Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/jFvJZaHKv8QwoukYCAhIunEqd4s.roa
File: jFvJZaHKv8QwoukYCAhIunEqd4s.roa (raw, json)
Hash identifier: V1rH1de0PVsmx11Wg5/gIdXxuPL9QGcnJzJNtJ/w8PU=
Subject key identifier: 8C:5B:C9:65:A1:CA:BF:C4:30:A2:E9:18:08:08:48:BA:71:2A:77:8B
Certificate issuer: /CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Certificate serial: 019D52FBC91797F7FB2D821F216DDFAA8887
Authority key identifier: BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/jFvJZaHKv8QwoukYCAhIunEqd4s.roa
Signing time: Fri 03 Apr 2026 10:55:25 +0000
ROA not before: Fri 03 Apr 2026 10:55:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206150
IP address blocks: 213.21.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:52:fb:c9:17:97:f7:fb:2d:82:1f:21:6d:df:aa:88:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Validity
Not Before: Apr 3 10:55:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8c5bc965a1cabfc430a2e918080848ba712a778b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c1:ac:24:ee:8a:c2:2f:df:1c:e9:2b:bf:5c:
7f:df:25:79:3b:6b:0f:70:8a:0f:01:46:6a:e5:29:
0f:a8:01:9e:a5:1d:82:ea:c3:84:69:7b:f8:91:12:
55:3c:1f:b4:c8:0b:b4:5b:f3:01:97:bc:12:20:d1:
2c:0f:76:1f:05:8e:f7:36:47:ae:f8:e0:3f:73:a6:
ed:54:e9:f0:06:66:eb:26:49:75:85:52:c5:cf:d6:
8e:21:b0:b2:a7:94:fa:30:b3:43:fd:2a:5e:ab:e1:
14:48:09:23:33:e0:ef:f9:c2:e5:9b:1b:81:d2:85:
9e:e3:bb:b8:e8:52:3f:32:f4:02:69:0c:00:41:26:
a4:0f:f4:c9:aa:72:c5:63:4f:b4:34:aa:25:a4:29:
f7:a9:c2:d0:fa:3e:fd:3d:37:c3:06:52:e6:42:e2:
3f:d0:26:44:ab:b7:56:94:be:92:0e:71:cb:3d:81:
37:b0:6a:15:ce:b6:54:d2:9f:48:cc:e0:fa:7b:47:
6b:33:e0:aa:77:28:b3:86:9b:8a:67:af:14:ef:10:
21:f8:c0:18:93:71:fe:fd:4d:a7:76:ca:8f:df:de:
d2:52:93:ce:48:42:48:32:b9:fb:b8:7b:11:11:9b:
6e:9f:15:04:a0:ef:a3:1d:b0:76:f0:87:48:31:cc:
0a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:5B:C9:65:A1:CA:BF:C4:30:A2:E9:18:08:08:48:BA:71:2A:77:8B
X509v3 Authority Key Identifier:
keyid:BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/jFvJZaHKv8QwoukYCAhIunEqd4s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.21.238.0/24
Signature Algorithm: sha256WithRSAEncryption
62:1c:96:dd:30:a6:bf:30:27:95:6f:3d:35:56:97:f5:eb:2d:
19:6a:51:49:a7:d6:e4:e1:1d:94:77:b8:7e:44:33:db:a8:51:
37:5a:b5:ed:c0:65:a9:dc:17:df:fe:ce:44:0d:05:53:03:cb:
4b:25:bb:62:b9:8a:74:55:59:b1:6f:52:59:55:b2:1d:5e:c5:
42:0c:1c:6a:36:c1:d3:69:6d:87:8b:b4:6a:3a:d8:36:a4:43:
2c:91:25:90:84:3a:00:50:40:c4:39:59:f7:c7:0d:0a:4a:57:
a6:cd:2e:75:1c:9d:71:33:9e:aa:ba:26:70:ab:3f:47:ce:83:
c0:0c:9e:9f:e4:65:60:09:95:4a:b3:7b:94:cf:e1:27:78:0e:
33:5e:85:af:4f:6a:5b:64:14:f5:bf:82:31:82:92:83:83:94:
04:13:f9:b9:95:fd:0e:0d:81:37:6c:25:a8:47:57:42:13:cc:
c3:f3:ba:20:4b:a2:56:b5:c7:36:ee:04:fc:9e:d5:bc:7e:92:
5b:25:f0:7c:61:50:4a:b7:47:9a:06:dc:ac:1e:c3:b8:86:20:
94:25:69:c9:16:b5:32:f0:70:bd:92:86:4f:53:47:c7:1a:92:
60:23:12:1b:cd:0f:f3:5c:d1:c0:da:3a:39:c9:f0:df:a8:4b:
2f:e4:94:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:50:31 2026 by rpki-client