Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/j5414WUIpaCt-qN4h2WFbPFDWv0.roa
File: j5414WUIpaCt-qN4h2WFbPFDWv0.roa (raw, json)
Hash identifier: 2uB/VcI/IKJSBCDd5OOgl7y5bT90P+14SG+d0PV1i98=
Subject key identifier: 8F:9E:35:E1:65:08:A5:A0:AD:FA:A3:78:87:65:85:6C:F1:43:5A:FD
Certificate issuer: /CN=64c0bc594af811753dfc116af459b1b874471489
Certificate serial: 01A0BEA7DC7850D0FAFB9841347CDDA54411
Authority key identifier: 64:C0:BC:59:4A:F8:11:75:3D:FC:11:6A:F4:59:B1:B8:74:47:14:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/j5414WUIpaCt-qN4h2WFbPFDWv0.roa
Signing time: Sun 20 Sep 2026 11:51:07 +0000
ROA not before: Sun 20 Sep 2026 11:51:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15731
IP address blocks: 185.30.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:be:a7:dc:78:50:d0:fa:fb:98:41:34:7c:dd:a5:44:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64c0bc594af811753dfc116af459b1b874471489
Validity
Not Before: Sep 20 11:51:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8f9e35e16508a5a0adfaa3788765856cf1435afd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:5a:0f:36:12:2e:74:83:07:e6:6b:c1:79:89:
cc:59:ba:41:87:f7:6e:d5:72:ba:df:b7:4c:32:92:
1e:d2:c7:45:05:8b:7f:8b:5e:c0:4b:24:41:51:eb:
ab:1b:40:b0:a3:2a:30:5b:4d:76:f9:db:b3:f5:b5:
4f:3c:37:15:06:f5:b9:a3:71:5c:9d:0f:9d:cb:e7:
ce:3b:b4:49:01:01:74:26:6f:91:91:88:e7:43:01:
4e:7b:32:e8:88:1d:a3:74:71:dc:4f:cf:c4:07:ad:
e9:6a:b1:12:75:68:39:7e:ac:42:53:6e:ec:59:67:
60:57:bb:60:72:77:83:1c:1c:89:7f:89:f2:36:62:
12:7d:1c:1b:6d:04:22:38:2c:61:79:d9:da:eb:55:
a9:5c:dc:90:2b:eb:3b:8d:4c:44:4d:96:d1:56:3c:
4c:a9:2a:16:8f:1f:67:70:ca:ba:30:89:3a:72:78:
4a:89:20:49:71:d1:97:d6:e4:3d:96:b8:ae:07:9e:
b4:ec:50:b9:ce:75:2e:25:96:07:ca:9d:43:6a:5c:
29:61:b5:a1:6b:c0:05:15:f6:dd:f5:9c:c2:a8:ac:
0e:89:41:75:e6:12:2d:17:41:74:12:43:e1:48:64:
7e:33:e1:fa:8c:92:3a:ba:bc:b9:e4:b4:07:33:b3:
8b:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:9E:35:E1:65:08:A5:A0:AD:FA:A3:78:87:65:85:6C:F1:43:5A:FD
X509v3 Authority Key Identifier:
keyid:64:C0:BC:59:4A:F8:11:75:3D:FC:11:6A:F4:59:B1:B8:74:47:14:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/j5414WUIpaCt-qN4h2WFbPFDWv0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.30.214.0/24
Signature Algorithm: sha256WithRSAEncryption
77:37:95:69:7a:ff:54:96:e9:1d:83:2c:f9:b2:5a:57:23:1c:
2a:c4:29:cd:20:21:3a:31:f4:d4:4b:85:e0:19:4f:0f:6d:ad:
ea:af:8f:6b:34:59:dc:97:c8:64:3e:4f:88:8f:fc:e8:f2:fe:
a4:ab:30:54:6c:0f:14:1b:89:4a:54:e2:aa:7d:88:a4:07:4c:
6f:f4:15:30:c2:e1:48:ec:98:75:da:04:8c:96:06:cd:de:23:
93:18:63:7f:22:3b:87:29:54:2b:d8:11:91:59:f7:b5:3d:55:
32:44:dc:6f:5e:9a:15:7e:67:b2:fc:a2:ea:fe:64:f2:4e:e2:
f9:ac:a0:0c:d1:0f:e2:81:e8:18:c7:2c:b5:9a:5a:81:11:b7:
97:94:72:4f:c8:47:b9:df:6a:cb:cd:4a:72:9a:6b:ba:a8:85:
e8:e9:75:e2:84:23:d4:68:43:e4:98:da:52:ab:74:21:e6:1e:
4b:66:38:97:e9:bb:ae:ca:6f:3d:eb:c4:8b:4b:ae:c8:67:35:
31:15:31:d4:ea:fc:d1:b9:fd:82:17:58:06:f8:87:94:9d:e3:
26:ed:31:c3:84:48:21:22:ab:76:10:40:4b:41:72:fc:18:43:
91:43:23:bb:25:39:7d:94:76:1e:c1:25:b7:17:70:52:5c:54:
6b:05:f3:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:56:27 2026 by rpki-client