Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/pjDB1GDdcVVreVj-Q3zh-jUvRg0.roa
File: pjDB1GDdcVVreVj-Q3zh-jUvRg0.roa (raw, json)
Hash identifier: 0rt1hCmLolk7xz/j43eQn2e6jlbNvi4KzsoV0vsgSVc=
Subject key identifier: A6:30:C1:D4:60:DD:71:55:6B:79:58:FE:43:7C:E1:FA:35:2F:46:0D
Certificate issuer: /CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Certificate serial: 01A08CF345E144763E91CA17368634E32A9E
Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/pjDB1GDdcVVreVj-Q3zh-jUvRg0.roa
Signing time: Thu 10 Sep 2026 20:12:28 +0000
ROA not before: Thu 10 Sep 2026 20:12:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20115
IP address blocks: 194.38.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 11:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:f3:45:e1:44:76:3e:91:ca:17:36:86:34:e3:2a:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Validity
Not Before: Sep 10 20:12:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a630c1d460dd71556b7958fe437ce1fa352f460d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c4:0f:f2:fc:cf:87:48:bf:d8:5c:3d:87:1b:
d8:be:01:16:6a:c2:e4:fa:be:d5:1f:fa:82:65:01:
47:49:73:dc:4c:17:68:2f:1c:1b:e4:e7:d4:25:02:
04:88:2b:08:9e:39:82:b9:b3:e5:64:9d:1c:0c:5d:
8c:09:25:0c:63:eb:6c:c4:07:be:f5:be:07:5f:5d:
f9:31:67:ca:31:52:55:a8:71:a4:ba:d6:3e:60:39:
2e:d6:fc:50:7f:40:85:7f:66:de:c6:3c:ff:f9:c3:
61:d8:7b:d0:46:4e:e7:9f:91:e5:58:5c:b0:d0:2b:
0d:33:55:91:a8:ef:2d:2e:d6:4f:ad:76:e0:67:ae:
66:4b:1c:64:81:b2:df:59:51:50:c0:17:26:3e:89:
01:4d:d6:2f:61:5d:60:f7:c8:0a:2c:40:a6:f4:ef:
4b:d0:95:1f:8e:42:11:82:a5:64:8c:e1:d0:f9:db:
5e:ed:6d:77:1f:bd:95:ea:b6:b3:ec:2b:86:9c:c8:
07:77:8b:e6:35:19:48:40:8e:41:02:76:a9:3f:07:
0f:1b:7f:aa:bb:d8:74:ee:a3:88:35:ba:c9:82:19:
9b:e8:db:7f:ec:03:f2:97:50:2e:35:b6:ee:db:57:
72:91:d9:d4:62:aa:c6:da:c9:12:be:7e:43:ae:15:
05:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:30:C1:D4:60:DD:71:55:6B:79:58:FE:43:7C:E1:FA:35:2F:46:0D
X509v3 Authority Key Identifier:
keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/pjDB1GDdcVVreVj-Q3zh-jUvRg0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.38.50.0/24
Signature Algorithm: sha256WithRSAEncryption
21:a5:b3:f1:c9:77:bf:22:6c:94:89:e9:23:cf:12:3c:ca:de:
29:6b:57:f2:44:ec:80:b1:5d:1d:07:6b:53:a2:24:4b:7f:b9:
9f:fc:0a:98:22:b1:23:67:b2:fc:a1:49:39:bd:8e:c4:7e:76:
0b:23:b8:eb:0f:33:76:80:f4:1b:f3:e0:07:59:e0:70:98:d2:
43:ce:01:b1:32:3b:c5:ef:ef:6c:06:d1:fa:e1:0b:8e:98:f7:
dd:30:11:c3:1f:b4:e6:17:2d:fc:28:a3:39:b1:91:d0:3f:6f:
37:6d:66:38:03:55:62:3a:82:ce:d5:47:fb:6c:7f:42:bf:45:
9a:28:dd:37:f4:df:66:9e:89:2b:cb:69:42:71:fb:d4:52:fe:
59:50:fd:cc:12:3b:b1:42:73:64:dc:e5:7a:61:e9:99:95:41:
90:4d:c0:93:75:e6:50:60:63:a0:99:69:a7:77:9a:93:67:af:
cf:d4:5c:d0:a2:f6:db:27:f9:24:2a:5b:13:12:ae:18:d3:c6:
37:b7:0e:56:9c:44:e3:ee:6a:81:0c:27:c7:b3:a3:bb:80:a6:
8a:00:db:22:ae:ee:67:1c:50:a8:26:a5:ec:4b:76:f4:d6:ea:
a8:6e:2c:76:09:be:22:68:87:c1:47:0e:e8:1b:3a:87:77:6e:
d9:4f:fd:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:57:35 2026 by rpki-client