Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/78e03c-c9c7-4c85-bfdd-e8baf9ffadf8/1/jpyJdp9pVbvs1-8_fIYxVhnl96o.roa
File: jpyJdp9pVbvs1-8_fIYxVhnl96o.roa (raw, json)
Hash identifier: oOtfLMrxKeo2H6VS8YJdihkaYbP5cIULyDJARVZSWVQ=
Subject key identifier: 8E:9C:89:76:9F:69:55:BB:EC:D7:EF:3F:7C:86:31:56:19:E5:F7:AA
Certificate issuer: /CN=6ed0392ac7660bd1460fa1d5031d1840d01b9412
Certificate serial: 019C28467C8B8D9673817B5B124BFA70C3CC
Authority key identifier: 6E:D0:39:2A:C7:66:0B:D1:46:0F:A1:D5:03:1D:18:40:D0:1B:94:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/btA5KsdmC9FGD6HVAx0YQNAblBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/78e03c-c9c7-4c85-bfdd-e8baf9ffadf8/1/jpyJdp9pVbvs1-8_fIYxVhnl96o.roa
Signing time: Wed 04 Feb 2026 10:50:33 +0000
ROA not before: Wed 04 Feb 2026 10:50:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6939
IP address blocks: 85.116.204.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/78e03c-c9c7-4c85-bfdd-e8baf9ffadf8/1/btA5KsdmC9FGD6HVAx0YQNAblBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/78e03c-c9c7-4c85-bfdd-e8baf9ffadf8/1/btA5KsdmC9FGD6HVAx0YQNAblBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/btA5KsdmC9FGD6HVAx0YQNAblBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:28:46:7c:8b:8d:96:73:81:7b:5b:12:4b:fa:70:c3:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed0392ac7660bd1460fa1d5031d1840d01b9412
Validity
Not Before: Feb 4 10:50:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8e9c89769f6955bbecd7ef3f7c86315619e5f7aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e1:e7:6d:9f:d6:c9:ba:aa:f5:1d:cd:2a:78:
ac:9c:8b:5d:87:36:9c:a7:22:a2:ec:ae:05:68:13:
70:83:5f:c6:5b:5a:ee:16:26:22:29:af:e1:4f:1d:
e4:f9:75:19:0a:06:d3:30:87:18:94:73:1c:be:46:
f3:45:3f:cd:77:17:10:88:16:79:1b:f7:6a:6c:a7:
8f:13:5b:5a:f0:8c:ce:55:70:37:b0:70:10:b5:5e:
13:4b:eb:0c:0e:55:76:48:60:f1:eb:42:31:8d:d7:
5c:e0:80:fe:69:63:b6:bc:34:f5:1d:99:44:c9:9b:
a6:90:80:e6:d2:eb:06:df:73:e1:ae:43:b0:f7:d9:
1a:2a:07:76:89:79:25:09:63:e3:d3:40:aa:ed:5d:
6e:66:06:33:55:31:1e:13:c3:a6:6a:51:39:21:68:
5e:26:ef:78:e7:b8:fb:86:5f:74:9f:40:cf:f8:90:
b4:61:eb:55:42:67:9b:ed:55:92:1a:30:60:58:84:
0d:fd:a0:9b:86:66:9c:11:dc:b6:e9:00:94:28:6a:
3e:bc:04:32:c0:05:0d:3d:9a:b5:f4:49:b4:bc:4e:
0b:b7:c5:07:28:55:b6:70:2a:eb:e3:53:d1:9b:ce:
aa:70:99:bd:b0:62:37:44:a2:86:15:bc:3e:46:83:
09:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:9C:89:76:9F:69:55:BB:EC:D7:EF:3F:7C:86:31:56:19:E5:F7:AA
X509v3 Authority Key Identifier:
keyid:6E:D0:39:2A:C7:66:0B:D1:46:0F:A1:D5:03:1D:18:40:D0:1B:94:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/btA5KsdmC9FGD6HVAx0YQNAblBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/78e03c-c9c7-4c85-bfdd-e8baf9ffadf8/1/jpyJdp9pVbvs1-8_fIYxVhnl96o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/78e03c-c9c7-4c85-bfdd-e8baf9ffadf8/1/btA5KsdmC9FGD6HVAx0YQNAblBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.116.204.0/22
Signature Algorithm: sha256WithRSAEncryption
38:06:e5:6a:d6:fd:f4:5e:83:e0:43:61:df:9c:35:69:3b:16:
11:fc:72:d2:71:6b:83:4b:f1:b7:f7:0b:c9:c4:27:04:1e:12:
08:a3:5a:ae:6f:73:6c:3b:46:72:c0:d1:3b:6e:a3:19:56:9f:
88:0c:c9:3c:ad:47:a6:cf:b8:11:78:2f:ec:a0:3a:54:cf:68:
d3:e8:5a:a6:59:32:c1:7f:d8:02:21:3c:78:67:4d:c8:f0:36:
70:52:18:98:b5:e5:5e:65:2f:a4:d0:b9:58:6f:c8:ad:16:ad:
fb:31:a1:34:c0:e0:40:78:ed:99:37:eb:b7:62:bc:0e:3c:ce:
6d:7f:ee:5c:60:c4:79:15:69:6d:5d:c1:3e:b1:b3:25:7f:e0:
b8:9b:64:34:8f:96:3e:6d:16:68:b0:49:76:f3:86:20:8c:91:
87:25:9f:65:28:bc:89:c5:14:1e:38:eb:69:d5:31:b9:0d:13:
12:dc:15:3f:d5:63:0f:c6:fb:2f:a9:3d:30:ac:9c:7b:37:75:
a0:0b:a4:9d:fd:37:1a:fb:15:63:d1:57:3c:7c:75:5b:0b:92:
43:81:0b:8b:2d:cb:1a:d1:9a:f3:14:74:20:5d:b8:91:0a:f1:
b0:94:3a:60:d5:f5:5f:87:36:f2:5b:74:77:2f:ba:63:d8:8a:
ce:d8:14:3c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZwoRnyLjZZzgXtbEkv6cMPMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlZDAzOTJhYzc2NjBiZDE0NjBmYTFkNTAzMWQxODQwZDAx
Yjk0MTIwHhcNMjYwMjA0MTA1MDMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZTljODk3NjlmNjk1NWJiZWNkN2VmM2Y3Yzg2MzE1NjE5ZTVmN2FhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsuHnbZ/Wybqq9R3NKnisnItdhzac
pyKi7K4FaBNwg1/GW1ruFiYiKa/hTx3k+XUZCgbTMIcYlHMcvkbzRT/NdxcQiBZ5
G/dqbKePE1ta8IzOVXA3sHAQtV4TS+sMDlV2SGDx60Ixjddc4ID+aWO2vDT1HZlE
yZumkIDm0usG33PhrkOw99kaKgd2iXklCWPj00Cq7V1uZgYzVTEeE8OmalE5IWhe
Ju9457j7hl90n0DP+JC0YetVQmeb7VWSGjBgWIQN/aCbhmacEdy26QCUKGo+vAQy
wAUNPZq19Em0vE4Lt8UHKFW2cCrr41PRm86qcJm9sGI3RKKGFbw+RoMJiQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFI6ciXafaVW77NfvP3yGMVYZ5feqMB8GA1UdIwQY
MBaAFG7QOSrHZgvRRg+h1QMdGEDQG5QSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnRBNUtzZG1DOUZHRDZIVkF4MFlRTkFibEJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83OGUwM2MtYzljNy00Yzg1LWJmZGQt
ZThiYWY5ZmZhZGY4LzEvanB5SmRwOXBWYnZzMS04X2ZJWXhWaG5sOTZvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi83OGUwM2MtYzljNy00Yzg1LWJmZGQtZThiYWY5ZmZhZGY4
LzEvYnRBNUtzZG1DOUZHRDZIVkF4MFlRTkFibEJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCVXTMMA0G
CSqGSIb3DQEBCwUAA4IBAQA4BuVq1v30XoPgQ2HfnDVpOxYR/HLScWuDS/G39wvJ
xCcEHhIIo1qub3NsO0ZywNE7bqMZVp+IDMk8rUemz7gReC/soDpUz2jT6FqmWTLB
f9gCITx4Z03I8DZwUhiYteVeZS+k0LlYb8itFq37MaE0wOBAeO2ZN+u3YrwOPM5t
f+5cYMR5FWltXcE+sbMlf+C4m2Q0j5Y+bRZosEl284YgjJGHJZ9lKLyJxRQeOOtp
1TG5DRMS3BU/1WMPxvsvqT0wrJx7N3WgC6Sd/Tca+xVj0Vc8fHVbC5JDgQuLLcsa
0ZrzFHQgXbiRCvGwlDpg1fVfhzbyW3R3L7pj2IrO2BQ8
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:59:04 2026 by rpki-client