Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/88/fd1dd5-3294-4550-a3e6-9aabb99fa10c/1/j2ZKQ_RP0pW4ha3iJS6LUS2RxvQ.roa
File: j2ZKQ_RP0pW4ha3iJS6LUS2RxvQ.roa (raw, json)
Hash identifier: 324nY+Or3t4CapZD40Ksbrzo26apvn/Md/6kgiF3MEw=
Subject key identifier: 8F:66:4A:43:F4:4F:D2:95:B8:85:AD:E2:25:2E:8B:51:2D:91:C6:F4
Certificate issuer: /CN=0f9c5ae94caded875c8db2f5833ca88d2f68ed0e
Certificate serial: 01A09659726F0878FD778D3A4F56E881040D
Authority key identifier: 0F:9C:5A:E9:4C:AD:ED:87:5C:8D:B2:F5:83:3C:A8:8D:2F:68:ED:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/fd1dd5-3294-4550-a3e6-9aabb99fa10c/1/j2ZKQ_RP0pW4ha3iJS6LUS2RxvQ.roa
Signing time: Sat 12 Sep 2026 16:00:39 +0000
ROA not before: Sat 12 Sep 2026 16:00:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21339
IP address blocks: 158.94.215.0/24 maxlen: 24
176.124.68.0/23 maxlen: 24
185.61.164.0/22 maxlen: 24
193.187.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/fd1dd5-3294-4550-a3e6-9aabb99fa10c/1/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/fd1dd5-3294-4550-a3e6-9aabb99fa10c/1/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.mft
rsync://rpki.ripe.net/repository/DEFAULT/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 19:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:96:59:72:6f:08:78:fd:77:8d:3a:4f:56:e8:81:04:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f9c5ae94caded875c8db2f5833ca88d2f68ed0e
Validity
Not Before: Sep 12 16:00:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8f664a43f44fd295b885ade2252e8b512d91c6f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:38:37:17:1a:ff:23:eb:c4:21:e4:93:3e:97:
92:27:29:17:f9:3b:8a:52:e0:45:9a:39:cb:dc:aa:
d7:4a:0a:ab:56:5f:bb:fe:ef:4f:f7:f8:0f:82:5e:
d0:b8:3a:ac:98:8e:e7:75:86:8b:32:99:60:91:84:
98:bd:b0:02:15:6d:df:78:8c:de:5b:39:f1:2a:e2:
d5:bf:bd:ed:50:21:c7:6a:52:39:65:c7:58:63:43:
0d:c5:3b:e2:8d:09:92:99:38:42:46:00:db:ef:34:
ca:c2:87:e4:a7:28:ef:db:b9:67:be:82:01:e1:f2:
d0:44:1d:e6:0e:ae:9b:76:71:0d:a2:14:64:d8:82:
ce:96:7d:0e:15:69:3f:93:4b:c1:08:57:fb:4d:59:
93:a1:42:15:ee:e5:00:05:19:95:bf:1e:eb:a6:9c:
1b:d2:63:4d:df:29:ea:c3:b3:3d:71:ab:13:eb:a6:
88:d3:a4:fd:9a:b8:ce:4a:5e:ed:de:c8:c0:80:b0:
bb:5c:79:ec:03:a6:a5:df:6b:b7:d1:5c:7f:33:13:
42:7c:4a:b0:65:06:e1:4a:ef:5e:5f:4d:4f:45:d9:
7d:fe:bd:99:ed:52:7f:77:db:92:d7:5e:aa:41:d9:
c3:bd:68:12:4f:15:a6:bc:7f:15:f5:07:65:11:ba:
f8:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:66:4A:43:F4:4F:D2:95:B8:85:AD:E2:25:2E:8B:51:2D:91:C6:F4
X509v3 Authority Key Identifier:
keyid:0F:9C:5A:E9:4C:AD:ED:87:5C:8D:B2:F5:83:3C:A8:8D:2F:68:ED:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/fd1dd5-3294-4550-a3e6-9aabb99fa10c/1/j2ZKQ_RP0pW4ha3iJS6LUS2RxvQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/fd1dd5-3294-4550-a3e6-9aabb99fa10c/1/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.94.215.0/24
176.124.68.0/23
185.61.164.0/22
193.187.99.0/24
Signature Algorithm: sha256WithRSAEncryption
18:99:3d:1e:3a:a2:7c:d4:f6:34:67:5b:fa:c6:e2:c1:54:7d:
94:8f:c2:27:63:f7:e5:df:85:fb:ad:3e:3c:03:55:ce:48:82:
05:54:f4:c9:ce:5d:2e:86:25:96:3c:2d:f3:10:68:26:a3:36:
db:65:b1:50:2e:36:ee:3d:ef:c0:c6:d2:91:c1:46:32:b5:73:
a4:32:23:9f:e0:05:54:38:4c:95:be:df:d2:12:41:6e:6a:6a:
35:36:06:be:d0:18:e4:05:50:76:17:78:46:6d:89:f4:8f:14:
3b:36:bd:9e:01:dd:07:0a:e6:12:42:40:83:cf:b7:24:16:1e:
a2:f3:46:6f:9b:ed:39:c0:2d:16:a8:cb:bc:da:d6:f2:be:23:
47:f8:a0:e2:01:5a:57:db:9e:8b:fb:c6:9a:05:54:4a:e6:63:
c7:a0:58:7d:ec:43:5c:ec:36:38:fd:b6:4e:f5:57:c4:f7:00:
e1:c9:dd:93:fb:c7:99:f2:73:bd:54:6a:e0:f1:ba:65:76:ba:
8e:98:fd:53:ce:e2:96:50:59:63:fe:22:80:91:dd:24:a4:a1:
97:77:e0:74:97:3d:8d:50:fc:82:6c:9a:9c:0d:c6:26:34:c5:
32:08:17:89:2a:33:6a:38:d4:31:a2:41:68:a8:17:ea:d2:05:
b0:2d:04:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 03:56:52 2026 by rpki-client