Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/j77VlxKGZFTBeMoq8dRpC_01Kvs.roa
File: j77VlxKGZFTBeMoq8dRpC_01Kvs.roa (raw, json)
Hash identifier: /23p2YQZi+3zBIY8FsXmhv9zCZT3wm/sCfekirsWiKI=
Subject key identifier: 8F:BE:D5:97:12:86:64:54:C1:78:CA:2A:F1:D4:69:0B:FD:35:2A:FB
Certificate issuer: /CN=ebaf0d20f98e3a20550c996d74292688f0d2279d
Certificate serial: 019D34BD0CDB2D35EBC4C7A934355C45E2AD
Authority key identifier: EB:AF:0D:20:F9:8E:3A:20:55:0C:99:6D:74:29:26:88:F0:D2:27:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/668NIPmOOiBVDJltdCkmiPDSJ50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/j77VlxKGZFTBeMoq8dRpC_01Kvs.roa
Signing time: Sat 28 Mar 2026 13:58:17 +0000
ROA not before: Sat 28 Mar 2026 13:58:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 1014
IP address blocks: 64.83.0.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/668NIPmOOiBVDJltdCkmiPDSJ50.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/668NIPmOOiBVDJltdCkmiPDSJ50.mft
rsync://rpki.ripe.net/repository/DEFAULT/668NIPmOOiBVDJltdCkmiPDSJ50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:34:bd:0c:db:2d:35:eb:c4:c7:a9:34:35:5c:45:e2:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebaf0d20f98e3a20550c996d74292688f0d2279d
Validity
Not Before: Mar 28 13:58:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8fbed59712866454c178ca2af1d4690bfd352afb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:47:a4:75:10:92:03:fd:fc:14:8b:d7:8b:86:
a5:1e:0f:0e:f7:21:e4:87:20:4b:9d:d6:6c:90:57:
b2:f8:27:ce:4f:bd:dc:40:e5:89:0c:ab:af:d2:7c:
47:47:05:ad:7e:97:0b:60:82:cc:f5:ed:4e:25:95:
c5:02:74:a7:c1:84:77:38:8b:62:bb:5a:bf:38:6d:
9a:3b:86:39:88:d7:2b:f3:e6:0d:5c:81:35:d5:b9:
9a:fe:11:1b:a1:8b:25:31:7f:81:ca:24:ce:50:31:
97:21:53:b4:33:83:ed:30:f0:94:f3:6a:be:04:41:
ab:66:c0:8b:c8:66:d1:c7:a0:4d:7f:15:e1:56:52:
e3:a4:1f:09:d6:d0:c2:78:49:16:11:4e:d4:44:9c:
39:da:bc:2a:c8:70:5a:21:fa:89:b2:c6:92:dd:dc:
ff:8a:4d:a5:24:e2:18:24:bd:c8:a3:10:71:df:8a:
07:82:82:07:33:ba:65:5b:0e:f4:59:e5:ad:ac:3a:
fa:6e:65:13:65:2f:3a:5d:4a:6a:45:18:ed:c9:54:
4a:15:96:1f:a6:5d:a0:9e:04:99:c2:0f:df:00:a4:
1b:c9:77:f3:99:ee:ab:48:2a:a3:5f:2b:a3:32:3c:
a7:d5:74:31:bc:af:c8:f8:c6:9a:2c:74:40:31:d4:
ca:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:BE:D5:97:12:86:64:54:C1:78:CA:2A:F1:D4:69:0B:FD:35:2A:FB
X509v3 Authority Key Identifier:
keyid:EB:AF:0D:20:F9:8E:3A:20:55:0C:99:6D:74:29:26:88:F0:D2:27:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/668NIPmOOiBVDJltdCkmiPDSJ50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/j77VlxKGZFTBeMoq8dRpC_01Kvs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/668NIPmOOiBVDJltdCkmiPDSJ50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.83.0.0/19
Signature Algorithm: sha256WithRSAEncryption
3a:1f:6d:a9:bf:01:17:71:f6:98:3a:7a:75:35:d1:67:de:14:
d6:ca:84:20:3e:27:dc:73:9c:e2:70:75:2b:81:35:3e:6a:be:
d0:af:5b:72:ea:ea:75:c2:27:fd:05:83:c9:6e:59:94:02:ef:
4e:80:64:c8:9b:1a:b2:e7:de:ae:51:01:e0:a4:44:f7:cd:ec:
6c:74:2f:09:56:71:00:a4:8e:18:13:be:66:07:a3:7d:52:49:
0c:52:3c:59:f7:b6:46:36:2c:80:84:89:63:22:0f:e5:83:0f:
e3:80:cf:f7:ea:cb:05:22:68:73:1c:4f:bd:b2:5e:f4:39:06:
8a:e9:9f:58:51:59:b0:bb:9a:17:0d:f4:24:b0:34:27:35:8d:
05:35:24:a1:b5:cd:61:04:cc:bf:3a:e5:ce:55:8a:2a:56:9e:
c4:a7:f9:09:18:9b:f8:a3:03:a1:3c:60:14:46:60:a2:8e:02:
9a:b5:ed:9e:c6:af:32:72:b8:92:82:1c:d1:ab:b2:0c:05:34:
fc:1c:34:fd:eb:bc:76:2e:47:5d:bf:3c:3f:6e:ef:33:38:4e:
ed:05:5a:57:4d:00:9e:8c:6c:68:7f:ce:32:29:fa:7e:9a:91:
a1:8c:41:ce:b6:20:91:df:6c:ae:3a:b9:02:a0:38:a0:d2:07:
49:34:a9:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:28:44 2026 by rpki-client