Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/J3HD5d0SMV-R_mfbvG3dJVqlH-Y.roa
File: J3HD5d0SMV-R_mfbvG3dJVqlH-Y.roa (raw, json)
Hash identifier: tkc15QCtNWavxhUnqZNNlUVnnK/d2SoDMZwxZ/0lGlk=
Subject key identifier: 27:71:C3:E5:DD:12:31:5F:91:FE:67:DB:BC:6D:DD:25:5A:A5:1F:E6
Certificate issuer: /CN=b0bd68e370e7ec25bec8e01497b2138d95dc6ebc
Certificate serial: 019B7E3765E8B0F5B89AD12EC2C8E20E600C
Authority key identifier: B0:BD:68:E3:70:E7:EC:25:BE:C8:E0:14:97:B2:13:8D:95:DC:6E:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sL1o43Dn7CW-yOAUl7ITjZXcbrw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/J3HD5d0SMV-R_mfbvG3dJVqlH-Y.roa
Signing time: Fri 02 Jan 2026 10:18:38 +0000
ROA not before: Fri 02 Jan 2026 10:18:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 33906
IP address blocks: 193.200.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/sL1o43Dn7CW-yOAUl7ITjZXcbrw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/sL1o43Dn7CW-yOAUl7ITjZXcbrw.mft
rsync://rpki.ripe.net/repository/DEFAULT/sL1o43Dn7CW-yOAUl7ITjZXcbrw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:37:65:e8:b0:f5:b8:9a:d1:2e:c2:c8:e2:0e:60:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0bd68e370e7ec25bec8e01497b2138d95dc6ebc
Validity
Not Before: Jan 2 10:18:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2771c3e5dd12315f91fe67dbbc6ddd255aa51fe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e5:1a:f7:5a:53:41:e7:d7:3c:16:f5:eb:86:
44:fc:5e:2c:22:27:8d:87:8b:40:6a:85:fc:a4:4f:
c1:6e:51:b5:97:11:07:cf:ee:99:b9:b5:bc:00:91:
1c:b6:9d:5f:ec:5c:cd:15:e7:c1:4d:11:88:87:b9:
98:77:be:19:bd:b8:11:25:21:91:fe:ad:86:17:23:
0f:84:2b:4a:de:77:0e:04:95:51:5a:d9:98:99:54:
5f:8a:4a:fb:21:0f:c0:74:0a:7c:1e:9f:a3:3f:99:
77:2c:44:42:9e:99:01:25:a0:d5:9b:57:ea:14:cd:
71:13:80:de:9e:7c:5c:9a:b9:04:2a:fb:55:9c:6f:
c6:94:92:c1:60:c2:60:55:d3:cb:d1:40:28:4e:3f:
3f:9e:0d:16:bd:e1:6d:ac:9e:d9:00:5a:ed:90:4b:
96:d5:97:b3:ef:cd:85:58:35:eb:c6:cf:ed:e1:07:
04:9b:74:01:72:66:61:ef:60:e5:a2:d8:f7:42:d0:
02:a8:1c:0d:96:2d:9b:18:18:26:35:45:e7:45:75:
f1:6b:6f:fe:00:f0:cb:06:e6:04:b9:94:b1:2f:5d:
24:66:3c:ce:cc:df:6b:d1:d0:ee:72:90:44:ea:e6:
b7:96:43:db:a2:90:90:53:4c:ab:80:99:15:c6:25:
76:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:71:C3:E5:DD:12:31:5F:91:FE:67:DB:BC:6D:DD:25:5A:A5:1F:E6
X509v3 Authority Key Identifier:
keyid:B0:BD:68:E3:70:E7:EC:25:BE:C8:E0:14:97:B2:13:8D:95:DC:6E:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sL1o43Dn7CW-yOAUl7ITjZXcbrw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/J3HD5d0SMV-R_mfbvG3dJVqlH-Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/f4ca1c-35dd-4cb1-84fa-8115cafd38ce/1/sL1o43Dn7CW-yOAUl7ITjZXcbrw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.200.141.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:d5:ec:fd:89:77:bc:10:ea:c4:f2:cd:5a:14:f6:ed:53:80:
bd:4a:16:15:af:ce:03:14:94:04:b7:9f:3b:99:32:14:db:29:
59:75:10:be:56:e7:9b:a7:b3:1c:95:50:6e:c0:1b:fc:6f:76:
61:a0:7b:c3:fc:01:e5:92:9c:39:20:87:0d:32:b5:04:f2:da:
04:27:30:26:0b:8c:fe:20:2d:6b:d9:da:41:00:30:ac:d6:75:
d1:d6:00:44:e6:2a:95:b5:db:25:25:a0:1f:7d:39:5d:8e:4b:
0e:1a:d5:40:42:04:eb:23:d5:9e:ed:5c:01:6e:66:78:d6:cc:
21:56:65:5a:47:28:1d:9c:90:9d:c2:cf:98:8b:4f:57:57:e5:
48:87:65:00:40:72:f0:89:07:92:c6:e0:ee:d8:6b:37:8a:d1:
28:7a:09:13:de:92:52:ba:e5:82:a0:3c:7f:4d:bd:d2:56:02:
19:69:28:79:9c:64:b3:ba:a2:64:42:a8:f8:5c:4e:d7:a7:f1:
f9:44:29:06:03:9a:03:d3:cd:2e:bd:97:bc:11:c6:6d:b1:ad:
ba:ed:e0:70:5e:19:d7:fd:02:d9:93:ec:6e:9c:dd:f7:1a:6f:
33:d6:13:d6:da:29:0e:3c:09:87:1d:a7:8d:33:35:d3:59:2f:
4d:60:a4:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:29:52 2026 by rpki-client