Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/3b9a48-8b63-4d3b-a3a9-67a540e297f0/1/JP7O65gp7zX3tDUG-U1DvEtjCFA.roa
File: JP7O65gp7zX3tDUG-U1DvEtjCFA.roa (raw, json)
Hash identifier: 4wb9GuGN7HSRqQwmPjSk8wSV9Gc7TW0TyvFnGjiWA5g=
Subject key identifier: 24:FE:CE:EB:98:29:EF:35:F7:B4:35:06:F9:4D:43:BC:4B:63:08:50
Certificate issuer: /CN=dc05970e650c2aaf1ab6a3a33a83732466a1512e
Certificate serial: 01A06223AD782EAFFE7A5ED81D7F27CD82C1
Authority key identifier: DC:05:97:0E:65:0C:2A:AF:1A:B6:A3:A3:3A:83:73:24:66:A1:51:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AWXDmUMKq8atqOjOoNzJGahUS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/3b9a48-8b63-4d3b-a3a9-67a540e297f0/1/JP7O65gp7zX3tDUG-U1DvEtjCFA.roa
Signing time: Wed 02 Sep 2026 12:41:40 +0000
ROA not before: Wed 02 Sep 2026 12:41:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31317
IP address blocks: 5.154.171.0/24 maxlen: 32
31.220.112.0/21 maxlen: 32
37.251.224.0/21 maxlen: 32
37.251.232.0/21 maxlen: 32
45.119.124.0/22 maxlen: 32
80.224.236.0/23 maxlen: 32
185.95.112.0/22 maxlen: 32
185.114.140.0/22 maxlen: 32
185.156.28.0/22 maxlen: 32
185.178.56.0/22 maxlen: 32
195.192.192.0/21 maxlen: 32
195.192.200.0/21 maxlen: 32
2a05:fb80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/3b9a48-8b63-4d3b-a3a9-67a540e297f0/1/3AWXDmUMKq8atqOjOoNzJGahUS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/3b9a48-8b63-4d3b-a3a9-67a540e297f0/1/3AWXDmUMKq8atqOjOoNzJGahUS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3AWXDmUMKq8atqOjOoNzJGahUS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:62:23:ad:78:2e:af:fe:7a:5e:d8:1d:7f:27:cd:82:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc05970e650c2aaf1ab6a3a33a83732466a1512e
Validity
Not Before: Sep 2 12:41:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=24feceeb9829ef35f7b43506f94d43bc4b630850
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f7:ea:5b:21:20:54:36:f4:8e:7e:41:d7:f3:
e5:c0:04:b1:61:84:fe:47:22:0b:52:1d:aa:66:c6:
f3:7f:c6:11:89:fd:7a:ce:78:70:18:c5:0a:5b:68:
9b:2a:42:81:91:1d:4e:7a:b1:55:19:ae:6c:27:b9:
36:7b:6d:67:f0:cf:62:16:79:97:4b:5d:44:42:48:
5f:16:fc:d9:e1:54:64:15:5c:b9:ba:54:bc:d0:aa:
69:6b:02:09:67:02:54:a4:9f:26:f2:07:f0:6b:f0:
e0:e1:36:e1:50:5c:bc:e9:7e:4d:bf:e5:55:81:86:
8d:1c:71:bb:5a:a3:b5:7d:ef:f0:4d:20:50:55:ae:
9d:11:a5:f1:6f:2e:6b:74:f4:eb:61:1f:28:8d:bf:
a7:f1:76:6a:89:3c:bc:3a:f1:f7:85:1a:d6:6e:94:
60:a1:c9:6d:3b:55:ae:e5:b5:fc:f9:33:4e:ad:bc:
d2:ba:30:f1:6e:f5:fe:71:60:4e:cc:a2:81:0a:5a:
b1:30:84:e1:0c:06:f3:29:4a:f0:86:d4:5d:86:85:
6e:57:1a:6a:1a:31:cc:95:fd:cc:27:31:0c:84:88:
d3:3c:b0:8f:d3:39:67:d0:56:a3:af:f8:2e:92:cd:
c5:e8:5b:85:a5:09:d3:09:d7:10:f9:40:bf:5d:b3:
b1:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:FE:CE:EB:98:29:EF:35:F7:B4:35:06:F9:4D:43:BC:4B:63:08:50
X509v3 Authority Key Identifier:
keyid:DC:05:97:0E:65:0C:2A:AF:1A:B6:A3:A3:3A:83:73:24:66:A1:51:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AWXDmUMKq8atqOjOoNzJGahUS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3b9a48-8b63-4d3b-a3a9-67a540e297f0/1/JP7O65gp7zX3tDUG-U1DvEtjCFA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3b9a48-8b63-4d3b-a3a9-67a540e297f0/1/3AWXDmUMKq8atqOjOoNzJGahUS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.154.171.0/24
31.220.112.0/21
37.251.224.0/20
45.119.124.0/22
80.224.236.0/23
185.95.112.0/22
185.114.140.0/22
185.156.28.0/22
185.178.56.0/22
195.192.192.0/20
IPv6:
2a05:fb80::/29
Signature Algorithm: sha256WithRSAEncryption
7e:d6:c1:c5:ac:12:ae:e8:6e:77:3f:dd:c0:6a:4f:85:4b:b9:
af:85:4b:a2:8d:10:16:7d:4f:56:9b:09:10:7b:69:50:ff:f7:
ec:f6:7a:d5:10:c7:d1:00:6a:71:67:1b:bf:92:fa:33:39:4b:
52:98:04:38:7d:1b:5b:5c:7f:ff:73:3f:25:23:a5:75:00:71:
b1:ec:93:5f:60:71:88:13:0a:13:d1:99:06:d5:3e:a0:9c:f3:
c4:ef:ec:93:48:7d:ae:13:74:e4:d7:d8:59:03:bd:17:a5:4e:
08:22:97:d2:65:a2:3f:14:e8:1b:52:ac:03:0a:5d:28:9d:01:
09:85:36:01:ba:aa:ed:af:d8:63:49:6d:bf:46:26:89:8e:cf:
8d:7a:75:cf:c5:e8:52:64:a7:9b:3d:45:b0:69:fb:bf:f5:76:
4c:e2:1f:8f:16:c5:ee:4b:1f:7e:35:c1:ca:b4:96:9d:94:ff:
f6:b2:6e:34:5b:b0:d0:b9:9b:c8:05:7a:b5:42:89:b9:51:8c:
23:46:db:cc:61:a3:4b:4b:db:9b:c9:f0:e3:3d:a2:c9:36:13:
89:4b:47:b4:fb:a0:1f:48:74:75:03:a6:83:d1:af:b0:7e:e2:
36:0c:92:37:7b:83:2b:ff:67:2c:a4:47:b0:5c:e3:94:52:f1:
61:e1:7f:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:02:22 2026 by rpki-client