Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/jHOSi9_oJekIEx4EmUwyddmGDN8.roa
File: jHOSi9_oJekIEx4EmUwyddmGDN8.roa (raw, json)
Hash identifier: Ntcg6Twu+N2HgOTH++SeVjtpqrilgEpyp5kKVNoLrTg=
Subject key identifier: 8C:73:92:8B:DF:E8:25:E9:08:13:1E:04:99:4C:32:75:D9:86:0C:DF
Certificate issuer: /CN=0b5caf262fdbfcc5ff30e28a5104646e27a89262
Certificate serial: 019BFEC23A5A453460A79A033AB2FAFFE91F
Authority key identifier: 0B:5C:AF:26:2F:DB:FC:C5:FF:30:E2:8A:51:04:64:6E:27:A8:92:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1yvJi_b_MX_MOKKUQRkbieokmI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/jHOSi9_oJekIEx4EmUwyddmGDN8.roa
Signing time: Tue 27 Jan 2026 09:21:40 +0000
ROA not before: Tue 27 Jan 2026 09:21:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39686
IP address blocks: 193.247.198.0/24 maxlen: 24
193.247.199.0/24 maxlen: 24
2a05:b2c4::/31 maxlen: 31
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/C1yvJi_b_MX_MOKKUQRkbieokmI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/C1yvJi_b_MX_MOKKUQRkbieokmI.mft
rsync://rpki.ripe.net/repository/DEFAULT/C1yvJi_b_MX_MOKKUQRkbieokmI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:fe:c2:3a:5a:45:34:60:a7:9a:03:3a:b2:fa:ff:e9:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b5caf262fdbfcc5ff30e28a5104646e27a89262
Validity
Not Before: Jan 27 09:21:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8c73928bdfe825e908131e04994c3275d9860cdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0a:06:a0:22:59:6c:66:3f:5d:4e:55:34:39:
53:de:5b:36:53:0e:9e:ba:05:cb:5c:fc:d7:cf:73:
2c:79:08:f8:d2:ca:2a:90:20:9b:ce:d4:ad:87:20:
b5:a6:8c:34:5d:89:ba:4f:22:bf:28:0a:6b:8d:cc:
e4:bb:3b:83:b1:d6:a9:84:24:2b:08:f5:d8:d2:fb:
fb:8f:c2:35:a3:92:aa:2d:c8:00:99:74:f9:04:28:
01:8c:ce:b0:a0:96:28:ae:79:b9:2e:35:43:77:83:
80:e0:7a:01:01:f4:47:dd:16:6f:21:fb:aa:7a:69:
53:b1:d1:03:c9:e6:80:79:c8:a1:d9:1b:8b:81:99:
bc:d9:79:3b:ae:c9:90:41:62:a7:c4:a3:f7:02:f0:
9f:f9:95:8a:da:89:49:50:a4:68:73:15:20:d0:31:
3f:4e:de:c5:e1:4d:65:b1:15:b1:85:e4:11:4f:5b:
9f:45:4e:90:98:71:d0:4b:ee:32:50:6e:45:9e:74:
48:71:92:cf:de:9b:5c:d5:48:03:9c:7d:d9:41:b8:
42:a6:15:f3:5e:0e:08:ab:32:86:de:09:48:14:ea:
56:e2:b0:35:48:11:bd:d9:04:bf:a3:11:64:32:ea:
a8:cf:4f:45:38:fe:43:c8:d8:34:12:94:68:cb:65:
22:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:73:92:8B:DF:E8:25:E9:08:13:1E:04:99:4C:32:75:D9:86:0C:DF
X509v3 Authority Key Identifier:
keyid:0B:5C:AF:26:2F:DB:FC:C5:FF:30:E2:8A:51:04:64:6E:27:A8:92:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1yvJi_b_MX_MOKKUQRkbieokmI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/jHOSi9_oJekIEx4EmUwyddmGDN8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/C1yvJi_b_MX_MOKKUQRkbieokmI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.247.198.0/23
IPv6:
2a05:b2c4::/31
Signature Algorithm: sha256WithRSAEncryption
18:b9:b0:45:c9:a8:25:d4:70:62:37:0d:ab:0d:68:5e:c4:24:
f7:78:14:39:49:54:ee:db:a1:5b:1c:62:61:e9:1d:e2:42:51:
52:f3:9e:46:38:ea:7c:18:bb:12:ae:a7:64:b9:00:64:88:31:
96:c6:90:43:d4:2c:f6:10:fa:30:b0:35:32:3a:0c:27:d5:3e:
72:cb:0c:96:09:ce:e0:fc:0c:60:f3:ff:a9:b2:cb:48:7c:e0:
1f:bc:b8:fb:50:30:6a:63:6d:77:9d:d2:7e:11:d2:15:92:04:
3b:00:05:6c:28:1e:cc:81:21:ab:ad:0f:ea:12:bf:41:21:4e:
d6:72:b5:31:70:97:76:91:1c:f8:ee:ea:59:52:8f:91:57:bc:
03:01:25:eb:57:3b:18:81:ea:62:12:73:7c:b3:c5:6a:22:95:
5f:3c:41:bf:d2:4b:ef:27:80:55:18:1c:10:5e:f1:69:bf:02:
c2:3f:2f:ca:47:1b:af:47:e8:88:17:09:f9:a0:fa:d8:b0:54:
c2:4b:20:47:d7:f2:19:8c:e0:c2:02:b7:8b:4d:d1:31:1a:d0:
3f:f2:95:7c:d9:ae:a6:32:9b:7b:7d:bc:a1:46:89:b5:b0:f4:
8a:83:b7:f3:bb:af:07:97:ab:47:17:92:e2:21:35:8c:d7:5b:
37:d2:d1:94
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZv+wjpaRTRgp5oDOrL6/+kfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiNWNhZjI2MmZkYmZjYzVmZjMwZTI4YTUxMDQ2NDZlMjdh
ODkyNjIwHhcNMjYwMTI3MDkyMTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YzczOTI4YmRmZTgyNWU5MDgxMzFlMDQ5OTRjMzI3NWQ5ODYwY2RmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugoGoCJZbGY/XU5VNDlT3ls2Uw6e
ugXLXPzXz3MseQj40soqkCCbztSthyC1pow0XYm6TyK/KAprjczkuzuDsdaphCQr
CPXY0vv7j8I1o5KqLcgAmXT5BCgBjM6woJYornm5LjVDd4OA4HoBAfRH3RZvIfuq
emlTsdEDyeaAecih2RuLgZm82Xk7rsmQQWKnxKP3AvCf+ZWK2olJUKRocxUg0DE/
Tt7F4U1lsRWxheQRT1ufRU6QmHHQS+4yUG5FnnRIcZLP3ptc1UgDnH3ZQbhCphXz
Xg4IqzKG3glIFOpW4rA1SBG92QS/oxFkMuqoz09FOP5DyNg0EpRoy2UiEQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFIxzkovf6CXpCBMeBJlMMnXZhgzfMB8GA1UdIwQY
MBaAFAtcryYv2/zF/zDiilEEZG4nqJJiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzF5dkppX2JfTVhfTU9LS1VRUmtiaWVva21JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9mNGI4ZTktNjg2ZC00MWJlLTk4OTEt
ZGYxZTk1ZDdlZGQ5LzEvakhPU2k5X29KZWtJRXg0RW1Vd3lkZG1HRE44LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9mNGI4ZTktNjg2ZC00MWJlLTk4OTEtZGYxZTk1ZDdlZGQ5
LzEvQzF5dkppX2JfTVhfTU9LS1VRUmtiaWVva21JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBwffGMA0E
AgACMAcDBQEqBbLEMA0GCSqGSIb3DQEBCwUAA4IBAQAYubBFyagl1HBiNw2rDWhe
xCT3eBQ5SVTu26FbHGJh6R3iQlFS855GOOp8GLsSrqdkuQBkiDGWxpBD1Cz2EPow
sDUyOgwn1T5yywyWCc7g/Axg8/+psstIfOAfvLj7UDBqY213ndJ+EdIVkgQ7AAVs
KB7MgSGrrQ/qEr9BIU7WcrUxcJd2kRz47upZUo+RV7wDASXrVzsYgepiEnN8s8Vq
IpVfPEG/0kvvJ4BVGBwQXvFpvwLCPy/KRxuvR+iIFwn5oPrYsFTCSyBH1/IZjODC
AreLTdExGtA/8pV82a6mMpt7fbyhRom1sPSKg7fzu68Hl6tHF5LiITWM11s30tGU
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:06:47 2026 by rpki-client