Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/eb340f-8053-4f5f-a3a5-229b6409f2a0/1/J_AqbRRwbv9N6VWFHOb5S7w5E84.roa
File: J_AqbRRwbv9N6VWFHOb5S7w5E84.roa (raw, json)
Hash identifier: qnOkRGeYiVK7GUYOu7VW19sEbzCZQZR5A+RT6PLbwi0=
Subject key identifier: 27:F0:2A:6D:14:70:6E:FF:4D:E9:55:85:1C:E6:F9:4B:BC:39:13:CE
Certificate issuer: /CN=bf20e64b18831bc98527cbe0e1067c1a95d1687d
Certificate serial: 019C66E7CB398B785D1BEE3613D55214F25D
Authority key identifier: BF:20:E6:4B:18:83:1B:C9:85:27:CB:E0:E1:06:7C:1A:95:D1:68:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/eb340f-8053-4f5f-a3a5-229b6409f2a0/1/J_AqbRRwbv9N6VWFHOb5S7w5E84.roa
Signing time: Mon 16 Feb 2026 14:43:12 +0000
ROA not before: Mon 16 Feb 2026 14:43:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200409
IP address blocks: 77.83.112.0/22 maxlen: 24
130.78.220.0/23 maxlen: 24
194.32.172.0/22 maxlen: 24
2a0c:ea40::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/eb340f-8053-4f5f-a3a5-229b6409f2a0/1/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/eb340f-8053-4f5f-a3a5-229b6409f2a0/1/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:66:e7:cb:39:8b:78:5d:1b:ee:36:13:d5:52:14:f2:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf20e64b18831bc98527cbe0e1067c1a95d1687d
Validity
Not Before: Feb 16 14:43:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=27f02a6d14706eff4de955851ce6f94bbc3913ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:1f:f2:b0:00:b4:29:4c:98:2e:c4:66:7e:7c:
6a:60:f8:30:85:08:e7:75:b6:d1:ce:8b:72:23:19:
2e:21:9c:bb:10:9b:f6:33:a1:59:ba:37:22:25:13:
0f:fd:3f:da:68:ee:49:47:d4:5d:62:d4:48:34:ab:
57:af:71:bb:8f:5b:4c:e1:c5:f9:18:87:77:c1:33:
45:74:5b:f4:16:42:9a:2f:c7:04:56:db:66:98:2b:
1d:84:1d:fe:a9:88:68:f6:8f:cb:a3:fd:ed:c1:99:
5a:d1:e2:63:db:dc:0d:bd:86:1d:87:8c:f0:44:60:
c8:48:6a:0d:02:d8:cb:b1:05:08:fe:e4:0d:a4:d4:
71:dc:08:2e:f6:c9:fb:6d:dd:9d:a7:cb:5d:20:63:
af:78:ae:3f:ba:42:7d:a2:f6:a6:86:7f:3c:e7:a3:
96:d7:4b:1b:e1:1f:1c:55:98:2a:20:54:e2:e2:3d:
ae:e7:ef:b3:5e:c9:fa:fb:a4:b4:b5:20:49:1f:07:
a4:14:45:44:03:18:7d:cb:8a:08:d8:90:bd:e9:b6:
9a:39:2b:b3:e0:d2:a7:f5:ec:39:fd:5b:5d:e8:7b:
f0:6c:43:df:26:14:1a:4e:22:f6:ec:e4:f5:51:dd:
15:99:98:70:4d:29:53:96:99:ab:b4:83:54:a0:b7:
92:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:F0:2A:6D:14:70:6E:FF:4D:E9:55:85:1C:E6:F9:4B:BC:39:13:CE
X509v3 Authority Key Identifier:
keyid:BF:20:E6:4B:18:83:1B:C9:85:27:CB:E0:E1:06:7C:1A:95:D1:68:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/eb340f-8053-4f5f-a3a5-229b6409f2a0/1/J_AqbRRwbv9N6VWFHOb5S7w5E84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/eb340f-8053-4f5f-a3a5-229b6409f2a0/1/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.112.0/22
130.78.220.0/23
194.32.172.0/22
IPv6:
2a0c:ea40::/29
Signature Algorithm: sha256WithRSAEncryption
9f:46:76:c1:50:de:f3:b5:34:b3:fe:26:a6:ea:c4:20:86:3f:
42:00:e3:cd:7d:8b:f5:f9:71:69:5c:3d:4f:fb:5c:31:a8:b4:
5f:2b:4d:0c:f1:d9:6e:26:3c:4b:6a:6b:e4:81:81:6a:54:2b:
9e:0d:0c:6e:79:42:0b:cf:f8:fa:c2:bf:09:59:2d:77:7c:42:
30:54:bc:95:6d:97:94:b5:b6:7c:d3:a1:ef:e1:8f:1c:b7:e4:
f3:67:af:e4:d9:cc:b6:da:49:6e:82:29:d8:70:6b:83:1c:ea:
d7:81:e6:95:db:f9:1f:e2:76:40:b4:25:13:4a:a9:49:98:2a:
e1:76:3e:97:24:9d:e6:90:ba:a2:70:11:8d:94:bf:ce:40:06:
35:ab:fe:e5:83:65:61:fa:74:7c:19:fe:a2:c3:5c:65:a3:c7:
9c:eb:72:24:a3:db:b6:9b:89:6e:b0:b0:8e:29:d2:cc:42:41:
7a:82:1c:35:03:69:80:0f:46:f9:62:51:0e:17:75:5b:c0:d0:
52:66:97:46:80:5e:db:f9:d3:1d:ab:9f:32:da:4b:5e:e1:b8:
33:6d:65:04:fa:e6:52:92:88:1f:10:87:f8:4e:3f:98:50:9b:
71:2d:e2:b7:6e:0d:92:fe:74:a5:0e:72:cd:55:da:71:a7:fe:
4a:af:03:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:17:48 2026 by rpki-client