Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/i1_J0js7GSnwnFT6BQjKxFjCKAo.roa
File: i1_J0js7GSnwnFT6BQjKxFjCKAo.roa (raw, json)
Hash identifier: zSpyHhpf50CixxMSNhKrSqsP9AZoPmaaRWKJ+roEr9w=
Subject key identifier: 8B:5F:C9:D2:3B:3B:19:29:F0:9C:54:FA:05:08:CA:C4:58:C2:28:0A
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 01A0C8D31F305801C5C2D7363A79BFBBC604
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/i1_J0js7GSnwnFT6BQjKxFjCKAo.roa
Signing time: Tue 22 Sep 2026 11:14:34 +0000
ROA not before: Tue 22 Sep 2026 11:14:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2914
IP address blocks: 195.180.156.0/22 maxlen: 24
195.180.242.0/24 maxlen: 24
195.180.245.0/24 maxlen: 24
195.180.248.0/24 maxlen: 24
195.180.253.0/24 maxlen: 24
195.180.255.0/24 maxlen: 24
212.224.9.0/24 maxlen: 24
212.224.10.0/24 maxlen: 24
212.224.11.0/24 maxlen: 24
212.224.12.0/24 maxlen: 24
212.224.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.mft
rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 05:13:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:d3:1f:30:58:01:c5:c2:d7:36:3a:79:bf:bb:c6:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Sep 22 11:14:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8b5fc9d23b3b1929f09c54fa0508cac458c2280a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:14:25:63:91:26:f3:7a:a5:6c:32:29:3b:1a:
fd:d5:fa:69:64:fa:54:5b:35:bd:1d:75:f3:4d:b8:
2f:ce:b1:31:f0:65:33:dc:49:0e:91:8b:b6:0b:c6:
ac:f7:ac:a5:38:83:d8:06:a1:81:25:3a:75:1d:d4:
12:7c:4b:14:be:7b:d8:ed:3f:db:0f:98:22:40:b6:
57:61:4f:28:f1:2a:37:75:58:32:ee:e3:69:49:b4:
b4:2b:2e:e4:d9:fc:74:be:bc:5e:15:c1:82:cc:ce:
5d:81:9f:8c:02:58:1a:ca:be:97:ee:db:fb:51:aa:
de:37:83:4a:d4:46:de:27:d6:20:db:d5:14:57:60:
75:7d:07:ff:ac:38:59:3f:06:70:86:c1:d2:c6:98:
e6:d9:8b:6f:90:e5:0e:79:7d:a2:c8:b2:11:b9:7e:
3e:66:00:10:2f:9e:4b:61:58:cc:d9:29:6e:d1:b8:
82:1b:fc:f5:9f:24:10:e9:56:2d:a3:c7:c8:84:24:
51:b5:b5:5a:7e:74:00:88:29:44:e8:73:00:12:c5:
2e:dd:b4:fd:0c:b5:af:1b:41:d0:f3:16:80:04:42:
36:85:ad:4c:8f:94:03:73:dd:65:bb:17:12:9f:4d:
12:55:58:01:4b:62:27:44:38:ba:4c:43:68:8e:ef:
0b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:5F:C9:D2:3B:3B:19:29:F0:9C:54:FA:05:08:CA:C4:58:C2:28:0A
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/i1_J0js7GSnwnFT6BQjKxFjCKAo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.180.156.0/22
195.180.242.0/24
195.180.245.0/24
195.180.248.0/24
195.180.253.0/24
195.180.255.0/24
212.224.9.0-212.224.12.255
212.224.14.0/24
Signature Algorithm: sha256WithRSAEncryption
67:36:ce:8f:e3:9a:76:ee:f7:0a:d7:dc:1d:11:7e:f7:b2:a5:
12:1e:c7:ee:af:1a:7a:4c:40:fd:d2:2f:dc:30:b7:c1:45:f7:
a2:64:3d:2c:b7:c4:c3:ec:bc:55:c2:6d:78:34:21:b4:66:df:
79:24:98:78:2a:f6:dd:9d:ee:eb:88:f0:d1:bd:b6:ef:26:6f:
e5:d6:24:05:01:84:c7:c9:f9:04:5a:8a:3f:c5:85:52:f8:c5:
96:dd:35:ad:d5:c3:9c:9b:96:04:f2:19:11:de:84:d0:11:0b:
d5:cf:66:2f:97:71:50:d1:80:9c:96:66:53:ed:f5:0d:1b:ba:
ff:1b:5c:a4:0b:7e:33:76:dd:dd:23:b4:5e:c0:15:e5:17:89:
5f:e2:ce:b1:7a:f8:bb:ea:46:ba:d2:54:47:f6:a9:88:38:79:
fa:8f:68:7c:f1:28:a0:5d:be:e4:00:69:25:ab:3e:55:d9:26:
6f:c0:ff:64:f4:72:fa:73:b3:41:b2:09:b8:20:91:25:f2:aa:
59:9c:fe:2f:1f:52:6b:23:3b:52:27:f6:ba:91:31:f8:bb:f3:
3d:e7:25:67:c3:37:36:2b:a0:a6:44:db:4b:c3:09:c4:0f:f3:
9f:af:15:47:6e:d9:f9:f1:06:bd:32:c7:72:05:83:b3:0d:18:
de:6b:4b:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 15:16:47 2026 by rpki-client