Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/333ea6-584a-4749-83c7-03d7461eb58a/1/pJSIOlE7etgRPHOV7NUiL4iDbe8.roa
File: pJSIOlE7etgRPHOV7NUiL4iDbe8.roa (raw, json)
Hash identifier: V6DbZKls0vS9eC0PuoKfqVERIziSa7fU4KNDwTwFtQc=
Subject key identifier: A4:94:88:3A:51:3B:7A:D8:11:3C:73:95:EC:D5:22:2F:88:83:6D:EF
Certificate issuer: /CN=75e6e212c63741b85b957c7c97f7c58f5b5e1335
Certificate serial: 019B7A5ADED15D982AD42CEDD477BF59614F
Authority key identifier: 75:E6:E2:12:C6:37:41:B8:5B:95:7C:7C:97:F7:C5:8F:5B:5E:13:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/debiEsY3QbhblXx8l_fFj1teEzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/333ea6-584a-4749-83c7-03d7461eb58a/1/pJSIOlE7etgRPHOV7NUiL4iDbe8.roa
Signing time: Thu 01 Jan 2026 16:18:54 +0000
ROA not before: Thu 01 Jan 2026 16:18:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35383
IP address blocks: 84.39.120.0/21 maxlen: 21
84.39.122.0/24 maxlen: 24
84.39.127.0/24 maxlen: 24
2a01:7a20::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/333ea6-584a-4749-83c7-03d7461eb58a/1/debiEsY3QbhblXx8l_fFj1teEzU.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/333ea6-584a-4749-83c7-03d7461eb58a/1/debiEsY3QbhblXx8l_fFj1teEzU.mft
rsync://rpki.ripe.net/repository/DEFAULT/debiEsY3QbhblXx8l_fFj1teEzU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:5a:de:d1:5d:98:2a:d4:2c:ed:d4:77:bf:59:61:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75e6e212c63741b85b957c7c97f7c58f5b5e1335
Validity
Not Before: Jan 1 16:18:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a494883a513b7ad8113c7395ecd5222f88836def
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c2:09:c5:87:09:b5:6c:25:ef:d6:91:7b:d2:
b8:fa:e6:48:3d:13:2a:a0:38:26:61:b1:db:af:2d:
66:fc:53:fc:7f:97:91:17:3e:9b:fb:51:7e:b3:69:
74:7f:80:ae:b6:cc:95:bf:f2:ad:04:2b:8e:56:16:
9e:db:20:1d:42:56:1b:d0:85:a3:ad:8f:23:b1:4a:
04:c8:72:4e:87:92:4d:c6:06:6b:cc:b5:d2:3a:f3:
7d:f6:6b:7b:7c:27:3d:17:78:b7:7b:7f:26:03:28:
fd:0e:75:b9:56:e5:ce:4b:fc:c3:65:b0:dd:c5:2c:
2a:ea:56:6f:d2:79:1b:50:36:ca:5c:86:ca:6a:88:
fd:7d:bc:f9:94:de:59:dd:84:30:31:71:6b:ac:17:
8f:bd:20:36:46:96:fe:38:b7:0f:ae:14:51:f2:81:
8c:27:82:76:13:2f:ff:fb:e6:20:0f:4a:51:84:d7:
72:db:f3:50:a1:0b:b6:7c:4f:69:23:fe:ec:b2:1c:
c8:dd:68:bf:2b:5a:fc:15:c3:40:94:a3:06:c4:e4:
0e:8d:26:a6:96:eb:f0:97:83:1c:14:89:88:c4:ca:
05:54:e4:a3:cc:e1:64:68:a0:51:ca:16:3c:87:ea:
51:0f:1e:e0:d8:c2:d8:9f:c4:a0:3e:86:54:89:7a:
ef:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:94:88:3A:51:3B:7A:D8:11:3C:73:95:EC:D5:22:2F:88:83:6D:EF
X509v3 Authority Key Identifier:
keyid:75:E6:E2:12:C6:37:41:B8:5B:95:7C:7C:97:F7:C5:8F:5B:5E:13:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/debiEsY3QbhblXx8l_fFj1teEzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/333ea6-584a-4749-83c7-03d7461eb58a/1/pJSIOlE7etgRPHOV7NUiL4iDbe8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/333ea6-584a-4749-83c7-03d7461eb58a/1/debiEsY3QbhblXx8l_fFj1teEzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.39.120.0/21
IPv6:
2a01:7a20::/32
Signature Algorithm: sha256WithRSAEncryption
27:b9:8e:1f:48:31:ec:4a:48:42:ab:5c:ba:e5:ff:c2:14:9d:
dd:23:e1:74:02:c0:ce:6e:5e:4e:53:95:18:e1:0f:11:6e:57:
70:11:62:ea:e2:c0:89:1c:b4:d4:87:1b:6c:88:7a:a9:7d:d3:
1f:81:2d:8f:a9:25:76:62:f8:24:c2:62:e6:e5:5f:f5:4f:42:
42:7f:33:b6:c6:23:31:e3:9d:4f:b2:1a:b1:ec:f7:16:e5:35:
93:3c:cb:24:c9:3f:b9:87:90:fd:4b:aa:1f:d3:94:b0:27:e9:
bd:c5:fd:0e:f1:29:a1:08:51:71:43:58:ce:32:1b:ad:4b:0b:
da:c2:5d:ba:e5:79:95:2d:55:c4:43:42:3e:48:29:19:66:53:
71:55:d0:18:c1:45:b5:1e:6a:39:81:d2:94:e6:6c:35:f3:c1:
19:9d:56:b6:32:49:53:88:73:9e:fa:bc:77:9f:e5:40:7d:07:
31:99:c6:20:d4:5b:5a:f5:ee:7a:8b:d5:25:3b:1a:07:45:7d:
df:ec:55:1c:3e:f7:59:9b:59:86:82:de:f7:76:59:0d:6d:8c:
ee:b4:c3:9d:47:79:18:1d:1f:82:e6:e8:90:10:2e:89:a8:ac:
75:b5:c7:79:4b:50:88:ed:47:84:46:c7:56:69:b9:78:c5:e7:
08:ea:10:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:50:39 2026 by rpki-client