Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/2f3a44-5023-4695-a5fb-7b66e32a40fa/1/jx2IrehBfGIoz07HNrnJbRx1Ie8.roa
File: jx2IrehBfGIoz07HNrnJbRx1Ie8.roa (raw, json)
Hash identifier: elgg0Zp0doZnyv6v09SX8lS/zVSrNYK42ElsTeAO/Dk=
Subject key identifier: 8F:1D:88:AD:E8:41:7C:62:28:CF:4E:C7:36:B9:C9:6D:1C:75:21:EF
Certificate issuer: /CN=279fdf3e491ef66d77714389ae36f045715f2768
Certificate serial: 01A0BB7476E94DEEE055C009E120EAB331B6
Authority key identifier: 27:9F:DF:3E:49:1E:F6:6D:77:71:43:89:AE:36:F0:45:71:5F:27:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J5_fPkke9m13cUOJrjbwRXFfJ2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/2f3a44-5023-4695-a5fb-7b66e32a40fa/1/jx2IrehBfGIoz07HNrnJbRx1Ie8.roa
Signing time: Sat 19 Sep 2026 20:56:07 +0000
ROA not before: Sat 19 Sep 2026 20:56:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48539
IP address blocks: 193.148.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/2f3a44-5023-4695-a5fb-7b66e32a40fa/1/J5_fPkke9m13cUOJrjbwRXFfJ2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/2f3a44-5023-4695-a5fb-7b66e32a40fa/1/J5_fPkke9m13cUOJrjbwRXFfJ2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/J5_fPkke9m13cUOJrjbwRXFfJ2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bb:74:76:e9:4d:ee:e0:55:c0:09:e1:20:ea:b3:31:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279fdf3e491ef66d77714389ae36f045715f2768
Validity
Not Before: Sep 19 20:56:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8f1d88ade8417c6228cf4ec736b9c96d1c7521ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:42:1d:56:94:c1:5a:17:d5:4b:27:88:9f:71:
ce:3c:ef:13:75:a3:df:22:75:0e:64:c6:1b:20:57:
0c:19:b3:ab:a7:96:48:a9:06:25:c6:fe:a0:06:91:
64:df:1f:b6:e6:51:b6:6c:e3:ad:78:53:26:3a:6b:
00:09:19:67:d1:e6:c4:0b:ef:37:e0:33:cb:84:e1:
55:98:b1:2c:d1:a5:e3:c9:9a:c0:06:cf:ac:90:26:
df:0d:25:32:eb:bc:7d:ab:44:8b:f8:1a:ca:78:c8:
00:c8:8d:f8:9a:22:11:e7:bb:aa:65:8f:f1:f5:1b:
25:99:70:d7:b8:70:f8:a3:5f:be:c6:1e:9f:2e:00:
8f:cd:93:3e:56:96:92:25:d5:e0:61:b9:41:ef:e3:
7e:38:eb:de:e1:04:e6:a3:5a:42:8e:20:fd:15:1b:
b3:a3:e4:20:f3:7a:ff:58:aa:3a:cd:8b:f8:74:db:
05:3a:bc:57:73:6e:87:b5:63:0d:b7:29:ad:c5:46:
2b:bc:41:7a:89:81:8e:3c:c2:8f:e8:87:f4:2c:45:
e1:c8:4a:91:c4:58:66:3a:be:f2:ba:4d:fd:a7:81:
5e:04:74:af:46:5e:b6:d9:c2:d3:4b:4c:a4:12:37:
e7:3c:8f:9a:38:3a:79:7f:a1:5c:3c:92:db:66:65:
42:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:1D:88:AD:E8:41:7C:62:28:CF:4E:C7:36:B9:C9:6D:1C:75:21:EF
X509v3 Authority Key Identifier:
keyid:27:9F:DF:3E:49:1E:F6:6D:77:71:43:89:AE:36:F0:45:71:5F:27:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J5_fPkke9m13cUOJrjbwRXFfJ2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/2f3a44-5023-4695-a5fb-7b66e32a40fa/1/jx2IrehBfGIoz07HNrnJbRx1Ie8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/2f3a44-5023-4695-a5fb-7b66e32a40fa/1/J5_fPkke9m13cUOJrjbwRXFfJ2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.148.247.0/24
Signature Algorithm: sha256WithRSAEncryption
12:96:6f:e5:a5:e5:0d:2f:89:85:3e:c3:2a:d4:b0:57:af:4f:
5a:2b:54:6d:d5:8a:fa:e2:bf:f9:c4:64:14:4d:b2:29:49:62:
1d:05:1b:3b:b3:91:b8:97:1c:81:c5:36:bf:b2:c1:20:0c:d6:
d9:7e:4f:fb:01:c0:78:dc:c0:49:29:40:81:36:21:db:e6:17:
19:c5:14:8a:94:e4:ae:d9:4b:f8:e1:44:e1:54:c1:d7:d6:c9:
b0:18:70:c7:41:09:19:74:97:17:e0:2b:13:1d:3e:34:53:9e:
25:27:ca:17:80:b3:35:af:97:b4:a5:5a:d7:29:a5:df:0d:0c:
aa:e4:57:82:46:80:b0:19:8c:bf:8c:9f:a2:5f:96:a5:e7:28:
e7:c4:bf:6a:d1:3b:bd:07:8d:7d:ee:45:dd:6f:d9:cf:33:d5:
80:71:bf:a1:43:82:23:15:c2:1f:eb:e0:62:f9:94:03:41:32:
a3:69:00:b0:02:92:db:b8:df:4c:12:78:47:35:99:92:7b:e6:
b7:32:53:cb:1d:9e:b5:e9:f3:95:78:e1:45:d1:d4:ce:fd:11:
98:50:d4:83:cf:53:25:bc:bd:07:f0:dc:33:47:4c:49:38:c4:
35:f5:85:55:af:a2:1d:c9:f3:76:1f:e7:c9:04:71:af:74:ba:
38:b9:34:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:17:24 2026 by rpki-client