Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/rI8JWSRZVq0j2LCqcpbojmJ7f80.roa
File: rI8JWSRZVq0j2LCqcpbojmJ7f80.roa (raw, json)
Hash identifier: cERfCgESjvWA5sZDpKF9y4SzFcGtyWbX25sWtXaUQgc=
Subject key identifier: AC:8F:09:59:24:59:56:AD:23:D8:B0:AA:72:96:E8:8E:62:7B:7F:CD
Certificate issuer: /CN=2e368b0aec6c7fd48d0d96b4077a23f906a86a48
Certificate serial: 01A0BF59798604F52C3E6C46A8347BEF0C7F
Authority key identifier: 2E:36:8B:0A:EC:6C:7F:D4:8D:0D:96:B4:07:7A:23:F9:06:A8:6A:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/rI8JWSRZVq0j2LCqcpbojmJ7f80.roa
Signing time: Sun 20 Sep 2026 15:05:07 +0000
ROA not before: Sun 20 Sep 2026 15:05:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197328
IP address blocks: 5.255.57.0/24 maxlen: 24
23.252.68.0/24 maxlen: 24
107.150.171.0/24 maxlen: 24
167.160.11.0/24 maxlen: 24
185.4.227.0/24 maxlen: 24
185.150.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bf:59:79:86:04:f5:2c:3e:6c:46:a8:34:7b:ef:0c:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e368b0aec6c7fd48d0d96b4077a23f906a86a48
Validity
Not Before: Sep 20 15:05:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ac8f0959245956ad23d8b0aa7296e88e627b7fcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:82:e7:9b:77:ba:89:1f:55:fd:61:0c:5d:f5:
c7:e0:d7:ee:ed:d0:0b:43:d1:9a:d5:92:b0:c7:15:
a7:82:71:ee:63:de:8b:12:56:67:32:b9:a7:02:1f:
47:86:bf:e6:20:40:a5:c4:c9:74:4d:b6:c5:4a:e5:
6b:1a:4b:4b:8b:5b:9b:0c:df:2a:2b:30:65:f6:7d:
08:88:e9:43:f3:d6:9a:92:43:a2:70:ff:7f:53:af:
1c:37:c0:58:75:11:1a:1d:52:52:53:8d:58:b5:0d:
36:a3:4f:ff:62:0b:7a:e2:c4:a6:a7:70:3d:2a:6b:
57:cd:57:39:b7:99:a9:78:08:cd:ed:1d:ba:94:05:
69:04:2f:d8:ea:ed:96:2b:7c:54:c8:62:aa:5c:de:
53:e1:c7:ed:bd:66:89:de:0b:fb:2c:dc:66:0a:94:
d8:e9:52:d6:02:4e:53:7c:21:63:27:44:8b:b2:bc:
b1:6f:a7:c6:80:95:28:fd:08:65:07:61:f4:a9:f3:
d8:55:49:5c:70:82:6d:bb:42:50:05:4a:06:a1:33:
f9:9f:e0:93:7e:03:c9:d5:b6:30:3a:00:8e:92:a3:
85:44:7f:1e:46:96:d6:33:c4:18:37:d7:70:10:32:
74:60:58:67:0e:7d:30:00:62:e3:fc:46:92:01:f1:
70:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:8F:09:59:24:59:56:AD:23:D8:B0:AA:72:96:E8:8E:62:7B:7F:CD
X509v3 Authority Key Identifier:
keyid:2E:36:8B:0A:EC:6C:7F:D4:8D:0D:96:B4:07:7A:23:F9:06:A8:6A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/rI8JWSRZVq0j2LCqcpbojmJ7f80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.255.57.0/24
23.252.68.0/24
107.150.171.0/24
167.160.11.0/24
185.4.227.0/24
185.150.2.0/24
Signature Algorithm: sha256WithRSAEncryption
95:f4:73:a8:b5:ad:00:8c:91:0b:7e:ca:97:7a:27:fe:60:04:
da:a4:19:08:49:bc:bd:4d:1e:5e:5d:7b:0f:a9:6d:f5:51:ed:
0c:c5:99:b5:35:d0:65:1e:6a:8f:55:b6:92:1a:40:f6:86:31:
94:db:15:b4:4f:e9:a3:59:83:44:69:70:8c:7a:21:80:d3:47:
45:2d:cf:2f:e3:04:d4:0f:6b:3d:e3:5c:36:81:6c:f5:f5:ec:
b5:9b:1f:c7:d1:f5:f0:6b:cc:b6:cc:54:66:89:af:0a:b6:9a:
21:49:fa:af:1a:0f:b6:ac:26:fd:e2:24:23:85:9e:0c:7c:2f:
03:ed:80:d3:e3:6b:68:2d:e6:11:73:68:14:bb:86:61:45:5a:
60:16:e0:23:74:7d:f3:9e:73:fb:9a:42:31:10:30:82:2d:b3:
c3:9a:b7:ca:9a:b0:da:53:72:18:48:4c:3d:6d:41:70:1d:a3:
cf:7d:a2:d3:ee:0e:58:48:4e:d8:9d:50:79:ee:de:9d:05:b0:
7c:b4:4e:74:d8:18:29:99:6c:96:d1:3b:ae:f8:e6:27:a9:45:
11:c1:2d:6e:d1:88:89:32:a9:41:12:29:c3:a5:f3:de:d3:0d:
93:96:a4:8f:fd:5a:e6:3d:ee:c1:c3:99:fe:8e:31:5a:31:3a:
e4:60:93:9c
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAaC/WXmGBPUsPmxGqDR77wx/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlMzY4YjBhZWM2YzdmZDQ4ZDBkOTZiNDA3N2EyM2Y5MDZh
ODZhNDgwHhcNMjYwOTIwMTUwNTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYzhmMDk1OTI0NTk1NmFkMjNkOGIwYWE3Mjk2ZTg4ZTYyN2I3ZmNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtoLnm3e6iR9V/WEMXfXH4Nfu7dAL
Q9Ga1ZKwxxWngnHuY96LElZnMrmnAh9Hhr/mIEClxMl0TbbFSuVrGktLi1ubDN8q
KzBl9n0IiOlD89aakkOicP9/U68cN8BYdREaHVJSU41YtQ02o0//Ygt64sSmp3A9
KmtXzVc5t5mpeAjN7R26lAVpBC/Y6u2WK3xUyGKqXN5T4cftvWaJ3gv7LNxmCpTY
6VLWAk5TfCFjJ0SLsryxb6fGgJUo/QhlB2H0qfPYVUlccIJtu0JQBUoGoTP5n+CT
fgPJ1bYwOgCOkqOFRH8eRpbWM8QYN9dwEDJ0YFhnDn0wAGLj/EaSAfFw+QIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFKyPCVkkWVatI9iwqnKW6I5ie3/NMB8GA1UdIwQY
MBaAFC42iwrsbH/UjQ2WtAd6I/kGqGpIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGphTEN1eHNmOVNORFphMEIzb2otUWFvYWtnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9kYzcwMzAtNzhjYy00ODAwLTg4OGQt
MTQyN2RkMTZlZmE0LzEvckk4SldTUlpWcTBqMkxDcWNwYm9qbUo3ZjgwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny9kYzcwMzAtNzhjYy00ODAwLTg4OGQtMTQyN2RkMTZlZmE0
LzEvTGphTEN1eHNmOVNORFphMEIzb2otUWFvYWtnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQABf85AwQA
F/xEAwQAa5arAwQAp6ALAwQAuQTjAwQAuZYCMA0GCSqGSIb3DQEBCwUAA4IBAQCV
9HOota0AjJELfsqXeif+YATapBkISby9TR5eXXsPqW31Ue0MxZm1NdBlHmqPVbaS
GkD2hjGU2xW0T+mjWYNEaXCMeiGA00dFLc8v4wTUD2s941w2gWz19ey1mx/H0fXw
a8y2zFRmia8KtpohSfqvGg+2rCb94iQjhZ4MfC8D7YDT42toLeYRc2gUu4ZhRVpg
FuAjdH3znnP7mkIxEDCCLbPDmrfKmrDaU3IYSEw9bUFwHaPPfaLT7g5YSE7YnVB5
7t6dBbB8tE502BgpmWyW0Tuu+OYnqUURwS1u0YiJMqlBEinDpfPe0w2TlqSP/Vrm
Pe7Bw5n+jjFaMTrkYJOc
-----END CERTIFICATE-----
Generated at Sun Sep 27 00:03:23 2026 by rpki-client