Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d76585-95fc-4803-ba6e-75c0d78eb07d/1/J_85Yuk0PZIWMoiLYOvaX-HXgb4.roa
File: J_85Yuk0PZIWMoiLYOvaX-HXgb4.roa (raw, json)
Hash identifier: 5wusu27tOhw5EdKTbLT8B0jjf2cOL1t2db0yd0++2CU=
Subject key identifier: 27:FF:39:62:E9:34:3D:92:16:32:88:8B:60:EB:DA:5F:E1:D7:81:BE
Certificate issuer: /CN=13a8bfb3f54754bd329180e593750265ef7e3999
Certificate serial: 019B7F858259BB929ED14C6EAC4692661909
Authority key identifier: 13:A8:BF:B3:F5:47:54:BD:32:91:80:E5:93:75:02:65:EF:7E:39:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E6i_s_VHVL0ykYDlk3UCZe9-OZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d76585-95fc-4803-ba6e-75c0d78eb07d/1/J_85Yuk0PZIWMoiLYOvaX-HXgb4.roa
Signing time: Fri 02 Jan 2026 16:23:34 +0000
ROA not before: Fri 02 Jan 2026 16:23:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61271
IP address blocks: 46.18.109.0/24 maxlen: 24
2a11:8d00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/d76585-95fc-4803-ba6e-75c0d78eb07d/1/E6i_s_VHVL0ykYDlk3UCZe9-OZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/d76585-95fc-4803-ba6e-75c0d78eb07d/1/E6i_s_VHVL0ykYDlk3UCZe9-OZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/E6i_s_VHVL0ykYDlk3UCZe9-OZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:85:82:59:bb:92:9e:d1:4c:6e:ac:46:92:66:19:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13a8bfb3f54754bd329180e593750265ef7e3999
Validity
Not Before: Jan 2 16:23:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=27ff3962e9343d921632888b60ebda5fe1d781be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:1c:78:5c:9c:35:52:44:2f:86:ad:8d:c4:e5:
56:0f:5d:1e:4c:29:f8:bd:7b:e2:e7:bd:31:0c:70:
8e:fc:0c:af:97:5d:70:a3:98:f9:43:36:ea:43:16:
95:30:51:0b:c2:0c:12:23:f3:bf:0d:b1:67:42:dc:
7c:5c:d2:57:8f:a7:57:04:5a:63:de:55:a2:7d:8f:
2a:7e:e7:6d:31:f8:f4:0c:c5:4b:ed:6b:e0:82:55:
9c:85:28:11:70:8d:72:73:3b:19:04:27:f1:21:fb:
20:36:aa:6d:c6:b8:f5:e4:a5:24:e3:e8:6c:ec:45:
1c:c0:59:a1:8c:21:9b:f5:ba:a7:9e:50:d4:9b:37:
73:a7:3b:b1:21:69:46:f5:c1:df:ad:dc:c0:57:7a:
41:17:eb:aa:f1:fe:41:84:ed:c3:92:88:04:2f:2e:
84:24:89:c3:c8:b2:0d:b4:28:82:9b:d2:42:4c:fc:
1b:ee:ac:c1:c1:21:cc:94:91:8a:b0:2e:e1:1b:1f:
51:5b:da:d2:7d:99:05:93:73:55:ae:96:8d:90:ad:
a7:6e:c5:24:61:4e:ae:de:b5:81:9d:1c:69:0f:74:
2f:51:ec:3a:5d:46:db:07:6d:65:ae:47:0d:7f:c8:
d1:e8:b3:29:32:12:bf:a3:c4:4d:c1:29:e2:61:66:
bf:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:FF:39:62:E9:34:3D:92:16:32:88:8B:60:EB:DA:5F:E1:D7:81:BE
X509v3 Authority Key Identifier:
keyid:13:A8:BF:B3:F5:47:54:BD:32:91:80:E5:93:75:02:65:EF:7E:39:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E6i_s_VHVL0ykYDlk3UCZe9-OZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d76585-95fc-4803-ba6e-75c0d78eb07d/1/J_85Yuk0PZIWMoiLYOvaX-HXgb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d76585-95fc-4803-ba6e-75c0d78eb07d/1/E6i_s_VHVL0ykYDlk3UCZe9-OZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.18.109.0/24
IPv6:
2a11:8d00::/29
Signature Algorithm: sha256WithRSAEncryption
88:a1:8d:67:92:b3:66:d0:98:35:7d:9e:e8:58:b0:f2:24:ec:
5f:7c:9a:79:90:a6:ba:e7:1d:f2:3a:9a:d9:78:3f:0a:58:38:
b0:d0:f7:4e:99:20:70:70:f9:cd:aa:73:b8:f9:e5:67:ee:b2:
1d:20:bc:2f:7a:b0:58:d0:e4:b6:44:f7:e8:4f:57:6d:c3:37:
4f:81:c0:05:d0:8b:20:28:5e:0c:f0:92:9b:a4:5a:ec:3d:3d:
9d:ae:04:e2:88:c6:22:2c:a2:2d:99:8f:bb:b1:07:6d:64:cc:
94:6f:90:6d:ea:b0:07:55:0d:0b:7c:a3:ad:64:ac:11:31:33:
11:1c:e4:ee:66:99:cd:e5:89:0b:34:63:8c:4c:7e:89:3b:18:
6d:bb:e3:a5:49:56:2c:5b:0b:3b:10:b6:02:c8:1c:c5:4e:47:
92:22:e2:d9:e2:05:23:68:35:9a:bd:ca:d8:ac:17:62:5b:dd:
78:97:74:8b:28:00:64:12:6f:37:01:a9:c5:1f:7c:e7:02:cd:
20:37:09:6f:10:53:a4:f3:6c:c0:48:40:e0:e8:98:ca:66:f5:
2b:0a:a8:bf:8c:f4:54:64:1a:0c:92:eb:9a:46:24:e7:ac:ce:
77:3b:e0:2d:7a:d4:79:97:19:6e:fd:52:6d:bf:9f:56:24:e3:
28:b5:0a:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:27:33 2026 by rpki-client