Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/fb196a-0704-4a4c-9e1a-da512fb9d12a/1/j_ETJv8gm16xe_kQrqtNv9IG00s.roa
File: j_ETJv8gm16xe_kQrqtNv9IG00s.roa (raw, json)
Hash identifier: +k+o4xrOFIGJpNCL5IBqemmyX6mfI3uazJek188sSwk=
Subject key identifier: 8F:F1:13:26:FF:20:9B:5E:B1:7B:F9:10:AE:AB:4D:BF:D2:06:D3:4B
Certificate issuer: /CN=227994b66f9fd67c175e343c62aee6077cd4245f
Certificate serial: 01A0FC663045A30B757A04117F525DE4646A
Authority key identifier: 22:79:94:B6:6F:9F:D6:7C:17:5E:34:3C:62:AE:E6:07:7C:D4:24:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/InmUtm-f1nwXXjQ8Yq7mB3zUJF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/fb196a-0704-4a4c-9e1a-da512fb9d12a/1/j_ETJv8gm16xe_kQrqtNv9IG00s.roa
Signing time: Fri 02 Oct 2026 11:35:50 +0000
ROA not before: Fri 02 Oct 2026 11:35:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9123
IP address blocks: 129.101.96.0/20 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/fb196a-0704-4a4c-9e1a-da512fb9d12a/1/InmUtm-f1nwXXjQ8Yq7mB3zUJF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/fb196a-0704-4a4c-9e1a-da512fb9d12a/1/InmUtm-f1nwXXjQ8Yq7mB3zUJF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/InmUtm-f1nwXXjQ8Yq7mB3zUJF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 13:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fc:66:30:45:a3:0b:75:7a:04:11:7f:52:5d:e4:64:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=227994b66f9fd67c175e343c62aee6077cd4245f
Validity
Not Before: Oct 2 11:35:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8ff11326ff209b5eb17bf910aeab4dbfd206d34b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:68:b2:9e:5f:31:7c:f6:64:9b:81:d5:6d:57:
fd:11:2d:b3:a9:d4:da:4c:33:28:35:e0:b9:97:85:
a6:f1:f1:c3:36:76:d6:f5:fd:4f:4f:b9:62:71:3a:
e4:82:56:5c:79:5b:13:50:60:34:12:9f:34:a4:e6:
98:68:f4:ff:fb:87:bb:36:60:85:90:56:30:72:9e:
26:53:6c:f9:ab:ca:33:9a:91:73:2f:fd:0b:c6:3d:
83:c5:ab:de:f7:5f:05:9d:dd:ab:48:f7:62:74:ef:
71:85:37:15:b8:16:65:6d:2d:50:bb:ae:aa:75:23:
09:fe:7a:cd:c1:38:aa:06:98:05:3f:1f:1c:74:3a:
1e:17:c7:66:9e:36:51:87:69:62:ad:f5:42:e0:67:
4f:49:e0:b1:fe:cc:d6:f9:42:1d:48:7c:91:47:39:
8d:35:d8:58:61:79:95:5e:ce:a0:51:04:17:98:b6:
b4:57:d3:c8:7f:cf:3f:2d:0d:e9:3f:93:e2:74:60:
6d:ce:0a:df:70:77:71:6e:63:98:0f:8f:72:cc:d5:
cd:c7:d1:c3:08:23:2c:01:76:7b:bf:2f:71:d4:2c:
d6:17:4b:8b:d9:cf:ba:8d:f2:6f:bc:60:b9:e6:af:
28:94:96:8c:72:82:56:1c:3b:6c:8b:23:ed:f8:18:
f4:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:F1:13:26:FF:20:9B:5E:B1:7B:F9:10:AE:AB:4D:BF:D2:06:D3:4B
X509v3 Authority Key Identifier:
keyid:22:79:94:B6:6F:9F:D6:7C:17:5E:34:3C:62:AE:E6:07:7C:D4:24:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/InmUtm-f1nwXXjQ8Yq7mB3zUJF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/fb196a-0704-4a4c-9e1a-da512fb9d12a/1/j_ETJv8gm16xe_kQrqtNv9IG00s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/fb196a-0704-4a4c-9e1a-da512fb9d12a/1/InmUtm-f1nwXXjQ8Yq7mB3zUJF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
129.101.96.0/20
Signature Algorithm: sha256WithRSAEncryption
4b:21:87:38:26:19:81:6e:da:0c:5a:8f:22:9c:bc:e9:f9:73:
53:37:cf:0c:e6:1d:6c:f9:81:9f:d9:ec:c7:aa:43:6f:36:e6:
9d:8b:0e:5b:c0:4c:be:62:cf:18:9f:be:df:07:68:e5:29:31:
5b:37:2b:8d:59:33:d7:9a:00:fe:ff:18:df:8f:dd:ae:68:df:
f8:c8:b9:dd:b6:1f:66:0a:bd:1f:b3:00:9b:4b:c9:10:74:8c:
9e:a2:eb:dd:3a:92:7f:74:47:26:2b:1d:0f:d3:40:d1:ca:b8:
23:e5:94:cc:14:8e:b0:5b:6d:fa:3d:20:ce:bd:14:e2:c6:12:
9c:ab:5b:78:e0:ae:2b:03:83:19:89:a0:a3:e0:22:fb:86:76:
ca:25:f6:66:53:34:ab:17:e5:5a:22:68:3b:1f:92:ba:9e:04:
50:e3:21:75:d4:35:8e:44:ed:5d:1a:36:e2:67:d1:08:78:f4:
72:1a:4c:25:87:e9:88:26:3d:75:70:5b:b9:8e:c9:5c:91:f7:
e7:4e:9b:7b:7c:fa:01:a3:24:91:17:69:33:0e:f5:51:d6:e6:
36:0b:82:f8:56:e3:db:6e:78:30:ef:f5:35:bc:79:52:e6:2c:
0a:6c:2a:7b:d0:d3:53:0e:e4:2a:26:17:92:54:08:68:65:d4:
13:93:b9:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 23:37:21 2026 by rpki-client