Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/jFw457Jipvup6yZKtXR8tj_7Yhg.roa
File: jFw457Jipvup6yZKtXR8tj_7Yhg.roa (raw, json)
Hash identifier: FJJh85N3yB8rz50G6DYLIKGlO6AtACjKyBi0U99WQzc=
Subject key identifier: 8C:5C:38:E7:B2:62:A6:FB:A9:EB:26:4A:B5:74:7C:B6:3F:FB:62:18
Certificate issuer: /CN=7df904ab14066c7a9fe61a521d5492a0e52965ca
Certificate serial: 01A087490FB7973D091E62B19DCE8F8EF64A
Authority key identifier: 7D:F9:04:AB:14:06:6C:7A:9F:E6:1A:52:1D:54:92:A0:E5:29:65:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffkEqxQGbHqf5hpSHVSSoOUpZco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/jFw457Jipvup6yZKtXR8tj_7Yhg.roa
Signing time: Wed 09 Sep 2026 17:48:27 +0000
ROA not before: Wed 09 Sep 2026 17:48:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2914
IP address blocks: 77.111.84.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.mft
rsync://rpki.ripe.net/repository/DEFAULT/ffkEqxQGbHqf5hpSHVSSoOUpZco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 19:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:87:49:0f:b7:97:3d:09:1e:62:b1:9d:ce:8f:8e:f6:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df904ab14066c7a9fe61a521d5492a0e52965ca
Validity
Not Before: Sep 9 17:48:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8c5c38e7b262a6fba9eb264ab5747cb63ffb6218
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:39:92:18:17:ce:0e:ea:b3:0d:43:7f:cd:4e:
5f:fd:64:a5:51:54:4e:52:dc:d6:c4:51:e2:ac:85:
df:2b:1b:1e:ce:bb:84:96:ef:19:cc:e2:c6:6b:8d:
03:ba:df:87:ab:1f:67:0e:8f:26:18:b6:0c:d7:bb:
ff:48:8d:4d:9c:a0:25:93:37:78:c5:97:8d:d4:3e:
6b:3e:bf:bd:83:87:e8:28:32:78:53:b2:ee:39:20:
ba:2b:85:16:e8:14:81:f3:ff:d9:f2:24:06:70:f2:
95:21:59:6f:00:66:6c:31:4f:84:37:02:d8:f7:e9:
ca:5a:5b:0d:ff:c2:0a:b0:1b:4b:54:a7:a1:da:22:
e7:86:e1:9f:49:21:2c:03:94:32:e1:70:58:fd:47:
bf:50:3b:15:8b:65:6a:de:ec:04:f1:7e:b4:5a:61:
53:66:d3:f3:4a:3f:d4:56:c2:c9:ab:58:00:63:c1:
a7:cd:24:49:80:6a:6e:bb:a4:d0:3a:c2:7b:46:86:
ed:f2:b0:5e:90:74:82:33:e2:a8:00:99:d4:7e:f3:
f7:64:be:cd:5f:1b:d3:41:9d:ad:76:5b:b3:90:4a:
f3:4d:94:7f:9b:e1:9a:92:b6:16:0a:d5:a8:7f:23:
3c:76:4e:03:7b:bf:ac:95:1f:30:5d:94:59:fa:ff:
95:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:5C:38:E7:B2:62:A6:FB:A9:EB:26:4A:B5:74:7C:B6:3F:FB:62:18
X509v3 Authority Key Identifier:
keyid:7D:F9:04:AB:14:06:6C:7A:9F:E6:1A:52:1D:54:92:A0:E5:29:65:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffkEqxQGbHqf5hpSHVSSoOUpZco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/jFw457Jipvup6yZKtXR8tj_7Yhg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.111.84.0/22
Signature Algorithm: sha256WithRSAEncryption
a1:a1:02:9d:01:54:20:18:c9:8e:9e:ac:3a:3b:74:a9:51:17:
e5:5d:2c:23:57:0f:d2:be:1c:62:dd:92:78:b8:d8:78:79:48:
f8:96:1c:f3:2a:04:b1:cb:54:98:0b:90:d0:ed:1a:08:7f:46:
ca:72:f5:70:a8:a8:92:f0:77:cd:14:f7:69:21:ec:b6:96:c3:
86:fe:d2:03:f9:a9:32:66:ed:0b:cb:0a:4d:60:78:04:a3:82:
e8:5e:64:b4:ad:82:46:39:78:90:0c:d5:d2:ab:50:8f:4c:06:
ef:bf:31:98:d7:e8:46:b6:81:93:13:ef:00:30:a2:6b:0d:93:
81:7a:9d:82:27:32:e4:50:71:a5:1d:64:36:e2:3b:50:08:75:
02:fc:16:3c:65:25:25:e9:c2:a8:e2:43:3f:72:cc:53:c9:20:
d6:4d:7f:e3:ca:ba:d5:34:55:cf:2b:0d:e8:e4:68:85:54:4f:
30:bc:95:2d:f9:29:11:d4:21:44:78:7c:a1:3e:67:77:dd:95:
57:24:2e:7b:26:63:7a:df:45:6c:c4:23:fb:bd:77:18:8d:ad:
6a:74:35:cd:11:51:96:a6:91:71:26:17:1d:06:a3:4b:8d:5a:
ee:12:60:28:fc:0d:1e:53:a8:69:63:24:93:f0:d0:c1:a1:35:
ab:bb:0a:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 07:21:14 2026 by rpki-client