Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/10ce73-3d4f-43ef-b685-250a4d777ba6/1/J7yrSEXrlTnnMeUC2XbdaK7bWCA.roa
File: J7yrSEXrlTnnMeUC2XbdaK7bWCA.roa (raw, json)
Hash identifier: FD+omFDlJTffjuxE+36nNYtgIdoELzjHmLWeidAPLSs=
Subject key identifier: 27:BC:AB:48:45:EB:95:39:E7:31:E5:02:D9:76:DD:68:AE:DB:58:20
Certificate issuer: /CN=d130117ae1cdc2df1c58816e00e5451f87efb370
Certificate serial: 01A04D51F7B7734490BC0EE359BDC970BA1A
Authority key identifier: D1:30:11:7A:E1:CD:C2:DF:1C:58:81:6E:00:E5:45:1F:87:EF:B3:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0TAReuHNwt8cWIFuAOVFH4fvs3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/10ce73-3d4f-43ef-b685-250a4d777ba6/1/J7yrSEXrlTnnMeUC2XbdaK7bWCA.roa
Signing time: Sat 29 Aug 2026 11:40:12 +0000
ROA not before: Sat 29 Aug 2026 11:40:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8351
IP address blocks: 194.59.16.0/23 maxlen: 24
195.98.192.0/19 maxlen: 24
195.98.192.0/24 maxlen: 24
195.98.195.0/24 maxlen: 24
195.98.196.0/24 maxlen: 24
195.98.197.0/24 maxlen: 24
195.98.198.0/23 maxlen: 23
195.98.217.0/24 maxlen: 24
213.254.32.0/19 maxlen: 24
213.254.33.0/24 maxlen: 24
213.254.36.0/24 maxlen: 24
213.254.55.0/24 maxlen: 24
213.254.56.0/23 maxlen: 23
213.254.58.0/24 maxlen: 24
213.254.60.0/24 maxlen: 24
213.254.63.0/24 maxlen: 24
2a02:320::/29 maxlen: 48
2a02:322:222::/48 maxlen: 48
2a02:323:62::/48 maxlen: 48
2a02:323:63::/48 maxlen: 48
2a02:327:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/10ce73-3d4f-43ef-b685-250a4d777ba6/1/0TAReuHNwt8cWIFuAOVFH4fvs3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/10ce73-3d4f-43ef-b685-250a4d777ba6/1/0TAReuHNwt8cWIFuAOVFH4fvs3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/0TAReuHNwt8cWIFuAOVFH4fvs3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:4d:51:f7:b7:73:44:90:bc:0e:e3:59:bd:c9:70:ba:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d130117ae1cdc2df1c58816e00e5451f87efb370
Validity
Not Before: Aug 29 11:40:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=27bcab4845eb9539e731e502d976dd68aedb5820
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:f0:80:49:cd:4d:51:5d:05:a9:09:cd:a4:a0:
93:bf:f3:6f:2b:57:78:21:ed:b3:a0:9f:e6:0f:98:
60:58:4f:c1:9f:d1:2d:18:d8:3c:f3:73:04:ec:7f:
57:38:1c:73:09:ea:e2:e2:0f:3c:67:8f:b8:1c:21:
d9:7c:a4:72:51:90:e0:f4:3b:5e:13:ec:2e:a1:3c:
25:74:63:58:e1:f1:2f:b5:83:ab:73:99:47:bc:5d:
a1:85:de:27:92:74:32:62:e3:e1:c5:2c:19:de:85:
40:a6:a5:27:b0:3c:b4:72:0c:ee:0a:e1:96:b8:9e:
ab:96:84:c4:7d:6a:70:a3:8f:2a:c8:0e:d5:a0:52:
0e:18:6d:e2:c5:25:40:6b:a9:27:60:67:3f:1b:8c:
db:57:6e:e9:8e:6e:c4:a9:f1:77:25:cd:eb:3c:c0:
c6:2f:4a:d5:3f:56:ce:13:4c:67:bf:8f:3b:d7:7b:
df:c4:ab:3a:6a:6b:f2:83:db:19:11:39:ad:39:e9:
c6:19:f0:7a:6f:19:26:43:df:e3:1c:fb:3f:bd:24:
a3:8d:1e:2a:4a:74:06:6a:1d:9b:c0:27:51:a2:9d:
4d:7f:0c:45:40:86:99:34:e9:77:18:30:c9:86:d4:
a5:2d:09:db:2f:8e:0f:c6:2c:91:73:60:c2:14:a4:
09:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:BC:AB:48:45:EB:95:39:E7:31:E5:02:D9:76:DD:68:AE:DB:58:20
X509v3 Authority Key Identifier:
keyid:D1:30:11:7A:E1:CD:C2:DF:1C:58:81:6E:00:E5:45:1F:87:EF:B3:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0TAReuHNwt8cWIFuAOVFH4fvs3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/10ce73-3d4f-43ef-b685-250a4d777ba6/1/J7yrSEXrlTnnMeUC2XbdaK7bWCA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/10ce73-3d4f-43ef-b685-250a4d777ba6/1/0TAReuHNwt8cWIFuAOVFH4fvs3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.59.16.0/23
195.98.192.0/19
213.254.32.0/19
IPv6:
2a02:320::/29
Signature Algorithm: sha256WithRSAEncryption
14:07:47:42:8f:cc:97:55:b9:5d:2c:6f:d0:6e:1e:7d:fb:63:
51:86:65:b3:59:67:79:ab:e1:81:4a:1b:71:a1:27:bb:e0:88:
a7:17:cc:5b:27:12:89:ec:b7:1b:16:29:cd:a5:19:88:b1:1c:
3a:b6:70:5d:36:fc:23:82:40:9d:ad:20:c1:34:50:4e:1c:9e:
d7:c0:fc:2c:79:b6:18:32:37:70:66:66:04:5b:29:43:93:c5:
e1:1c:53:ec:e1:f0:cc:a2:7b:74:f7:3d:bf:49:49:ff:27:e2:
c1:f8:a1:8a:ca:6f:cf:26:1a:74:e5:e7:f8:5d:3a:a1:9d:70:
32:b8:a3:c3:89:a8:74:ce:d7:1d:e4:d2:32:19:90:27:81:ef:
f7:42:3a:c0:6b:ab:9e:3d:da:4e:b3:3b:21:ff:36:87:d1:f0:
c9:84:d2:49:d4:0b:d7:45:70:b6:f4:11:05:ec:e3:1c:8f:2a:
9f:69:eb:75:a8:24:e9:ca:2b:6b:58:a4:89:da:34:d5:62:79:
7e:78:ca:1c:8c:a4:b3:a6:00:74:4d:fd:c7:59:01:1b:37:19:
25:10:f7:69:89:17:9b:8a:2a:e4:90:1f:d2:e1:3a:7d:c1:2f:
4e:7d:6c:b1:9d:75:f9:22:58:47:0d:d5:0c:1b:34:f9:67:8f:
fe:a2:3a:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 22:10:52 2026 by rpki-client