Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/ead4a0-2521-4abb-ac2d-07dbd900c4ad/1/opETjfO6mWFYsmS6JQzzGRH9WxI.roa
File: opETjfO6mWFYsmS6JQzzGRH9WxI.roa (raw, json)
Hash identifier: 7PPELYdKKburZhJ6qtTeTQUYG9VrfTnWioCBqvymRAs=
Subject key identifier: A2:91:13:8D:F3:BA:99:61:58:B2:64:BA:25:0C:F3:19:11:FD:5B:12
Certificate issuer: /CN=27f130b6f45f00f7c1d135b6c93b20e690412cfc
Certificate serial: 019B7DCAC7A30CFBDC7E5B9F61EC59952BA2
Authority key identifier: 27:F1:30:B6:F4:5F:00:F7:C1:D1:35:B6:C9:3B:20:E6:90:41:2C:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J_EwtvRfAPfB0TW2yTsg5pBBLPw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/ead4a0-2521-4abb-ac2d-07dbd900c4ad/1/opETjfO6mWFYsmS6JQzzGRH9WxI.roa
Signing time: Fri 02 Jan 2026 08:19:59 +0000
ROA not before: Fri 02 Jan 2026 08:19:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200930
IP address blocks: 193.58.180.0/24 maxlen: 24
193.58.181.0/24 maxlen: 24
193.58.182.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/ead4a0-2521-4abb-ac2d-07dbd900c4ad/1/J_EwtvRfAPfB0TW2yTsg5pBBLPw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/ead4a0-2521-4abb-ac2d-07dbd900c4ad/1/J_EwtvRfAPfB0TW2yTsg5pBBLPw.mft
rsync://rpki.ripe.net/repository/DEFAULT/J_EwtvRfAPfB0TW2yTsg5pBBLPw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 14:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:ca:c7:a3:0c:fb:dc:7e:5b:9f:61:ec:59:95:2b:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27f130b6f45f00f7c1d135b6c93b20e690412cfc
Validity
Not Before: Jan 2 08:19:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a291138df3ba996158b264ba250cf31911fd5b12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f1:df:43:bb:45:aa:29:a0:1a:2f:a6:4f:42:
0d:f6:b0:f2:c6:31:31:c8:52:cb:a5:30:8c:a8:c0:
a8:98:98:a1:09:df:7d:f0:44:2f:5e:a4:d1:1d:3a:
37:85:e8:0f:b4:db:cb:81:2b:3a:98:e5:b5:5b:7a:
53:7d:df:1d:fa:2c:66:e8:ac:2a:e0:31:8d:ec:d5:
dc:c9:4b:9f:a6:58:e6:5d:65:84:7d:6e:73:88:7e:
ce:8b:c0:80:4c:a8:89:74:2f:15:27:85:6a:84:9e:
a8:82:07:7e:78:4a:04:6c:93:fe:ee:9c:b4:40:3d:
b6:d7:db:32:a9:d4:f0:ac:fb:05:ca:12:63:a8:de:
ef:fb:d0:7f:a6:31:3c:02:fd:1e:06:c4:59:ac:4b:
85:ce:e6:e1:f3:a8:4d:da:76:f9:a0:43:5b:b2:12:
2d:a6:1c:e4:70:56:96:44:ac:9f:5a:f2:69:98:00:
26:33:f2:ae:69:3f:45:f7:b3:b5:99:fb:5d:47:71:
45:ea:dc:81:f6:51:e3:ca:b1:fc:52:40:bb:94:03:
31:3e:28:79:3f:a2:92:73:2d:ea:66:65:1b:04:11:
10:50:1d:f0:8a:2c:37:d9:ea:a2:4c:37:01:2c:f8:
56:ab:e7:86:fa:40:58:0a:d1:67:ab:55:c8:89:b7:
ad:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:91:13:8D:F3:BA:99:61:58:B2:64:BA:25:0C:F3:19:11:FD:5B:12
X509v3 Authority Key Identifier:
keyid:27:F1:30:B6:F4:5F:00:F7:C1:D1:35:B6:C9:3B:20:E6:90:41:2C:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_EwtvRfAPfB0TW2yTsg5pBBLPw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/ead4a0-2521-4abb-ac2d-07dbd900c4ad/1/opETjfO6mWFYsmS6JQzzGRH9WxI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/ead4a0-2521-4abb-ac2d-07dbd900c4ad/1/J_EwtvRfAPfB0TW2yTsg5pBBLPw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.58.180.0-193.58.182.255
Signature Algorithm: sha256WithRSAEncryption
4a:ba:b7:55:30:25:d6:bb:c2:36:0b:05:e6:19:9a:24:d8:3e:
b7:2e:fd:80:fe:37:81:20:0e:b3:31:d9:50:49:9a:c8:16:2b:
07:0f:a9:57:e3:c3:64:ec:c9:d4:49:52:65:70:e1:56:1b:d7:
55:92:18:89:e0:a8:24:a6:ee:ef:56:0e:0a:fe:9a:bd:5c:66:
b8:c1:4e:ce:c7:52:a0:cb:09:82:ac:5a:91:6b:5e:31:d9:b8:
8b:fe:bb:52:91:df:95:e3:69:77:59:3d:b9:a3:40:14:07:da:
6a:c4:1b:39:20:32:f2:40:98:ee:3c:08:75:1d:01:00:4d:f9:
a7:13:20:ba:f9:a2:d3:c1:8c:65:c4:35:4e:eb:b2:ac:bd:00:
80:d1:d9:f0:05:cf:ae:97:7d:cc:f3:30:02:3d:53:35:1c:eb:
88:f3:ba:6e:b2:f3:45:fb:1f:cc:bc:d4:af:34:cd:9a:91:ea:
3f:61:f3:48:ee:a9:2b:bf:df:4c:fa:71:82:0d:d5:55:26:8e:
01:6a:42:94:51:7b:9d:6f:cb:0d:22:a1:4e:c9:4d:f3:43:17:
cf:bb:58:a3:11:e4:bd:f5:bd:c8:66:80:03:0f:b4:d3:6a:c3:
79:ef:42:e0:c9:bb:d7:fa:98:a6:c5:de:13:e2:5f:ec:b3:ee:
2c:4c:9d:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:57:53 2026 by rpki-client