg71
2OLVGjRYU8zYw1aRJR7MTVaC65/7C+73w4b89JNOt9xBzdnDuO03T5bAuBWSqtY6
PwEo5T6cNy8fkBMNKsiW+X7XOGJ5zfKNYFuDqA8L8FdWvX2mfS0aOSKIjPNb8bFD
RaPcaaNhyQjbKAU2tFqFi6z1/NVjrnohIxt31VB8gVcKRybOsy4DoZMxQwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFHSZzOAI4vBfZPce38KnNVg5kwkGMB8GA1UdIwQY
MBaAFGFyUuu7M0hK3Ox0Ba3qTeCKCvsEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVhKUzY3c3pTRXJjN0hRRnJlcE40SW9LLXdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8zN2E5M2ItODdiNS00OTk1LTllOGMt
NjYzNWRlYmMzOTVjLzEvZEpuTTRBamk4RjlrOXg3ZndxYzFXRG1UQ1FZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy8zN2E5M2ItODdiNS00OTk1LTllOGMtNjYzNWRlYmMzOTVj
LzEvWVhKUzY3c3pTRXJjN0hRRnJlcE40SW9LLXdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAw5V3MA0E
AgACMAcDBQAqC4vHMA0GCSqGSIb3DQEBCwUAA4IBAQAB3Gf7gUBwJ3LaRz7rwJ2C
MWH24Sm9DxEVEMzrAsxUbWD75hkReMSe3lbCXRPD3MIXHkBfAGsUzUe2uDv8XANz
axeRY/0nzEBr47aGBFBx5ps402tZk9P9jGOq03MRU+bZ0k8GZ9b5kgBtRkHyrlYD
RQw3hRrKc3GYBtlPbH5adxTt+2WKQccjFVr9xaTje2ES24cJTghSnxKHWTriGZPz
X7Mt3iyk+yH56dmh0AE/EblyCyjve7B7ASp+C0EwKXZry0l8AttnNt7s6JMp4ia6
rIkNE1zctzpKkdB9hvUP4ywYqD55UKvdqEoEJ5dTmxLycZ/d2sXreKsp80JdvquY
-----END CERTIFICATE-----
Generated at Fri Sep 25 08:57:53 2026 by rpki-client