Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/d5f14f-2705-42ec-900f-6934cafb6bcd/1/0shQJP_olUAaquYrEXYkfoOk2xE.roa
File: 0shQJP_olUAaquYrEXYkfoOk2xE.roa (raw, json)
Hash identifier: 4+ThIr9odjX0ODg2LR7+zUmLjBlN+O98mTnzdPuwUjY=
Subject key identifier: D2:C8:50:24:FF:E8:95:40:1A:AA:E6:2B:11:76:24:7E:83:A4:DB:11
Certificate issuer: /CN=275fadae112e68049948e23086215b7f155b09c1
Certificate serial: 019F2369036C255C221525785158E6A0692C
Authority key identifier: 27:5F:AD:AE:11:2E:68:04:99:48:E2:30:86:21:5B:7F:15:5B:09:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J1-trhEuaASZSOIwhiFbfxVbCcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/d5f14f-2705-42ec-900f-6934cafb6bcd/1/0shQJP_olUAaquYrEXYkfoOk2xE.roa
Signing time: Thu 02 Jul 2026 15:18:32 +0000
ROA not before: Thu 02 Jul 2026 15:18:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 553
IP address blocks: 144.41.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/d5f14f-2705-42ec-900f-6934cafb6bcd/1/J1-trhEuaASZSOIwhiFbfxVbCcE.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/d5f14f-2705-42ec-900f-6934cafb6bcd/1/J1-trhEuaASZSOIwhiFbfxVbCcE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J1-trhEuaASZSOIwhiFbfxVbCcE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 07:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:03:6c:25:5c:22:15:25:78:51:58:e6:a0:69:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=275fadae112e68049948e23086215b7f155b09c1
Validity
Not Before: Jul 2 15:18:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d2c85024ffe895401aaae62b1176247e83a4db11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9f:b0:f8:30:7b:43:f8:5d:86:3e:cb:47:c5:
c4:a0:e9:28:d4:4a:80:60:84:b3:e3:4b:0e:43:8b:
e2:ba:b9:eb:17:17:8e:35:55:2f:92:23:13:fb:5a:
09:a4:63:fa:b3:90:d2:f5:e5:fc:14:57:77:d5:5d:
4e:8c:7d:f4:58:73:f0:a4:49:95:0a:b6:d3:ca:9d:
9d:18:4f:1a:79:c9:1e:78:eb:66:b9:6c:79:fd:26:
de:59:90:24:2a:e8:fe:d6:01:0e:c8:55:89:f6:97:
a2:2a:9d:26:d3:48:9c:d0:ba:c2:b6:e7:2e:6e:03:
cc:73:79:12:89:ef:ab:04:59:a6:d1:d0:1a:50:e7:
3f:16:1e:d5:57:07:e3:9c:bb:00:23:a2:e3:da:4e:
6d:a4:0d:66:8d:de:56:25:2e:c2:9b:d4:ac:c7:f0:
14:93:62:29:fe:31:be:9a:01:e8:c0:f6:3f:e3:0e:
ad:3e:60:57:40:15:85:17:42:70:5a:c4:dc:22:db:
f2:6c:87:33:e4:1f:49:60:1e:75:19:76:89:79:eb:
b7:49:4c:54:95:82:e1:b1:45:0d:2c:fe:d9:2b:45:
a3:e2:24:c6:71:2f:c1:d1:ab:09:fd:40:0b:dd:7d:
18:4e:91:1d:e0:80:47:1f:4a:f8:aa:67:f3:f9:dd:
fc:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:C8:50:24:FF:E8:95:40:1A:AA:E6:2B:11:76:24:7E:83:A4:DB:11
X509v3 Authority Key Identifier:
keyid:27:5F:AD:AE:11:2E:68:04:99:48:E2:30:86:21:5B:7F:15:5B:09:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J1-trhEuaASZSOIwhiFbfxVbCcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d5f14f-2705-42ec-900f-6934cafb6bcd/1/0shQJP_olUAaquYrEXYkfoOk2xE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d5f14f-2705-42ec-900f-6934cafb6bcd/1/J1-trhEuaASZSOIwhiFbfxVbCcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.41.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0c:92:f9:55:f2:3d:8b:d0:29:23:61:8e:87:51:91:6f:af:f5:
a4:6c:44:00:50:dc:bd:f6:1d:37:fd:d0:e3:5e:9b:ee:3b:4a:
4e:0e:e7:5f:97:bd:b8:d1:67:05:bb:92:ad:7d:54:5d:e2:2c:
b3:32:91:12:3e:50:4f:3c:f7:d8:31:ca:63:b9:bf:8d:e6:50:
dd:37:39:4b:ea:3e:d4:bb:e9:fe:a1:b9:a0:6a:b8:94:5c:0b:
85:98:2e:c4:06:92:8c:a3:4c:02:6e:57:9a:97:5b:9e:a9:83:
76:ad:be:0b:56:ba:2f:dd:81:bf:44:2f:b1:1b:5a:f5:2c:4e:
c1:cb:de:a6:40:d6:40:3a:bb:18:02:89:b5:de:4c:38:6c:c6:
64:4c:ff:04:31:3c:b5:8b:1b:bf:35:ae:f0:8f:d8:20:94:d9:
12:cb:26:4b:c5:5e:ca:60:b8:2f:c5:d1:07:98:6d:53:d1:fd:
40:92:cb:bb:05:21:d7:ab:54:d5:3d:b6:67:f3:9f:26:e8:8f:
9b:bf:8c:4a:01:f0:8a:7b:6e:cd:f0:0e:92:fd:f7:43:84:6b:
88:e4:86:7f:2c:44:be:56:6e:14:1d:c0:9c:a6:49:77:44:33:
95:af:27:5a:61:d5:11:47:ed:34:1e:5d:75:5c:c8:62:8b:0d:
73:60:5b:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 13:33:45 2026 by rpki-client