Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/J_NAqgVioUH73xW524wNxtH7C6E.roa
File: J_NAqgVioUH73xW524wNxtH7C6E.roa (raw, json)
Hash identifier: tIH8jdWye/GvM9gQvJIJ7V27p73rrL92FZ33H+k5YoQ=
Subject key identifier: 27:F3:40:AA:05:62:A1:41:FB:DF:15:B9:DB:8C:0D:C6:D1:FB:0B:A1
Certificate issuer: /CN=3c510e21ba1c9d600589130255a36928f1c8f23b
Certificate serial: 019F2368E35E813B2D49E88B196C7F35C275
Authority key identifier: 3C:51:0E:21:BA:1C:9D:60:05:89:13:02:55:A3:69:28:F1:C8:F2:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PFEOIbocnWAFiRMCVaNpKPHI8js.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/J_NAqgVioUH73xW524wNxtH7C6E.roa
Signing time: Thu 02 Jul 2026 15:18:24 +0000
ROA not before: Thu 02 Jul 2026 15:18:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201612
IP address blocks: 193.46.128.0/24 maxlen: 24
193.46.129.0/24 maxlen: 24
193.46.130.0/24 maxlen: 24
193.46.131.0/24 maxlen: 24
193.46.132.0/24 maxlen: 24
193.46.133.0/24 maxlen: 24
193.46.134.0/24 maxlen: 24
193.46.135.0/24 maxlen: 24
194.0.24.0/24 maxlen: 24
194.0.25.0/24 maxlen: 24
194.0.26.0/24 maxlen: 24
2001:678:20::/48 maxlen: 48
2001:678:24::/48 maxlen: 48
2001:67c:1bc::/48 maxlen: 48
2a02:850:ffe0::/48 maxlen: 48
2a02:850:ffe1::/48 maxlen: 48
2a02:850:ffe2::/48 maxlen: 48
2a02:850:ffe3::/48 maxlen: 48
2a02:850:ffe4::/48 maxlen: 48
2a02:850:ffe5::/48 maxlen: 48
2a02:850:ffe6::/48 maxlen: 48
2a02:850:ffe7::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/PFEOIbocnWAFiRMCVaNpKPHI8js.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/PFEOIbocnWAFiRMCVaNpKPHI8js.mft
rsync://rpki.ripe.net/repository/DEFAULT/PFEOIbocnWAFiRMCVaNpKPHI8js.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:e3:5e:81:3b:2d:49:e8:8b:19:6c:7f:35:c2:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c510e21ba1c9d600589130255a36928f1c8f23b
Validity
Not Before: Jul 2 15:18:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=27f340aa0562a141fbdf15b9db8c0dc6d1fb0ba1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:94:83:97:b7:af:df:90:3b:df:31:b7:52:8d:
cc:61:43:34:a0:4f:b0:2b:6e:2b:f0:1d:ae:f1:90:
6f:88:89:31:92:68:89:23:25:84:77:59:9c:be:57:
ea:80:e3:9c:03:a4:fb:9d:c2:d8:3b:5a:f0:8e:60:
2f:b0:fe:14:40:bb:44:17:92:29:ad:8b:8c:db:29:
16:4c:1a:8f:7a:4b:d4:3c:18:ba:28:1b:41:0a:b7:
1d:b6:f6:8b:3e:aa:bf:ef:0b:20:9d:26:b1:32:44:
5e:f3:99:50:4c:69:eb:8c:9e:8a:33:bc:60:c8:8f:
a0:48:c6:2f:fc:e0:d3:7e:ef:b0:ae:a8:8e:51:23:
6f:8b:b3:98:5e:48:54:16:c7:97:c6:1d:40:0a:88:
75:a6:72:7c:c0:66:16:63:42:ad:b3:19:0a:53:00:
e4:cd:52:20:b2:4e:5f:b0:4a:98:a1:b8:19:cf:c7:
23:ce:ec:b0:f4:da:b5:f4:e9:57:19:32:b2:3f:c6:
f3:87:fa:f5:7c:3c:fa:88:00:ba:cb:a8:15:37:9e:
49:49:f1:36:8e:c1:fb:c9:e0:36:37:b9:08:60:dd:
26:1f:35:f1:f3:a8:00:5d:66:ab:cc:02:c5:8f:af:
5d:13:4f:e5:dc:f6:33:fa:af:4c:8d:d8:00:9e:3c:
1c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:F3:40:AA:05:62:A1:41:FB:DF:15:B9:DB:8C:0D:C6:D1:FB:0B:A1
X509v3 Authority Key Identifier:
keyid:3C:51:0E:21:BA:1C:9D:60:05:89:13:02:55:A3:69:28:F1:C8:F2:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PFEOIbocnWAFiRMCVaNpKPHI8js.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/J_NAqgVioUH73xW524wNxtH7C6E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/PFEOIbocnWAFiRMCVaNpKPHI8js.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.46.128.0/21
194.0.24.0-194.0.26.255
IPv6:
2001:678:20::/48
2001:678:24::/48
2001:67c:1bc::/48
2a02:850:ffe0::/45
Signature Algorithm: sha256WithRSAEncryption
44:91:b7:f2:3a:62:ff:f8:21:5c:ff:d2:9e:ac:f1:cc:42:10:
83:3d:ac:0a:c9:0e:67:0a:de:94:cd:b4:c9:f6:5a:49:1e:e5:
97:e1:f2:a6:9a:27:d4:d4:d4:c7:ef:7c:d6:f7:b9:d7:a2:11:
a2:11:81:7f:3a:12:b2:b8:45:8d:bf:31:f6:54:a9:e3:da:71:
39:71:14:30:cf:47:f6:25:3b:4f:b0:b0:db:8d:d5:62:2c:be:
67:c5:78:7d:55:bb:29:97:76:59:d3:14:13:9a:e5:73:f1:f2:
89:ab:6e:e2:a1:59:8c:86:7a:08:12:05:94:8b:23:12:7d:30:
79:4d:e4:e9:dd:b6:78:4e:2e:d0:a0:2b:3a:c5:01:7c:3e:3b:
5b:38:cd:03:cb:f6:6c:1c:3a:6a:37:a2:b9:87:18:4b:9f:13:
ab:e4:be:bc:c7:ad:06:c4:59:6c:bb:28:c4:31:f4:26:cc:15:
c7:b2:aa:c3:42:85:e1:53:6d:3b:5e:d1:d7:70:61:2b:df:0d:
67:fc:7a:c2:a1:d2:c4:3c:9f:a2:64:f7:e0:37:33:01:c3:56:
e4:a2:9c:bf:73:93:bf:50:b5:27:25:5d:ba:cb:08:4d:43:00:
b8:65:a9:bb:02:ed:43:c1:d4:bd:5d:86:c5:45:8c:b1:fb:6a:
ea:e7:20:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:42:59 2026 by rpki-client