Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/acd34b-357f-4307-83c0-0857e3ec03e0/1/j01J8JV2uwPmKdRRQV3n_XVbHx4.roa
File: j01J8JV2uwPmKdRRQV3n_XVbHx4.roa (raw, json)
Hash identifier: wWdUxsFsMiU4pGs7qrmnXU+55ZJGb8/nPLCaqP1qED8=
Subject key identifier: 8F:4D:49:F0:95:76:BB:03:E6:29:D4:51:41:5D:E7:FD:75:5B:1F:1E
Certificate issuer: /CN=11a3864558bf42892bf9e5359bdb13f03b2527a9
Certificate serial: 01A0AF32F4312C641C0651D6448851FDEC24
Authority key identifier: 11:A3:86:45:58:BF:42:89:2B:F9:E5:35:9B:DB:13:F0:3B:25:27:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EaOGRVi_Qokr-eU1m9sT8DslJ6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/acd34b-357f-4307-83c0-0857e3ec03e0/1/j01J8JV2uwPmKdRRQV3n_XVbHx4.roa
Signing time: Thu 17 Sep 2026 11:49:07 +0000
ROA not before: Thu 17 Sep 2026 11:49:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208355
IP address blocks: 95.133.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/acd34b-357f-4307-83c0-0857e3ec03e0/1/EaOGRVi_Qokr-eU1m9sT8DslJ6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/acd34b-357f-4307-83c0-0857e3ec03e0/1/EaOGRVi_Qokr-eU1m9sT8DslJ6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/EaOGRVi_Qokr-eU1m9sT8DslJ6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 20:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:af:32:f4:31:2c:64:1c:06:51:d6:44:88:51:fd:ec:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11a3864558bf42892bf9e5359bdb13f03b2527a9
Validity
Not Before: Sep 17 11:49:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8f4d49f09576bb03e629d451415de7fd755b1f1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b3:41:ad:02:4b:4a:89:f3:ec:b4:90:34:ed:
1c:7f:45:a8:17:88:d0:2a:0f:14:91:c2:84:ac:fb:
c0:ce:82:ad:26:bc:be:89:da:7f:86:f9:15:83:04:
ee:ac:c3:a6:d6:3b:27:d1:76:58:06:56:4a:dd:2d:
ee:d2:3d:96:bc:13:78:b3:06:b4:6c:4c:55:67:d7:
ae:f6:4b:0b:94:bf:73:bc:5e:db:86:1b:88:bb:f7:
ca:c6:e2:d3:50:dd:14:38:99:92:48:b1:de:bf:7e:
b5:fd:34:7d:22:7b:40:3c:36:e2:16:e1:50:35:b2:
07:69:05:7d:39:55:16:25:b3:75:d5:2c:31:d0:d9:
89:ef:3b:23:99:53:c2:e0:8b:59:be:9a:fe:c5:9a:
a1:02:52:81:09:a7:51:6c:54:29:37:61:a8:eb:c0:
9a:20:c9:d9:75:60:a2:40:87:0a:82:28:e4:9f:44:
7f:6a:cf:c0:a4:b7:e0:5a:cc:d1:2a:49:23:f5:dc:
cf:f2:89:bb:e2:78:b2:5f:ff:66:3e:fd:e4:f5:b9:
b8:85:76:88:0a:68:a0:e8:fc:d4:72:db:6f:e5:1e:
a3:4f:93:c0:e6:af:3b:78:22:50:a0:fa:ba:8d:a8:
2b:bd:e8:00:82:3a:be:c0:be:a7:5a:e3:1c:c0:09:
6f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:4D:49:F0:95:76:BB:03:E6:29:D4:51:41:5D:E7:FD:75:5B:1F:1E
X509v3 Authority Key Identifier:
keyid:11:A3:86:45:58:BF:42:89:2B:F9:E5:35:9B:DB:13:F0:3B:25:27:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaOGRVi_Qokr-eU1m9sT8DslJ6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/acd34b-357f-4307-83c0-0857e3ec03e0/1/j01J8JV2uwPmKdRRQV3n_XVbHx4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/acd34b-357f-4307-83c0-0857e3ec03e0/1/EaOGRVi_Qokr-eU1m9sT8DslJ6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.133.139.0/24
Signature Algorithm: sha256WithRSAEncryption
00:0b:e8:36:30:71:03:ba:5b:07:05:58:f7:f4:7a:1b:62:b9:
84:bf:21:db:f9:5e:eb:68:0c:18:ec:c7:9c:49:47:08:86:1c:
46:7d:30:b5:df:47:68:8d:cb:4d:1b:fa:fe:0b:b1:32:e8:f0:
08:fc:ae:83:97:40:28:44:5e:49:44:c6:39:af:b1:c0:3c:4a:
98:b1:d8:b6:98:19:01:96:9d:2b:81:4f:70:8a:39:a5:04:08:
f9:95:49:08:92:d2:4a:56:a1:6f:7c:10:95:7f:5c:5b:2a:d0:
d9:79:ea:93:50:8b:3d:83:2f:db:a4:84:63:99:a8:21:68:ab:
22:a3:ff:35:d8:43:2c:af:d7:b6:3a:87:10:dc:88:42:26:de:
de:b6:eb:68:43:66:bc:74:62:f1:74:ec:46:d1:60:09:56:37:
d4:0c:41:e5:4d:c2:0a:99:8f:cd:d2:42:43:b3:a6:13:49:80:
c1:53:09:60:9a:25:df:9c:ac:e5:54:4d:23:c8:14:92:f4:36:
b7:53:8c:82:03:6e:41:a9:3a:a8:85:17:4e:e3:1d:32:e8:19:
b4:ed:79:38:9c:05:93:10:20:0d:28:4e:6f:91:1f:1f:28:9d:
de:3a:83:c4:2e:27:58:13:89:61:66:34:59:c1:59:c4:95:53:
b5:40:8d:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 07:14:00 2026 by rpki-client