Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/01f736-af83-456c-8b45-5146ab7ea015/1/j86y_ItGPyrknhpKFaA3OkNhDHQ.roa
File: j86y_ItGPyrknhpKFaA3OkNhDHQ.roa (raw, json)
Hash identifier: cX4ebinCqmLGTvDjfCih1gjKANEWYIZmpmYzsqgMTHY=
Subject key identifier: 8F:CE:B2:FC:8B:46:3F:2A:E4:9E:1A:4A:15:A0:37:3A:43:61:0C:74
Certificate issuer: /CN=535825ce8bf544170282f720a2484141568b0e7d
Certificate serial: 019B7F14DDA4E6FB76C1C0D40B720F0DDDDF
Authority key identifier: 53:58:25:CE:8B:F5:44:17:02:82:F7:20:A2:48:41:41:56:8B:0E:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1glzov1RBcCgvcgokhBQVaLDn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/01f736-af83-456c-8b45-5146ab7ea015/1/j86y_ItGPyrknhpKFaA3OkNhDHQ.roa
Signing time: Fri 02 Jan 2026 14:20:32 +0000
ROA not before: Fri 02 Jan 2026 14:20:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198382
IP address blocks: 185.123.81.0/24 maxlen: 24
212.84.64.0/21 maxlen: 24
212.84.72.0/21 maxlen: 24
212.84.80.0/21 maxlen: 24
212.84.88.0/21 maxlen: 24
2a00:14a0::/29 maxlen: 48
2a00:14a0::/48 maxlen: 48
2a00:14a0:1::/48 maxlen: 48
2a00:14a0:3::/48 maxlen: 48
2a00:14a0:4::/48 maxlen: 48
2a00:14a0:5::/48 maxlen: 48
2a00:14a0:6::/48 maxlen: 48
2a00:14a0:7::/48 maxlen: 48
2a00:14a0:8::/48 maxlen: 48
2a00:14a0:9::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/01f736-af83-456c-8b45-5146ab7ea015/1/U1glzov1RBcCgvcgokhBQVaLDn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/01f736-af83-456c-8b45-5146ab7ea015/1/U1glzov1RBcCgvcgokhBQVaLDn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/U1glzov1RBcCgvcgokhBQVaLDn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 14:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:14:dd:a4:e6:fb:76:c1:c0:d4:0b:72:0f:0d:dd:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=535825ce8bf544170282f720a2484141568b0e7d
Validity
Not Before: Jan 2 14:20:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8fceb2fc8b463f2ae49e1a4a15a0373a43610c74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:fb:04:34:b6:9c:94:b0:5a:30:e1:9b:aa:3b:
a1:65:b4:3f:42:bd:86:66:64:20:9e:10:c6:7a:f6:
8d:49:4b:6d:1d:e4:e1:2e:27:a8:5a:31:39:99:58:
63:0e:31:ea:db:a0:7f:2e:3b:1c:6e:db:e3:66:25:
80:5f:b2:8f:27:21:f7:61:0a:bc:2f:1f:fc:88:7f:
8b:b7:4a:aa:a2:dd:6c:57:06:57:a2:e7:b5:f9:4e:
e7:d9:c9:8a:f8:f7:39:a4:7f:84:59:2d:f5:8f:2d:
21:4a:2c:87:8f:a4:26:9d:7a:6b:cc:39:99:3a:f9:
54:6e:c1:12:ab:46:10:32:25:f1:52:dc:65:84:2b:
7e:18:11:25:cb:e6:44:d4:c9:78:fa:e8:71:ab:c0:
d9:45:e2:b7:87:29:b7:3b:70:32:c4:06:ed:ea:25:
db:55:27:27:e2:25:20:b1:6b:b9:7c:be:ec:8b:d8:
f8:22:9c:4f:e1:16:04:14:15:fb:ed:18:d5:72:14:
56:36:f4:f3:c5:40:0e:a9:56:c7:1f:48:43:12:b4:
52:a1:f8:74:2a:20:6e:ef:49:46:dd:63:7c:c2:ae:
5f:41:47:8b:4a:4f:0b:43:8d:8c:69:4c:5a:46:01:
c4:da:23:c4:7b:03:55:5c:7b:8b:4a:c4:51:ba:d0:
9e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:CE:B2:FC:8B:46:3F:2A:E4:9E:1A:4A:15:A0:37:3A:43:61:0C:74
X509v3 Authority Key Identifier:
keyid:53:58:25:CE:8B:F5:44:17:02:82:F7:20:A2:48:41:41:56:8B:0E:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1glzov1RBcCgvcgokhBQVaLDn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/01f736-af83-456c-8b45-5146ab7ea015/1/j86y_ItGPyrknhpKFaA3OkNhDHQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/01f736-af83-456c-8b45-5146ab7ea015/1/U1glzov1RBcCgvcgokhBQVaLDn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.123.81.0/24
212.84.64.0/19
IPv6:
2a00:14a0::/29
Signature Algorithm: sha256WithRSAEncryption
62:7b:30:e8:e5:8d:f2:bd:86:28:18:2c:30:85:19:44:4d:7c:
5d:8e:ae:85:0d:3c:b4:76:c6:c8:33:0a:39:37:43:95:1b:5a:
a2:e3:7b:07:29:dc:e7:41:f7:77:93:dc:67:b7:4a:02:44:eb:
76:cd:2a:7c:f4:ab:20:60:4a:cb:f7:03:4a:52:cb:ff:14:e9:
cc:65:be:f6:6f:03:07:c9:4e:a8:f7:7e:2d:72:5c:c4:31:cd:
02:5b:0b:7d:46:4b:db:93:b9:ee:82:c6:26:16:24:19:a1:9f:
02:18:9a:99:b1:5b:fe:40:bb:de:ab:34:50:33:59:a7:08:0e:
1c:f1:7c:f8:2c:e6:8b:0a:48:33:43:39:43:a8:50:64:53:c3:
97:40:29:a8:6a:5e:c9:10:67:1f:57:0a:f8:e4:df:61:f0:3b:
7b:d0:11:ec:62:59:1a:ea:73:53:c6:05:e1:d6:43:41:e2:3f:
8d:6b:b0:f1:37:e3:d2:61:23:42:11:91:23:be:fb:76:a4:e0:
30:42:d4:37:7a:14:ce:da:da:92:3c:02:70:4f:24:74:61:04:
ee:a5:50:00:93:69:fc:b2:60:d2:86:6f:5c:c8:1d:01:f5:db:
ba:86:9c:3d:6a:0f:d7:06:05:9b:30:f8:5a:1b:86:76:37:1d:
09:d0:4f:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:20:24 2026 by rpki-client