Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/J2KPu7SF8-IgFc_PEWtKR0GI_cU.roa
File: J2KPu7SF8-IgFc_PEWtKR0GI_cU.roa (raw, json)
Hash identifier: VJE0x80m0wxxgNfwYsal4K/ZZSwAp/QnDuAp90J4C0U=
Subject key identifier: 27:62:8F:BB:B4:85:F3:E2:20:15:CF:CF:11:6B:4A:47:41:88:FD:C5
Certificate issuer: /CN=64c0bc594af811753dfc116af459b1b874471489
Certificate serial: 019D43144F196C61B1E3484FFEB0BD6AB5AD
Authority key identifier: 64:C0:BC:59:4A:F8:11:75:3D:FC:11:6A:F4:59:B1:B8:74:47:14:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/J2KPu7SF8-IgFc_PEWtKR0GI_cU.roa
Signing time: Tue 31 Mar 2026 08:48:17 +0000
ROA not before: Tue 31 Mar 2026 08:48:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20473
IP address blocks: 185.30.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:43:14:4f:19:6c:61:b1:e3:48:4f:fe:b0:bd:6a:b5:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64c0bc594af811753dfc116af459b1b874471489
Validity
Not Before: Mar 31 08:48:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=27628fbbb485f3e22015cfcf116b4a474188fdc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d6:2a:06:0e:4d:2c:05:48:b2:92:f1:ff:c2:
d1:f5:f9:e1:b8:3e:ab:8d:77:28:82:c1:f3:20:db:
80:59:55:32:1a:8a:9e:0b:95:33:c9:9c:9d:a1:d7:
d8:bc:0f:d5:34:d9:70:c5:3d:d7:85:5f:f6:ae:52:
00:0b:b5:ce:c1:d2:89:7e:57:8e:81:2e:f7:07:2c:
c3:b6:49:93:59:ae:49:81:20:50:27:64:a2:71:86:
27:6d:06:8d:5f:3a:85:bf:38:47:fe:d7:47:4e:b1:
4d:43:47:b9:6e:10:5a:94:a9:68:14:83:db:cd:0e:
8e:ac:18:c5:59:a2:b3:65:ec:45:1d:1e:38:d8:af:
59:30:94:50:30:3d:16:a9:cf:16:32:15:60:11:b5:
c2:33:6a:5b:03:4f:a1:8b:f8:c9:db:7d:e0:fd:b1:
2b:43:30:e8:47:47:c3:df:a6:73:ac:a8:b8:92:11:
2a:f7:bf:ca:9b:7c:f1:65:5d:5c:2f:56:18:c3:13:
68:fb:3f:87:1d:d3:a6:b9:92:5a:38:40:66:0f:dd:
25:81:64:4d:6e:0d:b0:55:c6:fb:0c:e1:27:e6:fd:
b7:3f:b1:87:e7:59:a1:39:b6:06:0b:60:89:dd:2e:
9d:70:59:73:7d:ed:3d:89:f9:09:73:5a:5a:d6:d7:
70:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:62:8F:BB:B4:85:F3:E2:20:15:CF:CF:11:6B:4A:47:41:88:FD:C5
X509v3 Authority Key Identifier:
keyid:64:C0:BC:59:4A:F8:11:75:3D:FC:11:6A:F4:59:B1:B8:74:47:14:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/J2KPu7SF8-IgFc_PEWtKR0GI_cU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.30.215.0/24
Signature Algorithm: sha256WithRSAEncryption
36:6c:89:2f:5a:a3:28:71:af:48:9b:1e:5f:f3:0f:d0:df:d7:
08:c0:db:22:5f:a0:06:e1:07:db:50:7f:bb:85:87:29:a5:02:
45:f8:f9:87:3e:46:50:29:4e:5b:97:45:45:a3:c6:d0:7c:98:
d1:9b:92:9f:bd:85:ef:93:5b:40:53:44:5b:ab:aa:2d:e6:8d:
34:09:c6:69:34:8b:0d:cb:e0:49:c8:57:78:7c:71:30:72:b7:
d8:72:22:b8:1f:05:4a:dc:d5:c0:23:f5:ba:dc:59:86:67:3e:
5d:b3:38:04:f3:b5:27:89:76:25:51:29:1f:ca:c9:70:4a:3e:
14:67:03:f7:80:c0:7d:de:31:fc:05:08:97:0d:17:6d:dd:ed:
06:b1:47:87:fd:5b:fe:9a:f2:e1:55:a6:c1:73:ba:97:63:7b:
49:45:b1:bf:52:3e:60:88:84:f1:fb:1b:8d:a0:b5:ca:f2:5f:
23:ff:9d:90:6d:ec:d6:35:42:ff:a7:c1:bd:01:79:2a:4b:0e:
7d:eb:24:66:91:7c:f8:c4:96:f9:86:8b:a4:9e:63:3b:3c:a3:
95:db:23:d9:31:66:bd:56:46:61:18:a7:99:3b:66:a1:1f:fc:
6b:97:39:ac:60:36:56:ba:7c:24:d6:66:40:68:c4:d0:44:93:
9a:f9:1c:a5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ1DFE8ZbGGx40hP/rC9arWtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0YzBiYzU5NGFmODExNzUzZGZjMTE2YWY0NTliMWI4NzQ0
NzE0ODkwHhcNMjYwMzMxMDg0ODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNzYyOGZiYmI0ODVmM2UyMjAxNWNmY2YxMTZiNGE0NzQxODhmZGM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdYqBg5NLAVIspLx/8LR9fnhuD6r
jXcogsHzINuAWVUyGoqeC5UzyZydodfYvA/VNNlwxT3XhV/2rlIAC7XOwdKJfleO
gS73ByzDtkmTWa5JgSBQJ2SicYYnbQaNXzqFvzhH/tdHTrFNQ0e5bhBalKloFIPb
zQ6OrBjFWaKzZexFHR442K9ZMJRQMD0Wqc8WMhVgEbXCM2pbA0+hi/jJ233g/bEr
QzDoR0fD36ZzrKi4khEq97/Km3zxZV1cL1YYwxNo+z+HHdOmuZJaOEBmD90lgWRN
bg2wVcb7DOEn5v23P7GH51mhObYGC2CJ3S6dcFlzfe09ifkJc1pa1tdwTwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCdij7u0hfPiIBXPzxFrSkdBiP3FMB8GA1UdIwQY
MBaAFGTAvFlK+BF1PfwRavRZsbh0RxSJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWk1DOFdVcjRFWFU5X0JGcTlGbXh1SFJIRklrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iNDhiZmQtNzk3ZC00N2E5LThhNjIt
NDQzMTNiNDNlNTk0LzEvSjJLUHU3U0Y4LUlnRmNfUEVXdEtSMEdJX2NVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi9iNDhiZmQtNzk3ZC00N2E5LThhNjItNDQzMTNiNDNlNTk0
LzEvWk1DOFdVcjRFWFU5X0JGcTlGbXh1SFJIRklrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuR7XMA0G
CSqGSIb3DQEBCwUAA4IBAQA2bIkvWqMoca9Imx5f8w/Q39cIwNsiX6AG4QfbUH+7
hYcppQJF+PmHPkZQKU5bl0VFo8bQfJjRm5KfvYXvk1tAU0Rbq6ot5o00CcZpNIsN
y+BJyFd4fHEwcrfYciK4HwVK3NXAI/W63FmGZz5dszgE87UniXYlUSkfyslwSj4U
ZwP3gMB93jH8BQiXDRdt3e0GsUeH/Vv+mvLhVabBc7qXY3tJRbG/Uj5giITx+xuN
oLXK8l8j/52QbezWNUL/p8G9AXkqSw596yRmkXz4xJb5houknmM7PKOV2yPZMWa9
VkZhGKeZO2ahH/xrlzmsYDZWunwk1mZAaMTQRJOa+Ryl
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:51:52 2026 by rpki-client