Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/2d0b47-f026-4f98-9fe9-1bb716427ca9/1/J6w8kCSUOVu4x3FnMkUHc1W5sqg.roa
File: J6w8kCSUOVu4x3FnMkUHc1W5sqg.roa (raw, json)
Hash identifier: VngHqJ/oUhKVw9dv5QbYyRcEHNNlzn2oilRidIcUrHQ=
Subject key identifier: 27:AC:3C:90:24:94:39:5B:B8:C7:71:67:32:45:07:73:55:B9:B2:A8
Certificate issuer: /CN=d392f8fc986e9f1d3e4bf05fca9659a0881d7003
Certificate serial: 019BE62FD21AC32EDC606894AF2709DB5221
Authority key identifier: D3:92:F8:FC:98:6E:9F:1D:3E:4B:F0:5F:CA:96:59:A0:88:1D:70:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/05L4_Jhunx0-S_BfypZZoIgdcAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/2d0b47-f026-4f98-9fe9-1bb716427ca9/1/J6w8kCSUOVu4x3FnMkUHc1W5sqg.roa
Signing time: Thu 22 Jan 2026 14:50:52 +0000
ROA not before: Thu 22 Jan 2026 14:50:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200487
IP address blocks: 5.183.188.0/22 maxlen: 32
5.188.24.0/21 maxlen: 32
185.105.224.0/22 maxlen: 32
2a01:5a60::/32 maxlen: 128
2a0e:1600::/32 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/2d0b47-f026-4f98-9fe9-1bb716427ca9/1/05L4_Jhunx0-S_BfypZZoIgdcAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/2d0b47-f026-4f98-9fe9-1bb716427ca9/1/05L4_Jhunx0-S_BfypZZoIgdcAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/05L4_Jhunx0-S_BfypZZoIgdcAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 14:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:e6:2f:d2:1a:c3:2e:dc:60:68:94:af:27:09:db:52:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d392f8fc986e9f1d3e4bf05fca9659a0881d7003
Validity
Not Before: Jan 22 14:50:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=27ac3c902494395bb8c771673245077355b9b2a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2a:8c:6c:37:53:d2:b8:59:77:72:b5:62:1b:
fa:f8:29:5d:84:f4:08:3f:b6:1f:0c:37:65:12:4c:
68:5a:29:90:18:ae:5e:af:b1:a6:67:89:99:e4:14:
79:9b:1f:88:62:6d:bb:cb:96:6c:5e:ce:01:22:4d:
d8:22:7f:1e:e8:49:11:a8:7f:72:54:74:1c:85:b1:
2b:79:f7:58:4c:a2:20:77:08:eb:16:65:56:4c:3d:
9e:39:7a:b6:30:0a:e1:26:e3:7d:b4:d4:19:98:4e:
14:24:07:2a:67:34:33:cc:9e:6c:64:97:70:0c:57:
b5:e1:c9:db:e5:4a:a8:55:73:62:da:c2:d3:fc:02:
41:b2:a9:3b:64:af:bf:2e:79:9c:68:a3:8b:95:38:
ff:f5:be:75:52:c2:b3:79:f2:fa:5c:5d:bc:18:36:
6d:1e:70:4f:f9:bc:2f:b8:d8:b8:10:8c:92:52:fd:
76:fb:c7:0f:ee:eb:8a:28:b6:ee:bc:51:63:8f:31:
8b:95:06:b2:bf:02:33:dd:76:2f:e2:68:06:eb:30:
a6:99:46:b3:1c:1e:03:49:13:7c:73:80:e4:d1:90:
6f:a5:d5:a0:68:3f:65:36:86:a5:cd:45:f8:96:e8:
5d:10:a9:7f:d3:c7:43:e6:fd:f5:2a:97:3d:ee:9c:
30:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:AC:3C:90:24:94:39:5B:B8:C7:71:67:32:45:07:73:55:B9:B2:A8
X509v3 Authority Key Identifier:
keyid:D3:92:F8:FC:98:6E:9F:1D:3E:4B:F0:5F:CA:96:59:A0:88:1D:70:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/05L4_Jhunx0-S_BfypZZoIgdcAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2d0b47-f026-4f98-9fe9-1bb716427ca9/1/J6w8kCSUOVu4x3FnMkUHc1W5sqg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2d0b47-f026-4f98-9fe9-1bb716427ca9/1/05L4_Jhunx0-S_BfypZZoIgdcAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.188.0/22
5.188.24.0/21
185.105.224.0/22
IPv6:
2a01:5a60::/32
2a0e:1600::/32
Signature Algorithm: sha256WithRSAEncryption
0b:b8:c2:c8:34:08:b9:0a:40:89:17:43:89:52:af:73:71:d5:
eb:1c:45:c4:11:44:8e:6e:5d:f9:94:55:0d:ca:ea:96:48:58:
ab:bd:cd:31:35:10:2d:c9:a3:22:96:93:90:ff:cc:61:97:81:
62:85:e6:c5:20:c1:b1:4d:52:e6:c2:41:c6:0b:55:c0:1c:c2:
f6:67:9c:4e:d3:1b:08:e7:e1:fa:d7:06:df:52:17:7d:09:aa:
40:5e:87:ff:15:d7:4b:11:cc:cc:55:74:00:e6:d3:9a:bc:56:
c2:e1:08:5e:b2:e9:49:01:f0:be:a0:f1:f3:60:6f:a8:e4:49:
87:da:0f:75:f4:8f:4c:50:57:d6:86:75:37:9d:d6:a1:13:d8:
7c:58:68:37:30:38:cf:9a:a5:83:a6:ed:3e:55:e2:5b:ec:1c:
5f:53:ee:3c:4a:ac:4e:83:c7:6d:f6:ce:74:c6:56:4b:1f:0e:
42:43:ec:36:c1:ef:0f:79:93:e6:54:db:6c:40:16:d2:41:86:
4b:ad:44:02:41:63:1e:34:00:06:03:ff:df:47:2e:62:79:cc:
4a:3b:d8:32:c4:88:7c:9e:d4:83:25:00:ef:b4:a1:c4:ff:51:
c6:73:41:2d:00:3b:0e:57:50:02:fc:c2:ea:fb:87:19:88:fe:
0c:78:2d:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:39:36 2026 by rpki-client