Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/J1bOpzfz9N73oSFlFV1z4QDm-64.roa
File: J1bOpzfz9N73oSFlFV1z4QDm-64.roa (raw, json)
Hash identifier: h6M5XtZ8RlW37k6FxTv2spT98MJgWMzY1tvdNHQE2Vg=
Subject key identifier: 27:56:CE:A7:37:F3:F4:DE:F7:A1:21:65:15:5D:73:E1:00:E6:FB:AE
Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Certificate serial: 019D3489C6DBB7F8860B87BEAB1C240098F4
Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/J1bOpzfz9N73oSFlFV1z4QDm-64.roa
Signing time: Sat 28 Mar 2026 13:02:17 +0000
ROA not before: Sat 28 Mar 2026 13:02:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202269
IP address blocks: 185.239.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:34:89:c6:db:b7:f8:86:0b:87:be:ab:1c:24:00:98:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Validity
Not Before: Mar 28 13:02:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2756cea737f3f4def7a12165155d73e100e6fbae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:19:33:a7:ff:13:db:4c:ce:27:7c:a6:f9:d2:
ec:3e:66:0e:7d:de:c0:de:dd:4d:d8:ae:ee:fd:c2:
87:ba:ee:6f:5e:8c:32:08:83:2d:e3:c5:07:f0:2b:
6d:48:9e:b8:c4:8a:56:22:4e:0c:b5:b6:48:fa:ff:
ed:53:ab:b2:d3:85:81:66:ea:5c:4d:6e:af:50:4a:
41:ec:6f:85:7e:08:cd:81:dc:7d:00:ab:de:ce:ca:
a9:e1:1c:d4:85:0f:55:24:14:fd:63:82:91:b4:90:
91:56:bc:9d:da:0c:b7:e5:fa:5b:9c:c7:66:1a:76:
e0:20:f1:07:c3:1c:6f:6c:8c:d2:b5:c1:ac:43:ee:
e0:0c:d9:b3:7d:5e:b0:fa:3d:88:b5:d5:d0:68:48:
25:a9:aa:d8:37:2e:f4:62:0e:50:43:14:bc:a8:05:
4d:fe:9c:ca:ec:cd:7b:56:34:ef:bd:d4:36:66:86:
9c:de:f3:13:26:76:a8:fa:02:b7:4c:d8:83:ad:93:
a6:a4:42:4d:5d:85:0a:89:17:0d:c2:4f:47:89:cb:
8a:48:a7:0c:fe:91:c7:72:ca:91:f4:5f:d6:4a:ae:
cf:0d:36:d3:25:42:e0:50:23:5e:31:4e:d0:a9:8f:
97:66:b1:90:24:df:91:fe:a3:ac:9c:d4:72:0b:9e:
3f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:56:CE:A7:37:F3:F4:DE:F7:A1:21:65:15:5D:73:E1:00:E6:FB:AE
X509v3 Authority Key Identifier:
keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/J1bOpzfz9N73oSFlFV1z4QDm-64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.239.1.0/24
Signature Algorithm: sha256WithRSAEncryption
75:20:0f:49:4d:77:d8:a9:e7:5a:e5:27:38:af:89:29:ce:58:
40:a7:e1:77:e7:08:9f:e8:a5:4f:19:67:90:d6:b6:d5:b2:a0:
6f:62:a0:c5:ed:f2:d1:ba:0a:57:4f:df:d3:6c:28:12:86:8e:
f6:2d:ae:dd:2d:d6:3b:ab:2e:dc:96:43:a5:e3:cf:f5:ab:de:
c4:0b:73:18:c5:87:eb:5d:a5:6c:73:ff:c4:5a:5c:03:97:ec:
c8:3c:6a:a0:7a:23:95:68:9d:0e:76:8c:00:82:db:07:da:19:
36:cd:06:89:6d:ee:81:ed:87:88:71:a6:3c:7d:20:f5:c5:47:
94:b3:2b:3a:aa:ec:54:93:8c:47:e2:25:de:d2:44:c3:44:0c:
7d:bf:18:78:a0:a4:47:c3:0e:7b:53:36:e5:84:49:08:07:16:
c4:22:b1:c8:c3:7f:25:0c:8b:86:f7:46:fd:45:98:2c:22:c1:
18:e2:7b:c1:68:2a:4b:5b:a6:35:19:ee:5f:2b:87:c7:b2:24:
6b:07:c3:1b:f5:f2:e0:82:37:35:47:77:6b:64:8e:eb:d9:60:
8c:1e:9b:66:15:f6:5c:81:80:7b:20:7a:b6:01:12:8f:ea:48:
24:a9:9b:b0:22:bb:1e:b2:ca:2d:26:25:45:e1:83:f7:d1:e0:
b4:29:d5:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:04:13 2026 by rpki-client