Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/J7t8tSVlgaKxcjC3ujF2grCD8iY.roa
File: J7t8tSVlgaKxcjC3ujF2grCD8iY.roa (raw, json)
Hash identifier: DsCH/fO91gZvji/30odEGkxfVDsVHakvyYSsaxCatOs=
Subject key identifier: 27:BB:7C:B5:25:65:81:A2:B1:72:30:B7:BA:31:76:82:B0:83:F2:26
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 019E137025B9CC640ED5602E735E2E9B3F3F
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/J7t8tSVlgaKxcjC3ujF2grCD8iY.roa
Signing time: Sun 10 May 2026 19:49:37 +0000
ROA not before: Sun 10 May 2026 19:49:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39347
IP address blocks: 85.122.120.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 01:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:13:70:25:b9:cc:64:0e:d5:60:2e:73:5e:2e:9b:3f:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: May 10 19:49:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=27bb7cb5256581a2b17230b7ba317682b083f226
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:0b:07:0f:b3:87:f9:fb:fb:08:99:35:95:db:
56:82:ce:5a:e5:d5:d0:28:a3:27:24:f2:c2:0b:fe:
d7:55:f0:b7:36:e2:87:ab:b3:8d:24:5d:f8:8d:80:
6c:8c:a1:b7:53:41:be:3b:88:00:7c:cf:a3:ae:81:
84:53:b0:5e:7e:9a:f7:35:bd:eb:14:41:5e:5b:01:
4c:9c:44:80:c2:0a:9d:2e:3c:c2:67:82:51:4d:07:
4f:e6:ea:f3:9b:c7:24:e1:f7:af:2f:78:29:d0:bc:
59:4a:6f:a2:8f:96:6d:d8:b3:8b:fd:c9:88:6a:29:
99:e5:de:16:9c:a7:c8:7a:2c:12:71:e7:1e:b4:68:
89:a5:dc:00:2a:57:78:9f:12:4b:ee:33:0b:7d:ac:
42:3f:20:1b:6a:59:2a:8b:e5:54:f0:62:d0:a3:68:
23:f6:6a:1c:06:82:fd:40:1a:36:cc:82:3d:21:bc:
3b:bb:a6:90:64:58:4b:fc:63:b3:a9:4f:72:f5:23:
88:53:87:66:ce:46:d0:ad:dc:9a:0a:62:27:ee:67:
b4:8e:7a:cf:56:3a:b1:ec:d9:20:46:8e:55:45:e1:
83:a7:dc:bb:c7:cb:06:2a:2e:c5:15:0d:e2:da:86:
48:ec:0d:d6:68:eb:f4:2b:45:a2:35:ee:b3:fa:a0:
e5:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:BB:7C:B5:25:65:81:A2:B1:72:30:B7:BA:31:76:82:B0:83:F2:26
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/J7t8tSVlgaKxcjC3ujF2grCD8iY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.122.120.0/22
Signature Algorithm: sha256WithRSAEncryption
18:01:cc:78:73:f3:21:67:36:14:c3:7d:2c:37:56:66:6f:28:
69:02:f5:e7:0d:fc:e6:76:84:14:f2:15:a0:92:4b:50:7b:c3:
aa:d2:d5:3c:e3:d0:ce:0a:a5:76:51:33:ab:54:71:44:7e:09:
06:a8:09:53:4c:a7:93:7e:3e:82:ed:ca:cd:85:f2:2f:c5:dc:
87:7e:97:53:64:f7:6b:4c:7a:95:b1:0a:48:79:2b:71:ff:85:
95:fe:d6:a2:3b:1e:9b:15:39:6d:66:45:49:b0:8b:74:65:3f:
53:ce:40:3d:0d:7e:e0:dd:18:d6:d6:bc:d6:49:e8:dd:7a:8e:
31:45:d2:3a:63:0f:15:f5:39:5c:fd:10:f7:45:a4:36:cb:04:
0a:e1:69:ac:ec:19:3a:12:1b:f4:3c:81:e0:a6:32:28:42:55:
2f:47:7f:37:46:27:06:25:16:0a:00:d1:6d:8d:9f:03:8e:4f:
17:3d:e2:16:4e:35:72:55:d7:ed:3a:ce:25:ef:de:c1:59:e3:
4a:aa:9d:12:84:8f:2a:73:ef:e5:36:70:74:48:f4:70:b9:a5:
f0:41:48:e6:d1:92:06:d6:96:4d:0b:08:96:69:d8:7a:f3:5c:
57:77:d9:95:12:12:26:97:0b:25:e8:42:9e:88:6f:8a:08:af:
8e:5e:ef:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:51:35 2026 by rpki-client