Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/jApwspNrYmvHSczWoxpSc1FCf5Y.roa
File: jApwspNrYmvHSczWoxpSc1FCf5Y.roa (raw, json)
Hash identifier: lPAYA3qVHdsWwR+TkawAou907puKMaA0tiGtCTfZCxw=
Subject key identifier: 8C:0A:70:B2:93:6B:62:6B:C7:49:CC:D6:A3:1A:52:73:51:42:7F:96
Certificate issuer: /CN=22d54df89b8fd921dada3f0daa29efff5cce0a79
Certificate serial: 019D4E92F0F1466D35F0C355BD5F3FAFFA10
Authority key identifier: 22:D5:4D:F8:9B:8F:D9:21:DA:DA:3F:0D:AA:29:EF:FF:5C:CE:0A:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ItVN-JuP2SHa2j8Nqinv_1zOCnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/jApwspNrYmvHSczWoxpSc1FCf5Y.roa
Signing time: Thu 02 Apr 2026 14:22:25 +0000
ROA not before: Thu 02 Apr 2026 14:22:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205219
IP address blocks: 188.65.82.0/24 maxlen: 24
188.65.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ItVN-JuP2SHa2j8Nqinv_1zOCnk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:4e:92:f0:f1:46:6d:35:f0:c3:55:bd:5f:3f:af:fa:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22d54df89b8fd921dada3f0daa29efff5cce0a79
Validity
Not Before: Apr 2 14:22:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8c0a70b2936b626bc749ccd6a31a527351427f96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0c:19:1e:4a:4a:b8:b4:0f:d1:1d:96:ea:46:
df:79:f2:28:67:15:fa:5c:de:73:77:51:d5:db:a9:
c6:b5:ae:62:3d:f2:94:9c:6a:c0:f2:2d:bc:5d:89:
d9:39:4f:e8:71:74:63:2e:4c:8b:72:0a:c2:77:59:
a5:97:14:9d:d2:26:cd:eb:5c:6b:e9:4a:b6:cb:5d:
c8:2e:9b:a6:a1:28:59:94:46:03:e0:58:35:d5:aa:
f4:99:db:97:72:4a:9e:56:a3:e0:2b:21:84:15:f9:
aa:f4:ff:32:9a:ff:38:ee:70:30:aa:95:60:2a:d9:
e0:1e:74:ea:97:82:03:63:f8:f6:b1:1b:39:11:9c:
35:3d:d3:b5:cc:80:56:31:90:bb:95:26:51:42:64:
b3:7a:53:73:06:b6:b6:b4:a0:cd:4f:18:e8:fc:86:
1f:64:96:7a:d5:c8:64:49:ae:72:df:ba:bc:91:d1:
bd:17:2c:d1:85:6e:42:a0:4d:ce:4c:9b:6c:69:87:
e9:93:ec:5e:62:f1:45:a6:94:43:8c:ae:37:19:82:
05:10:65:c3:69:91:9b:bc:a7:a6:ad:33:3c:ab:e6:
46:f5:35:27:e0:5a:26:3b:03:e1:dd:e7:d8:51:69:
87:00:c2:01:6a:84:88:99:20:59:c8:2c:5e:a5:79:
9b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:0A:70:B2:93:6B:62:6B:C7:49:CC:D6:A3:1A:52:73:51:42:7F:96
X509v3 Authority Key Identifier:
keyid:22:D5:4D:F8:9B:8F:D9:21:DA:DA:3F:0D:AA:29:EF:FF:5C:CE:0A:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ItVN-JuP2SHa2j8Nqinv_1zOCnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/jApwspNrYmvHSczWoxpSc1FCf5Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.65.82.0/23
Signature Algorithm: sha256WithRSAEncryption
10:12:86:dc:3b:ec:d4:cc:a8:78:a3:8d:db:48:f1:05:05:87:
c3:b5:af:e9:e3:15:00:31:44:74:82:3e:45:c9:13:01:f3:38:
0b:14:79:b5:42:79:61:75:46:2e:4e:1f:74:85:09:26:a7:ce:
64:d8:57:e3:f3:13:79:7a:d5:61:73:fa:ce:50:44:be:23:09:
ac:7e:61:48:c8:f9:be:c5:0a:87:57:61:c8:08:de:82:57:1e:
ee:ca:5b:b0:94:bc:91:93:a2:1e:54:98:54:42:d1:a7:48:5d:
b3:b0:a0:df:2c:95:14:f7:03:b4:8b:a3:18:98:bb:e5:9b:cc:
90:dd:51:d9:3e:fc:8e:44:12:3b:1b:0f:de:74:3f:93:4e:59:
31:7c:ec:06:23:7a:f1:83:38:d9:ca:9b:9c:30:0e:a5:78:93:
62:b1:7a:00:92:b1:45:d8:05:b5:f2:67:49:c3:3f:bf:29:df:
40:d5:94:dc:5e:3e:32:72:1c:ea:c6:fa:ad:a6:a7:a1:f4:03:
2b:26:eb:2a:8f:f8:27:98:cc:23:1b:ff:c0:33:70:06:02:a5:
0c:4d:38:e5:97:1a:ee:20:6c:63:ea:e5:1f:55:d8:e7:a8:44:
1c:e9:8d:47:ad:b6:ea:0e:0b:d4:1a:30:6b:85:0c:d2:31:de:
20:f9:1f:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:19:05 2026 by rpki-client