Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/J3oKV7ISOT6vcHLCu8tKWXMf26c.roa
File: J3oKV7ISOT6vcHLCu8tKWXMf26c.roa (raw, json)
Hash identifier: f5O8Bn2YnsbtO6fZ2yobtu42EtOGnDmaWXENO10B20I=
Subject key identifier: 27:7A:0A:57:B2:12:39:3E:AF:70:72:C2:BB:CB:4A:59:73:1F:DB:A7
Certificate issuer: /CN=f30e445195b64d799b822e99947792e0cab32b6d
Certificate serial: 01A1CE4832608C3FD7A3E8CB14FDDB4FC971
Authority key identifier: F3:0E:44:51:95:B6:4D:79:9B:82:2E:99:94:77:92:E0:CA:B3:2B:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8w5EUZW2TXmbgi6ZlHeS4MqzK20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/J3oKV7ISOT6vcHLCu8tKWXMf26c.roa
Signing time: Thu 12 Nov 2026 05:43:20 +0000
ROA not before: Thu 12 Nov 2026 05:43:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152726
IP address blocks: 189.13.208.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/8w5EUZW2TXmbgi6ZlHeS4MqzK20.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/8w5EUZW2TXmbgi6ZlHeS4MqzK20.mft
rsync://rpki.ripe.net/repository/DEFAULT/8w5EUZW2TXmbgi6ZlHeS4MqzK20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:ce:48:32:60:8c:3f:d7:a3:e8:cb:14:fd:db:4f:c9:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f30e445195b64d799b822e99947792e0cab32b6d
Validity
Not Before: Nov 12 05:43:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=277a0a57b212393eaf7072c2bbcb4a59731fdba7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:0e:81:18:6f:b8:1c:a7:d6:ac:0a:6f:25:1a:
2d:20:98:7e:8f:51:cc:c9:71:cc:16:cd:a3:99:dd:
11:cc:7d:1b:47:c9:25:a2:01:84:79:60:e1:1d:8e:
e3:2e:f8:8e:37:4b:cf:2d:74:72:54:80:21:35:f1:
f5:94:b0:40:92:d5:f1:bd:c1:85:62:46:66:b1:83:
87:6e:28:fb:be:d7:79:8e:fc:7c:e8:61:80:f1:f1:
74:73:52:c5:1d:ad:e5:c5:80:81:5e:f5:fa:8c:17:
5a:37:59:dd:53:45:f6:56:87:79:49:2f:76:e4:e2:
e3:1f:1b:20:7f:55:e6:cd:d9:80:76:c5:99:6c:9d:
66:f4:01:3e:43:c1:f1:86:a2:b7:8b:a5:2c:73:f0:
1a:d0:7c:c2:bc:28:3f:60:58:d4:14:d4:59:b0:8d:
cc:6c:26:bd:6d:32:44:68:b3:19:9f:71:a6:f6:e1:
7f:4c:d8:89:40:14:72:d4:07:b5:dd:55:01:02:e9:
aa:30:f2:41:92:e4:40:c0:ae:d6:60:e6:db:dd:2c:
51:5d:21:5f:24:32:a2:0b:3a:5b:09:dc:25:e7:4d:
61:f9:15:c0:a2:e8:44:c8:c8:5a:70:11:ba:07:5c:
60:ae:fc:cf:64:0e:9f:c5:44:46:2a:5c:4d:97:45:
33:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:7A:0A:57:B2:12:39:3E:AF:70:72:C2:BB:CB:4A:59:73:1F:DB:A7
X509v3 Authority Key Identifier:
keyid:F3:0E:44:51:95:B6:4D:79:9B:82:2E:99:94:77:92:E0:CA:B3:2B:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8w5EUZW2TXmbgi6ZlHeS4MqzK20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/J3oKV7ISOT6vcHLCu8tKWXMf26c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/8w5EUZW2TXmbgi6ZlHeS4MqzK20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.13.208.0/20
Signature Algorithm: sha256WithRSAEncryption
43:a9:86:b0:5e:04:f5:50:a6:ec:66:9e:43:94:0b:20:82:cd:
46:ea:54:59:2a:84:09:74:47:07:42:a2:96:b6:30:5b:ce:30:
1e:d2:5e:9f:74:26:2a:03:46:a0:78:10:72:bd:d9:a3:bb:a7:
5b:f5:25:fd:e7:a0:7f:6f:3e:76:96:b1:b1:b9:0c:8f:5d:ed:
03:b5:a3:8b:4f:cb:fc:a7:5a:69:7a:8d:7a:7c:1c:d3:63:a4:
d9:19:89:e0:e0:1f:74:41:12:88:35:4c:de:90:bf:4e:6d:ec:
3d:a3:b3:bf:c1:31:60:55:8f:22:4b:53:ef:a7:0e:6e:14:67:
8a:a9:22:34:b4:27:0c:ff:bf:f5:ee:a6:d8:fd:29:63:ef:1f:
7f:8c:4c:72:9a:cd:9e:11:02:46:d8:fa:85:a9:65:71:cd:05:
44:fb:72:7c:bb:e5:7e:18:0a:41:89:42:b0:1d:93:27:6e:5d:
23:7f:a3:fc:4e:4a:12:cb:13:bd:9f:e8:ba:10:1d:63:45:3c:
7c:4c:90:c3:02:08:19:c4:cc:31:25:48:28:62:b9:32:51:a5:
e3:8e:5f:04:06:54:d3:10:f7:6b:d5:d3:75:92:36:f8:f7:65:
62:de:2c:51:34:4b:f9:12:e8:22:df:37:0b:c8:91:0f:24:2f:
cf:ec:e5:b2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaHOSDJgjD/Xo+jLFP3bT8lxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzMGU0NDUxOTViNjRkNzk5YjgyMmU5OTk0Nzc5MmUwY2Fi
MzJiNmQwHhcNMjYxMTEyMDU0MzIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNzdhMGE1N2IyMTIzOTNlYWY3MDcyYzJiYmNiNGE1OTczMWZkYmE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlA6BGG+4HKfWrApvJRotIJh+j1HM
yXHMFs2jmd0RzH0bR8klogGEeWDhHY7jLviON0vPLXRyVIAhNfH1lLBAktXxvcGF
YkZmsYOHbij7vtd5jvx86GGA8fF0c1LFHa3lxYCBXvX6jBdaN1ndU0X2Vod5SS92
5OLjHxsgf1XmzdmAdsWZbJ1m9AE+Q8HxhqK3i6Usc/Aa0HzCvCg/YFjUFNRZsI3M
bCa9bTJEaLMZn3Gm9uF/TNiJQBRy1Ae13VUBAumqMPJBkuRAwK7WYObb3SxRXSFf
JDKiCzpbCdwl501h+RXAouhEyMhacBG6B1xgrvzPZA6fxURGKlxNl0UzBwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCd6CleyEjk+r3BywrvLSllzH9unMB8GA1UdIwQY
MBaAFPMORFGVtk15m4IumZR3kuDKsyttMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHc1RVVaVzJUWG1iZ2k2WmxIZVM0TXF6SzIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9iNTJjNWQtOTViYS00ZGQzLWJiYTgt
YjdjYTFmNDcyOGQwLzEvSjNvS1Y3SVNPVDZ2Y0hMQ3U4dEtXWE1mMjZjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi9iNTJjNWQtOTViYS00ZGQzLWJiYTgtYjdjYTFmNDcyOGQw
LzEvOHc1RVVaVzJUWG1iZ2k2WmxIZVM0TXF6SzIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEvQ3QMA0G
CSqGSIb3DQEBCwUAA4IBAQBDqYawXgT1UKbsZp5DlAsggs1G6lRZKoQJdEcHQqKW
tjBbzjAe0l6fdCYqA0ageBByvdmju6db9SX956B/bz52lrGxuQyPXe0DtaOLT8v8
p1ppeo16fBzTY6TZGYng4B90QRKINUzekL9Obew9o7O/wTFgVY8iS1Pvpw5uFGeK
qSI0tCcM/7/17qbY/Slj7x9/jExyms2eEQJG2PqFqWVxzQVE+3J8u+V+GApBiUKw
HZMnbl0jf6P8TkoSyxO9n+i6EB1jRTx8TJDDAggZxMwxJUgoYrkyUaXjjl8EBlTT
EPdr1dN1kjb492Vi3ixRNEv5Eugi3zcLyJEPJC/P7OWy
-----END CERTIFICATE-----
Generated at Sun Nov 15 12:55:38 2026 by rpki-client