Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/c8f6e1-46c8-4e12-8ce6-95b9e362f077/1/jyJWlzyZ1vX6PJ6bDoA7JzTaum8.roa
File: jyJWlzyZ1vX6PJ6bDoA7JzTaum8.roa (raw, json)
Hash identifier: tR46ai3C4TAvLUk9BEjJ8S6Zo8lFI3KVbuM5/C/MToI=
Subject key identifier: 8F:22:56:97:3C:99:D6:F5:FA:3C:9E:9B:0E:80:3B:27:34:DA:BA:6F
Certificate issuer: /CN=f1bb5228e6740755a3226ee32c8531a175457bc2
Certificate serial: 019F23688A118659E0BC5D5E254C075143B3
Authority key identifier: F1:BB:52:28:E6:74:07:55:A3:22:6E:E3:2C:85:31:A1:75:45:7B:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8btSKOZ0B1WjIm7jLIUxoXVFe8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/c8f6e1-46c8-4e12-8ce6-95b9e362f077/1/jyJWlzyZ1vX6PJ6bDoA7JzTaum8.roa
Signing time: Thu 02 Jul 2026 15:18:01 +0000
ROA not before: Thu 02 Jul 2026 15:18:01 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34576
IP address blocks: 147.220.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/c8f6e1-46c8-4e12-8ce6-95b9e362f077/1/8btSKOZ0B1WjIm7jLIUxoXVFe8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/c8f6e1-46c8-4e12-8ce6-95b9e362f077/1/8btSKOZ0B1WjIm7jLIUxoXVFe8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/8btSKOZ0B1WjIm7jLIUxoXVFe8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 15:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:8a:11:86:59:e0:bc:5d:5e:25:4c:07:51:43:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1bb5228e6740755a3226ee32c8531a175457bc2
Validity
Not Before: Jul 2 15:18:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8f2256973c99d6f5fa3c9e9b0e803b2734daba6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:dd:d2:a0:4e:a1:73:02:a7:f1:60:3d:f7:32:
b7:37:66:5e:fb:1b:3e:82:9f:1d:93:55:93:24:05:
f6:38:a0:15:b7:c7:c8:10:0f:d0:8b:cc:8f:04:ef:
76:68:55:8d:93:27:46:d3:56:0c:c5:d7:ef:31:de:
7a:99:1b:a8:9b:bb:41:23:22:e7:54:2d:7f:61:60:
d5:31:db:f6:8c:3a:d7:bf:16:df:f9:ab:e9:41:ea:
02:4c:e0:de:cb:dd:4f:a2:08:f2:28:d5:c8:99:10:
ce:01:86:b6:55:c8:62:ce:ad:58:66:7c:91:e5:45:
08:eb:b5:be:5f:26:a1:ac:e2:28:97:fd:87:b8:8b:
2f:16:29:39:d8:cd:63:11:4c:c4:00:d7:52:25:93:
d9:57:83:23:7e:17:af:33:60:73:06:1a:65:cc:d3:
4d:97:f7:c5:a9:73:ae:a3:cd:ec:0d:b3:81:c7:ef:
aa:88:39:b8:74:95:4f:64:ad:ae:44:fd:c9:c4:95:
1b:9d:d3:9b:87:ff:79:01:05:c0:65:1b:e8:ad:dd:
b1:b6:11:fc:d1:24:ee:64:32:39:0b:de:e0:b9:cb:
fd:91:26:f6:51:8d:cf:f2:c2:98:52:3e:83:55:e9:
4e:07:df:04:3d:39:41:69:c1:92:ac:b2:9a:0a:62:
e7:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:22:56:97:3C:99:D6:F5:FA:3C:9E:9B:0E:80:3B:27:34:DA:BA:6F
X509v3 Authority Key Identifier:
keyid:F1:BB:52:28:E6:74:07:55:A3:22:6E:E3:2C:85:31:A1:75:45:7B:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8btSKOZ0B1WjIm7jLIUxoXVFe8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/c8f6e1-46c8-4e12-8ce6-95b9e362f077/1/jyJWlzyZ1vX6PJ6bDoA7JzTaum8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/c8f6e1-46c8-4e12-8ce6-95b9e362f077/1/8btSKOZ0B1WjIm7jLIUxoXVFe8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.220.0.0/16
Signature Algorithm: sha256WithRSAEncryption
50:2b:23:09:3b:78:cb:d3:3d:9e:da:13:a1:7b:94:70:33:c5:
ee:d6:c0:58:26:85:4b:68:62:ea:98:b6:dc:68:a3:b2:8e:70:
d1:4c:68:f3:91:30:5d:a9:22:90:2c:46:00:bd:28:5a:5c:f4:
f0:55:55:91:72:b2:38:f0:53:ab:8d:cc:72:9f:1e:d7:d7:c1:
a0:17:34:8a:d2:13:f1:2e:a4:24:43:aa:2e:32:cc:62:c7:07:
05:a8:d2:de:4d:72:c1:3c:e6:a7:4a:8b:66:c3:7a:b8:b3:2b:
7a:11:00:03:88:73:c3:a5:e2:53:02:68:40:5a:ab:65:d3:2a:
96:dc:64:8c:e4:78:f9:b4:5c:53:a2:82:7a:ad:bc:17:e9:eb:
3b:b8:cb:3a:2b:d6:69:4d:17:31:4b:0d:f1:19:00:cc:49:f6:
0f:a2:8d:8c:d1:36:97:14:a6:00:6f:e9:fc:6d:bb:26:8e:8c:
44:d0:c1:f6:47:9e:0e:53:73:f1:8d:d9:41:b3:ca:2d:09:01:
f4:f8:17:c9:2a:c0:5e:68:3b:46:e0:b2:01:32:e1:2c:fb:60:
c1:d4:0c:5e:59:46:56:b9:54:fe:2e:ca:71:bc:21:73:c7:81:
5f:98:eb:f2:27:b3:4f:84:de:dd:7f:a5:e3:92:41:9b:42:26:
9d:99:ce:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:02:19 2026 by rpki-client