Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/acc09c-e3dc-4697-ac49-8d97e8785d4f/1/jcRzJUg7IUVEUlfjHqL1NEbulJY.roa
File: jcRzJUg7IUVEUlfjHqL1NEbulJY.roa (raw, json)
Hash identifier: 043yV8J6dMsTpPpYvQ/xWssybIOO8FTRI8kOXFFcDXA=
Subject key identifier: 8D:C4:73:25:48:3B:21:45:44:52:57:E3:1E:A2:F5:34:46:EE:94:96
Certificate issuer: /CN=a7890440daf1c3ac38773e85215112f74b706232
Certificate serial: 019F6B7A059FEAB3BBF2FC0B920AAFA2AF57
Authority key identifier: A7:89:04:40:DA:F1:C3:AC:38:77:3E:85:21:51:12:F7:4B:70:62:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p4kEQNrxw6w4dz6FIVES90twYjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/acc09c-e3dc-4697-ac49-8d97e8785d4f/1/jcRzJUg7IUVEUlfjHqL1NEbulJY.roa
Signing time: Thu 16 Jul 2026 15:09:46 +0000
ROA not before: Thu 16 Jul 2026 15:09:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60713
IP address blocks: 213.239.130.0/23 maxlen: 23
213.239.132.0/22 maxlen: 22
2a12:68c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/acc09c-e3dc-4697-ac49-8d97e8785d4f/1/p4kEQNrxw6w4dz6FIVES90twYjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/acc09c-e3dc-4697-ac49-8d97e8785d4f/1/p4kEQNrxw6w4dz6FIVES90twYjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/p4kEQNrxw6w4dz6FIVES90twYjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 18:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6b:7a:05:9f:ea:b3:bb:f2:fc:0b:92:0a:af:a2:af:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7890440daf1c3ac38773e85215112f74b706232
Validity
Not Before: Jul 16 15:09:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8dc47325483b2145445257e31ea2f53446ee9496
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:10:0e:1a:d3:84:f5:fa:ad:a8:d9:14:4e:8c:
f2:64:d8:a0:37:e7:1b:e2:42:17:b5:9c:08:96:71:
46:c9:c9:81:a4:3f:bd:72:a3:a3:f0:84:32:90:9b:
00:79:fe:74:f9:5a:02:da:b0:b0:51:e3:b3:d0:29:
59:c0:72:5b:93:a9:74:d7:b1:c7:5c:d1:80:ee:34:
10:67:88:7e:c2:8c:51:06:72:59:5d:27:5e:95:5a:
b6:f6:5f:60:d7:94:4f:1b:c4:18:16:e8:a9:27:9b:
a6:02:eb:3e:8a:9e:54:9f:63:68:7f:91:fe:43:65:
0a:93:87:cb:95:c1:ad:3c:8b:9d:00:8a:ef:cf:8b:
8c:be:23:75:13:d5:bd:b9:48:69:06:1b:2a:7a:74:
d6:54:6b:71:ae:d7:5d:1c:3f:e3:df:f2:6c:ff:b0:
b9:98:17:a0:d7:93:70:e7:a1:3b:4a:db:d0:a3:f8:
8e:b6:7e:4a:cd:e3:9a:45:b4:ac:30:d3:7b:71:2c:
b4:17:ee:ce:51:1b:22:21:26:7c:7c:e2:f3:81:d2:
33:b3:53:31:9e:b0:1c:15:6b:7c:8d:2a:5c:ab:20:
a0:74:53:cd:40:0b:45:1b:6f:64:c2:3a:ff:8f:a1:
9c:75:0a:12:38:bd:0e:9f:50:fd:df:08:0c:94:ed:
f1:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:C4:73:25:48:3B:21:45:44:52:57:E3:1E:A2:F5:34:46:EE:94:96
X509v3 Authority Key Identifier:
keyid:A7:89:04:40:DA:F1:C3:AC:38:77:3E:85:21:51:12:F7:4B:70:62:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p4kEQNrxw6w4dz6FIVES90twYjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/acc09c-e3dc-4697-ac49-8d97e8785d4f/1/jcRzJUg7IUVEUlfjHqL1NEbulJY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/acc09c-e3dc-4697-ac49-8d97e8785d4f/1/p4kEQNrxw6w4dz6FIVES90twYjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.239.130.0-213.239.135.255
IPv6:
2a12:68c0::/32
Signature Algorithm: sha256WithRSAEncryption
7f:e9:67:d7:29:46:d0:f5:72:dd:22:98:8d:94:58:b2:b4:2c:
59:35:73:7a:86:93:d1:4c:97:7b:0d:ed:d3:1b:d3:3b:4d:78:
32:90:35:f4:54:41:d3:dc:63:30:6c:a8:88:22:30:b4:59:ee:
1c:17:97:59:77:da:65:f5:90:a4:1e:42:90:44:69:81:d3:f2:
27:44:4e:bf:b8:c0:79:ba:91:9c:ce:e2:50:8f:6b:6f:ae:f0:
fa:6d:a8:d7:f7:9a:b4:a5:82:e8:5b:2f:a1:9e:eb:bd:62:28:
49:24:ad:94:ee:1c:d5:54:be:a6:02:ac:00:b5:ee:79:03:2f:
40:aa:35:67:f8:23:de:dd:28:c2:9d:c7:bc:ca:cd:3f:eb:52:
aa:c4:73:f2:62:c6:94:06:23:7d:45:64:8d:1b:7f:58:d8:78:
e4:9d:5f:3d:42:64:58:90:b2:fb:38:e9:93:3d:8d:ad:62:c5:
22:26:18:ae:2f:2f:af:18:d0:b1:58:aa:d9:f6:f0:e0:eb:24:
99:6b:6a:15:be:28:a3:39:af:61:85:3c:03:89:4d:83:e2:02:
e1:b7:b7:28:e4:6f:41:ce:af:8d:ee:ee:65:8d:6f:13:11:bf:
15:9e:2b:c8:fd:44:68:1a:c2:56:ce:db:06:fa:df:11:b7:8c:
40:48:43:50
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAZ9regWf6rO78vwLkgqvoq9XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3ODkwNDQwZGFmMWMzYWMzODc3M2U4NTIxNTExMmY3NGI3
MDYyMzIwHhcNMjYwNzE2MTUwOTQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZGM0NzMyNTQ4M2IyMTQ1NDQ1MjU3ZTMxZWEyZjUzNDQ2ZWU5NDk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRAOGtOE9fqtqNkUTozyZNigN+cb
4kIXtZwIlnFGycmBpD+9cqOj8IQykJsAef50+VoC2rCwUeOz0ClZwHJbk6l017HH
XNGA7jQQZ4h+woxRBnJZXSdelVq29l9g15RPG8QYFuipJ5umAus+ip5Un2Nof5H+
Q2UKk4fLlcGtPIudAIrvz4uMviN1E9W9uUhpBhsqenTWVGtxrtddHD/j3/Js/7C5
mBeg15Nw56E7StvQo/iOtn5KzeOaRbSsMNN7cSy0F+7OURsiISZ8fOLzgdIzs1Mx
nrAcFWt8jSpcqyCgdFPNQAtFG29kwjr/j6GcdQoSOL0On1D93wgMlO3xNQIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFI3EcyVIOyFFRFJX4x6i9TRG7pSWMB8GA1UdIwQY
MBaAFKeJBEDa8cOsOHc+hSFREvdLcGIyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcDRrRVFOcnh3Nnc0ZHo2RklWRVM5MHR3WWpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9hY2MwOWMtZTNkYy00Njk3LWFjNDkt
OGQ5N2U4Nzg1ZDRmLzEvamNSekpVZzdJVVZFVWxmakhxTDFORWJ1bEpZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS9hY2MwOWMtZTNkYy00Njk3LWFjNDktOGQ5N2U4Nzg1ZDRm
LzEvcDRrRVFOcnh3Nnc0ZHo2RklWRVM5MHR3WWpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTAUBAIAATAOMAwDBAHV74ID
BAPV74AwDQQCAAIwBwMFACoSaMAwDQYJKoZIhvcNAQELBQADggEBAH/pZ9cpRtD1
ct0imI2UWLK0LFk1c3qGk9FMl3sN7dMb0ztNeDKQNfRUQdPcYzBsqIgiMLRZ7hwX
l1l32mX1kKQeQpBEaYHT8idETr+4wHm6kZzO4lCPa2+u8PptqNf3mrSlguhbL6Ge
671iKEkkrZTuHNVUvqYCrAC17nkDL0CqNWf4I97dKMKdx7zKzT/rUqrEc/JixpQG
I31FZI0bf1jYeOSdXz1CZFiQsvs46ZM9ja1ixSImGK4vL68Y0LFYqtn28ODrJJlr
ahW+KKM5r2GFPAOJTYPiAuG3tyjkb0HOr43u7mWNbxMRvxWeK8j9RGgawlbO2wb6
3xG3jEBIQ1A=
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:07:03 2026 by rpki-client