Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/J0g0M-tLz9_XJKmQXS_cREHqxsw.roa
File: J0g0M-tLz9_XJKmQXS_cREHqxsw.roa (raw, json)
Hash identifier: eaYzrmzaTo2hzva512+RyT0D/DC5vtAwuxeedgWK+P4=
Subject key identifier: 27:48:34:33:EB:4B:CF:DF:D7:24:A9:90:5D:2F:DC:44:41:EA:C6:CC
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 019EF656AD21C2A175A82DE974C9622A96B0
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/J0g0M-tLz9_XJKmQXS_cREHqxsw.roa
Signing time: Tue 23 Jun 2026 21:15:35 +0000
ROA not before: Tue 23 Jun 2026 21:15:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42694
IP address blocks: 193.221.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft
rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f6:56:ad:21:c2:a1:75:a8:2d:e9:74:c9:62:2a:96:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jun 23 21:15:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=27483433eb4bcfdfd724a9905d2fdc4441eac6cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c5:7e:0f:6c:ec:09:a1:a7:13:21:1e:e0:15:
78:87:70:69:d4:d9:c2:56:44:d6:a6:52:49:f9:73:
26:e3:2a:ee:7b:68:7b:d8:7c:22:6c:63:1e:75:5c:
0d:9f:93:bd:09:3c:b9:24:f3:4d:ee:bc:26:de:b2:
7a:e8:be:0d:5e:86:69:3c:61:39:08:41:27:b8:25:
f7:cb:39:d9:9a:58:8e:67:56:cd:3a:cc:88:03:a7:
aa:93:38:66:8f:2d:31:08:e2:f9:d2:84:57:5c:41:
fa:d4:74:5f:c1:51:48:db:93:d3:53:34:cc:c0:69:
27:0c:ff:dd:74:51:dd:77:05:22:2f:de:99:a5:40:
eb:20:4d:eb:1c:c2:cf:f5:2d:db:47:dc:63:fc:43:
2f:4f:af:8b:25:6a:b6:95:e0:88:12:91:ad:29:50:
80:8c:d7:b1:ef:85:41:e4:a4:f1:6c:b0:d4:ae:37:
2d:6b:69:2b:f4:c7:1e:91:0c:84:ac:55:51:da:ba:
49:5e:67:53:3b:a8:97:6b:ff:f1:ab:ed:48:cf:0e:
4b:17:31:e8:be:ff:43:94:3f:e2:8a:93:61:42:57:
18:eb:be:08:db:43:72:4d:a4:c5:9f:ed:2d:33:33:
ea:64:62:6d:78:82:4e:af:0d:13:e7:c7:89:e3:3b:
56:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:48:34:33:EB:4B:CF:DF:D7:24:A9:90:5D:2F:DC:44:41:EA:C6:CC
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/J0g0M-tLz9_XJKmQXS_cREHqxsw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.221.211.0/24
Signature Algorithm: sha256WithRSAEncryption
69:a1:49:c8:3f:bf:47:f2:13:23:7e:d2:ff:15:7c:77:29:a8:
b2:38:9e:cb:22:67:5f:e5:4b:56:3b:6c:33:b2:e4:cc:b2:6c:
f6:63:f6:c9:e9:11:7f:d9:24:75:c9:00:f5:7f:9d:4e:cb:2a:
35:3e:13:18:be:f4:06:e7:fa:3d:dc:26:f5:00:c0:d3:6e:ee:
97:6e:ba:04:34:85:39:bb:2b:ad:72:fc:be:27:d2:3b:da:cd:
bb:25:06:cb:e6:e0:ae:a0:24:ed:1c:5c:29:49:c7:ff:8d:6a:
03:c5:63:f5:32:7c:9d:56:1e:25:3a:c1:5b:94:e9:5c:11:5c:
06:ca:c2:62:a8:0e:ba:5b:2a:9e:18:ae:bf:ac:6b:28:9d:2e:
88:c7:64:91:09:d1:a5:cd:17:20:ba:cc:ab:97:20:e0:30:45:
d0:8d:9b:14:da:ca:c3:33:12:64:aa:6a:ab:18:22:08:4a:65:
8e:b1:45:c5:72:72:ce:39:0f:85:5a:20:98:94:6e:b6:34:4e:
72:96:a4:2c:d9:77:e3:b4:a5:0f:4e:5a:5c:d8:ef:28:8a:7b:
9d:25:46:57:09:5c:b7:0c:a4:24:bc:78:9b:28:10:f4:35:e7:
30:91:a8:ef:ff:9b:67:5c:66:f6:3c:ba:d8:0f:fc:b0:9d:b0:
c5:19:75:21
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ72Vq0hwqF1qC3pdMliKpawMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiYWIzMDY4Mzg1OWVjN2UwMjA2ZmU5MjY1MzYzZThlMzk3
MWE5YTgwHhcNMjYwNjIzMjExNTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNzQ4MzQzM2ViNGJjZmRmZDcyNGE5OTA1ZDJmZGM0NDQxZWFjNmNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8V+D2zsCaGnEyEe4BV4h3Bp1NnC
VkTWplJJ+XMm4yrue2h72HwibGMedVwNn5O9CTy5JPNN7rwm3rJ66L4NXoZpPGE5
CEEnuCX3yznZmliOZ1bNOsyIA6eqkzhmjy0xCOL50oRXXEH61HRfwVFI25PTUzTM
wGknDP/ddFHddwUiL96ZpUDrIE3rHMLP9S3bR9xj/EMvT6+LJWq2leCIEpGtKVCA
jNex74VB5KTxbLDUrjcta2kr9McekQyErFVR2rpJXmdTO6iXa//xq+1Izw5LFzHo
vv9DlD/iipNhQlcY674I20NyTaTFn+0tMzPqZGJteIJOrw0T58eJ4ztWLwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCdINDPrS8/f1ySpkF0v3ERB6sbMMB8GA1UdIwQY
MBaAFIurMGg4Wex+Agb+kmU2Po45camoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQt
M2FjOWU1NmMzMDg5LzEvSjBnME0tdEx6OV9YSkttUVhTX2NSRUhxeHN3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQtM2FjOWU1NmMzMDg5
LzEvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwd3TMA0G
CSqGSIb3DQEBCwUAA4IBAQBpoUnIP79H8hMjftL/FXx3KaiyOJ7LImdf5UtWO2wz
suTMsmz2Y/bJ6RF/2SR1yQD1f51Oyyo1PhMYvvQG5/o93Cb1AMDTbu6XbroENIU5
uyutcvy+J9I72s27JQbL5uCuoCTtHFwpScf/jWoDxWP1MnydVh4lOsFblOlcEVwG
ysJiqA66WyqeGK6/rGsonS6Ix2SRCdGlzRcgusyrlyDgMEXQjZsU2srDMxJkqmqr
GCIISmWOsUXFcnLOOQ+FWiCYlG62NE5ylqQs2XfjtKUPTlpc2O8oinudJUZXCVy3
DKQkvHibKBD0Necwkajv/5tnXGb2PLrYD/ywnbDFGXUh
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:47:57 2026 by rpki-client