Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/1-jtiybhGJq-4QTh6nkxiY6tnbpA.roa
File: 1-jtiybhGJq-4QTh6nkxiY6tnbpA.roa (raw, json)
Hash identifier: ZGqpJxsvgdlig9mO0ND7K13xwp53rsFn8Sr73X/OtQ8=
Subject key identifier: FA:3B:62:C9:B8:46:26:AF:B8:41:38:7A:9E:4C:62:63:AB:67:6E:90
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 01A0AA17099EEE9BE3680A8D7523005EEDE8
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/1-jtiybhGJq-4QTh6nkxiY6tnbpA.roa
Signing time: Wed 16 Sep 2026 12:00:31 +0000
ROA not before: Wed 16 Sep 2026 12:00:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48729
IP address blocks: 31.184.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 19:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:aa:17:09:9e:ee:9b:e3:68:0a:8d:75:23:00:5e:ed:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Sep 16 12:00:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fa3b62c9b84626afb841387a9e4c6263ab676e90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b6:b4:c4:b2:1a:89:7e:9f:05:f7:e1:20:25:
0b:b6:53:89:3c:a9:b3:1d:ad:3b:d6:9c:f9:20:35:
83:9b:b8:be:d1:4f:b3:95:b9:ba:11:f6:a7:05:4d:
74:8b:e0:74:71:c1:ff:ff:09:6f:c7:69:ec:67:c0:
6b:d1:8f:59:27:00:f5:f0:5c:be:3c:79:37:f7:e8:
27:d1:5c:3e:4d:6f:56:ad:4f:6a:3e:08:7d:31:95:
76:46:d4:10:1e:54:db:ad:4f:4e:37:10:19:33:7b:
01:83:16:66:9e:b3:92:63:70:c2:94:6c:52:1c:62:
d5:d1:4a:54:33:9f:83:ab:f1:64:6a:d1:3c:0e:aa:
d9:a4:bb:8d:44:73:82:b1:28:8b:94:31:5c:76:1b:
1b:fa:ed:7d:e8:f2:d2:cd:20:58:01:91:2d:5d:ed:
c8:a6:e8:f7:2c:be:90:cd:c0:d2:b0:68:6f:4f:4d:
a4:76:ab:9f:0f:47:3a:5f:0c:fd:ab:45:76:2f:0d:
63:21:9e:9f:7a:07:f7:92:6b:03:25:2f:0e:c3:43:
a1:82:40:d5:be:d7:65:c9:c6:86:1c:96:c0:1a:8d:
24:e2:96:a2:32:e7:aa:96:af:f4:b1:f2:eb:9e:69:
ad:5c:5f:02:11:a2:9d:4e:f9:89:a2:a9:9b:83:89:
73:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:3B:62:C9:B8:46:26:AF:B8:41:38:7A:9E:4C:62:63:AB:67:6E:90
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/1-jtiybhGJq-4QTh6nkxiY6tnbpA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.184.242.0/24
Signature Algorithm: sha256WithRSAEncryption
02:eb:e5:6a:36:ef:b0:3c:36:32:29:46:d7:c2:39:5e:db:6b:
7f:6f:e6:a1:71:63:df:5d:7e:2a:cc:01:83:6b:ea:fd:17:99:
0f:78:97:95:5c:03:04:80:f8:6c:5f:70:62:55:4e:1f:f9:17:
51:16:72:38:3e:6f:dc:1a:3d:de:e4:ed:0c:42:3d:e1:7f:12:
e4:7f:9a:95:14:b5:c4:38:12:78:e9:1d:0a:49:29:7c:29:04:
c1:d3:c8:38:aa:5a:17:cd:c4:4f:04:90:bf:8b:77:0c:12:0d:
e2:a0:67:19:84:a8:27:bf:2e:2d:0d:5b:c4:d0:a5:c5:1a:a0:
07:4e:45:0a:6d:12:e2:7d:cf:32:06:a6:b7:d2:39:2c:7c:73:
f1:95:60:a9:77:6f:df:d7:48:96:e3:35:57:95:7c:17:23:75:
2f:84:a4:d5:71:bc:41:22:72:70:aa:fe:1a:72:34:c8:bd:22:
37:fc:f2:58:1c:17:be:ed:57:3d:54:e1:e2:6b:f5:07:0d:1a:
d0:4b:ec:39:18:23:47:64:fd:ab:a8:4a:14:3f:4b:f8:9b:c0:
1c:9f:c6:6e:3d:cd:37:b9:c4:7f:02:c9:f9:fb:39:8b:fa:6f:
a0:a2:13:8e:dc:97:0b:74:a3:07:8d:8c:0f:2a:38:c0:fe:b8:
1f:9c:27:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 05:58:27 2026 by rpki-client