Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/1-j2_96SOx1ukEFdit_O2T_yb5bw.roa
File: 1-j2_96SOx1ukEFdit_O2T_yb5bw.roa (raw, json)
Hash identifier: uAjesrCnFYS2clX9EiMVgOpOxvLDGRa2pdi/Q+Yh8ko=
Subject key identifier: FA:3D:BF:F7:A4:8E:C7:5B:A4:10:57:62:B7:F3:B6:4F:FC:9B:E5:BC
Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Certificate serial: 019CE5E44FC660ECB2E60385B42D94A4FBC6
Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/1-j2_96SOx1ukEFdit_O2T_yb5bw.roa
Signing time: Fri 13 Mar 2026 06:31:10 +0000
ROA not before: Fri 13 Mar 2026 06:31:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201309
IP address blocks: 185.3.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:e4:4f:c6:60:ec:b2:e6:03:85:b4:2d:94:a4:fb:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Validity
Not Before: Mar 13 06:31:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fa3dbff7a48ec75ba4105762b7f3b64ffc9be5bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:bf:16:6b:0e:2d:c6:16:fa:d4:15:a0:cc:f5:
22:d6:0e:d4:96:15:0d:20:21:90:8e:35:48:18:18:
e8:28:40:56:fe:c2:29:23:f0:16:f7:4a:1b:44:5f:
00:22:30:ea:d0:59:90:71:75:fb:50:cf:fe:dc:cb:
3b:e4:83:d2:b5:4d:80:91:b1:52:b3:d6:8e:c9:63:
f6:f1:b6:cc:63:42:3b:90:d4:77:05:2f:e7:c8:59:
b4:7d:98:e1:71:40:e4:b0:fa:4a:86:6e:29:28:63:
23:d7:92:8b:12:93:0c:e2:6d:68:f1:8f:f7:3c:bc:
0b:16:c4:c0:ee:16:b3:0c:34:96:07:c9:2f:d1:e1:
0f:4f:a2:a8:60:e6:a6:96:39:73:ba:5c:65:6c:de:
7b:59:4a:0c:37:87:2d:bd:83:cb:a4:11:4d:38:37:
c0:5d:9c:9d:66:9b:f2:0b:7a:50:7f:2a:4f:18:4f:
17:b7:94:6d:23:5a:56:ae:a9:b6:c6:68:58:e2:9a:
31:46:9e:7a:15:f1:08:97:e4:3c:8e:56:92:5a:ae:
70:5e:88:27:70:07:33:a6:c1:76:92:fb:f4:9c:f0:
b7:87:20:4d:ff:ba:58:6f:97:02:3b:19:4e:8a:d8:
f0:1c:5d:71:3f:cc:d3:07:38:30:48:4f:52:48:b3:
29:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:3D:BF:F7:A4:8E:C7:5B:A4:10:57:62:B7:F3:B6:4F:FC:9B:E5:BC
X509v3 Authority Key Identifier:
keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/1-j2_96SOx1ukEFdit_O2T_yb5bw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.3.200.0/24
Signature Algorithm: sha256WithRSAEncryption
39:2d:0a:4a:56:66:a4:98:ea:61:e8:c9:a2:79:06:20:24:04:
db:57:4d:3f:06:b9:d0:5f:f9:b0:92:78:82:c4:52:b4:c6:8c:
17:f8:24:ba:3d:0c:52:16:c8:4b:1c:44:0d:ee:80:f8:6a:38:
9d:b5:73:e9:20:9f:54:c8:d3:0b:ed:e5:02:c7:22:ee:db:d6:
a5:3f:e5:82:e5:78:77:d8:70:b2:4f:62:cf:2e:78:28:d3:95:
63:83:4d:13:b2:5e:15:e2:95:5f:57:fa:fd:07:4c:a5:65:bc:
eb:4f:1d:bc:c1:fa:1f:d1:63:45:a0:19:db:11:66:3c:b9:47:
50:7e:6f:b4:4d:b7:3d:81:1b:4a:5c:af:54:f0:e7:4e:e9:18:
d6:b0:68:c2:e2:61:2f:a8:f4:c1:ec:a1:64:36:26:9f:27:47:
1b:d4:8e:d0:ae:8c:e8:ce:4e:0d:95:ff:96:bc:ce:75:8e:ee:
66:98:d3:db:fd:ee:9d:15:29:93:dc:89:6f:20:93:f2:4a:40:
42:12:ca:f3:21:d1:b7:e2:6c:67:60:76:d6:a7:97:a8:31:91:
40:0a:7a:05:ce:25:13:ac:7b:e2:8f:87:99:15:c8:b7:1c:00:
c1:f0:a5:69:99:2d:0a:da:22:2a:24:89:e6:7f:dd:60:d4:13:
32:6f:a9:27
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZzl5E/GYOyy5gOFtC2UpPvGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkZGIzOGIzNDNkYTJkMTE5MzA5ZWRhYTE5YzdhNzg4NzAz
MjdlYmUwHhcNMjYwMzEzMDYzMTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYTNkYmZmN2E0OGVjNzViYTQxMDU3NjJiN2YzYjY0ZmZjOWJlNWJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+L8Waw4txhb61BWgzPUi1g7UlhUN
ICGQjjVIGBjoKEBW/sIpI/AW90obRF8AIjDq0FmQcXX7UM/+3Ms75IPStU2AkbFS
s9aOyWP28bbMY0I7kNR3BS/nyFm0fZjhcUDksPpKhm4pKGMj15KLEpMM4m1o8Y/3
PLwLFsTA7hazDDSWB8kv0eEPT6KoYOamljlzulxlbN57WUoMN4ctvYPLpBFNODfA
XZydZpvyC3pQfypPGE8Xt5RtI1pWrqm2xmhY4poxRp56FfEIl+Q8jlaSWq5wXogn
cAczpsF2kvv0nPC3hyBN/7pYb5cCOxlOitjwHF1xP8zTBzgwSE9SSLMp/QIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPo9v/ekjsdbpBBXYrfztk/8m+W8MB8GA1UdIwQY
MBaAFG3bOLND2i0RkwntqhnHp4hwMn6+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmRzNHMwUGFMUkdUQ2UycUdjZW5pSEF5ZnI0LmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9jOTYxYTAtNGY1My00MjJhLWI3ZGQt
M2RmYTUxMGQ2YjE2LzEvMS1qMl85NlNPeDF1a0VGZGl0X08yVF95YjVidy5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNTIvYzk2MWEwLTRmNTMtNDIyYS1iN2RkLTNkZmE1MTBkNmIx
Ni8xL2JkczRzMFBhTFJHVENlMnFHY2VuaUhBeWZyNC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALkDyDAN
BgkqhkiG9w0BAQsFAAOCAQEAOS0KSlZmpJjqYejJonkGICQE21dNPwa50F/5sJJ4
gsRStMaMF/gkuj0MUhbISxxEDe6A+Go4nbVz6SCfVMjTC+3lAsci7tvWpT/lguV4
d9hwsk9izy54KNOVY4NNE7JeFeKVX1f6/QdMpWW8608dvMH6H9FjRaAZ2xFmPLlH
UH5vtE23PYEbSlyvVPDnTukY1rBowuJhL6j0weyhZDYmnydHG9SO0K6M6M5ODZX/
lrzOdY7uZpjT2/3unRUpk9yJbyCT8kpAQhLK8yHRt+JsZ2B21qeXqDGRQAp6Bc4l
E6x74o+HmRXItxwAwfClaZktCtoiKiSJ5n/dYNQTMm+pJw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:42:58 2026 by rpki-client