Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/J1bJb5PR-6WCKXzaxKwF8b7G6KM.roa
File: J1bJb5PR-6WCKXzaxKwF8b7G6KM.roa (raw, json)
Hash identifier: aPn06S/csR4hGjZC+O1jL0hLLbq1h25Fd+BEJPi6jnM=
Subject key identifier: 27:56:C9:6F:93:D1:FB:A5:82:29:7C:DA:C4:AC:05:F1:BE:C6:E8:A3
Certificate issuer: /CN=39247f77a3ae0af71eac03256449f5d292cffd74
Certificate serial: 019FA82E9A896C00F4E627E3740ADE077006
Authority key identifier: 39:24:7F:77:A3:AE:0A:F7:1E:AC:03:25:64:49:F5:D2:92:CF:FD:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OSR_d6OuCvcerAMlZEn10pLP_XQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/J1bJb5PR-6WCKXzaxKwF8b7G6KM.roa
Signing time: Tue 28 Jul 2026 10:04:14 +0000
ROA not before: Tue 28 Jul 2026 10:04:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 272378
IP address blocks: 31.207.91.0/24 maxlen: 24
93.189.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OSR_d6OuCvcerAMlZEn10pLP_XQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 19:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:2e:9a:89:6c:00:f4:e6:27:e3:74:0a:de:07:70:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39247f77a3ae0af71eac03256449f5d292cffd74
Validity
Not Before: Jul 28 10:04:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2756c96f93d1fba582297cdac4ac05f1bec6e8a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:2c:79:7b:7b:2a:20:b2:36:49:17:85:35:88:
7f:d6:54:89:54:d3:8c:e8:f2:18:aa:3b:91:86:db:
9f:1a:8f:4a:6e:40:67:cb:58:55:e7:f4:43:94:04:
70:a3:fe:64:ef:60:35:10:ee:99:b3:8a:d5:07:0b:
37:7b:c6:5e:ed:43:c9:db:3f:8b:3a:24:08:a7:72:
22:fb:5b:6c:96:1e:e6:2e:8f:0b:1e:82:83:3d:37:
0c:2d:35:b5:ad:c0:6f:49:c8:e0:6e:98:8e:49:40:
c7:74:a9:d1:80:0f:4e:7f:a7:1f:09:db:c7:8b:32:
3f:65:7d:6d:04:c6:88:84:8c:76:f5:a6:c1:ba:b5:
6c:a3:41:14:ab:e0:97:3d:f3:03:0d:92:8b:59:5d:
de:9e:ee:bb:47:37:ef:f1:a9:0e:4b:10:4e:4d:c7:
7c:52:c4:52:ea:e1:cc:20:7a:47:2d:b3:2e:43:17:
41:fc:60:76:c7:74:01:9d:a1:3f:c3:34:26:df:a5:
46:d7:a5:ba:1d:d5:a1:80:92:4c:5d:6c:2a:26:8a:
20:1e:b7:cc:9d:f7:66:08:cc:de:f0:78:b1:48:30:
69:65:9d:07:08:59:4d:31:46:e7:75:9b:8d:70:88:
9c:38:ed:89:dd:9f:54:d5:e0:59:f5:52:f9:c7:a9:
76:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:56:C9:6F:93:D1:FB:A5:82:29:7C:DA:C4:AC:05:F1:BE:C6:E8:A3
X509v3 Authority Key Identifier:
keyid:39:24:7F:77:A3:AE:0A:F7:1E:AC:03:25:64:49:F5:D2:92:CF:FD:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OSR_d6OuCvcerAMlZEn10pLP_XQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/J1bJb5PR-6WCKXzaxKwF8b7G6KM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.207.91.0/24
93.189.39.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:a9:c0:9b:62:07:f7:4e:3b:04:3a:89:83:78:91:e3:de:36:
d4:26:29:79:af:3b:4c:b6:8c:55:d0:ca:5c:21:02:aa:57:e1:
b1:54:7d:79:cc:be:02:58:f1:d2:19:63:78:d9:61:40:eb:5f:
b2:bb:0a:9f:ce:b6:38:8c:de:d8:4e:25:d0:16:21:22:bb:08:
08:5d:2e:69:2d:d7:fc:9f:7b:98:eb:45:61:6c:5c:11:2c:73:
5f:ef:3f:6a:9d:70:ea:33:cd:79:9b:a7:27:91:b2:4a:0e:ff:
f9:96:61:7a:21:b0:b0:b8:1b:ed:0c:45:c4:fb:51:c6:cb:f2:
e2:55:d7:43:db:3e:8e:c0:6a:56:1b:05:81:dc:55:ac:12:8c:
79:4c:d8:64:03:ad:3a:7e:77:bf:56:2a:78:b6:3e:62:d7:19:
e9:c7:58:f2:e2:4a:f7:06:e1:06:aa:42:7c:c9:a7:b8:15:d2:
16:dd:61:48:f3:2d:f5:08:96:30:3d:5c:a0:5e:fd:e1:b1:ab:
c7:94:de:8d:e8:8f:bc:80:f4:4d:08:28:18:39:00:f2:e4:d1:
b1:f6:c4:ae:5f:8b:23:85:42:b0:60:e6:f0:a9:ba:f8:db:5a:
6f:09:62:9b:56:61:21:f3:ed:39:41:94:30:11:0e:4e:26:86:
e4:26:aa:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:37:46 2026 by rpki-client