Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/9fb5e0-5508-49f4-9f9e-34362415182a/1/_JmG_0xrHcMFjUFl8DJsIFUaYD8.roa
File: _JmG_0xrHcMFjUFl8DJsIFUaYD8.roa (raw, json)
Hash identifier: 7k5k2uPEyUiwrs4Pq2qVmxoQcxV+zQ2r/avbqedzahU=
Subject key identifier: FC:99:86:FF:4C:6B:1D:C3:05:8D:41:65:F0:32:6C:20:55:1A:60:3F
Certificate issuer: /CN=ce808f4cf256477d70a294d13016c24e8427d5c2
Certificate serial: 019F2368BC902D95B39898445955A30CCF54
Authority key identifier: CE:80:8F:4C:F2:56:47:7D:70:A2:94:D1:30:16:C2:4E:84:27:D5:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zoCPTPJWR31wopTRMBbCToQn1cI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/9fb5e0-5508-49f4-9f9e-34362415182a/1/_JmG_0xrHcMFjUFl8DJsIFUaYD8.roa
Signing time: Thu 02 Jul 2026 15:18:14 +0000
ROA not before: Thu 02 Jul 2026 15:18:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50919
IP address blocks: 185.96.34.0/24 maxlen: 24
2a13:eb00::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/9fb5e0-5508-49f4-9f9e-34362415182a/1/zoCPTPJWR31wopTRMBbCToQn1cI.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/9fb5e0-5508-49f4-9f9e-34362415182a/1/zoCPTPJWR31wopTRMBbCToQn1cI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zoCPTPJWR31wopTRMBbCToQn1cI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:bc:90:2d:95:b3:98:98:44:59:55:a3:0c:cf:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce808f4cf256477d70a294d13016c24e8427d5c2
Validity
Not Before: Jul 2 15:18:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fc9986ff4c6b1dc3058d4165f0326c20551a603f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:ae:c4:9a:df:ea:2d:2f:3a:00:84:89:b2:97:
e6:b5:e2:0a:5c:1d:c2:f6:73:f8:54:63:4d:5c:46:
e0:25:05:8e:75:5c:02:9f:fe:8e:dc:b9:5d:5f:41:
f2:80:b2:bb:39:90:f7:a0:ed:85:f4:05:5e:b5:51:
b4:a4:ff:80:e4:a0:b2:5c:d7:8a:be:52:ba:32:18:
64:5a:43:db:3f:24:fb:93:81:08:0a:6c:71:24:92:
46:40:e0:22:c4:db:8b:71:19:a9:5b:5f:67:9e:bb:
d9:cf:75:85:ba:c8:f5:85:16:98:07:ac:9d:64:68:
5c:77:6a:4a:b4:f2:05:ae:e0:a0:65:b6:54:f5:d8:
16:a4:0c:61:9b:58:5d:25:6c:46:ff:15:7e:b0:74:
9d:5c:5b:96:da:d7:24:42:4a:fe:ce:82:94:5d:28:
f1:fa:22:79:d7:f1:61:ac:fc:96:2a:6b:42:a2:84:
f9:e8:79:13:42:cb:16:b5:94:9a:09:e2:bc:2f:83:
a1:02:f0:8b:34:d9:cf:ed:4e:93:a0:ef:f4:f1:42:
aa:31:e7:5f:82:0a:58:7b:74:a8:20:73:3f:17:e8:
47:d2:a3:f0:f8:a7:ef:fb:5d:e7:0a:0e:36:ed:5f:
10:5c:7d:62:ff:bf:b3:8a:8e:d6:08:cc:65:a6:61:
38:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:99:86:FF:4C:6B:1D:C3:05:8D:41:65:F0:32:6C:20:55:1A:60:3F
X509v3 Authority Key Identifier:
keyid:CE:80:8F:4C:F2:56:47:7D:70:A2:94:D1:30:16:C2:4E:84:27:D5:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zoCPTPJWR31wopTRMBbCToQn1cI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/9fb5e0-5508-49f4-9f9e-34362415182a/1/_JmG_0xrHcMFjUFl8DJsIFUaYD8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/9fb5e0-5508-49f4-9f9e-34362415182a/1/zoCPTPJWR31wopTRMBbCToQn1cI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.96.34.0/24
IPv6:
2a13:eb00::/48
Signature Algorithm: sha256WithRSAEncryption
39:de:a6:dc:1f:af:96:fe:ce:84:13:25:a1:14:10:dc:a6:21:
83:cd:5b:ad:85:c9:f6:41:42:0f:33:1c:9c:a2:bd:82:02:d9:
31:1c:6a:43:87:59:41:89:49:a4:de:35:4b:65:73:d3:1a:8e:
f4:30:c6:95:b6:62:29:4c:68:c0:d6:92:48:59:0e:70:a3:9f:
be:e1:24:3d:88:27:e8:81:0d:5c:80:08:c9:fc:14:22:3f:6f:
f9:d9:5d:c3:07:7d:90:e0:dc:8c:c2:a8:9b:34:9c:b3:b2:de:
b9:22:48:b4:7e:85:df:40:e3:30:ce:c0:52:64:ca:81:f2:67:
12:2f:44:f3:10:b8:11:70:eb:09:23:6d:d0:2a:79:0e:0e:7b:
ae:dc:4d:f0:0a:4d:21:d0:f7:2e:c5:15:61:26:80:9e:16:44:
5d:c7:22:26:34:22:94:dc:29:90:52:51:65:01:99:93:80:95:
b8:17:d0:04:39:52:27:cd:0a:72:51:45:ea:32:99:19:61:7e:
e5:4b:6e:73:f7:2d:5b:06:a4:b5:29:51:ca:19:89:07:6f:1d:
f7:4f:f8:2e:90:67:3c:50:a5:e4:45:71:70:c2:4c:da:d9:00:
77:f8:d3:77:4b:41:fd:0f:f2:07:58:40:4e:45:f9:4b:64:80:
38:88:96:5a
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZ8jaLyQLZWzmJhEWVWjDM9UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlODA4ZjRjZjI1NjQ3N2Q3MGEyOTRkMTMwMTZjMjRlODQy
N2Q1YzIwHhcNMjYwNzAyMTUxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYzk5ODZmZjRjNmIxZGMzMDU4ZDQxNjVmMDMyNmMyMDU1MWE2MDNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA767Emt/qLS86AISJspfmteIKXB3C
9nP4VGNNXEbgJQWOdVwCn/6O3LldX0HygLK7OZD3oO2F9AVetVG0pP+A5KCyXNeK
vlK6MhhkWkPbPyT7k4EICmxxJJJGQOAixNuLcRmpW19nnrvZz3WFusj1hRaYB6yd
ZGhcd2pKtPIFruCgZbZU9dgWpAxhm1hdJWxG/xV+sHSdXFuW2tckQkr+zoKUXSjx
+iJ51/FhrPyWKmtCooT56HkTQssWtZSaCeK8L4OhAvCLNNnP7U6ToO/08UKqMedf
ggpYe3SoIHM/F+hH0qPw+Kfv+13nCg427V8QXH1i/7+zio7WCMxlpmE4KQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFPyZhv9Max3DBY1BZfAybCBVGmA/MB8GA1UdIwQY
MBaAFM6Aj0zyVkd9cKKU0TAWwk6EJ9XCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvem9DUFRQSldSMzF3b3BUUk1CYkNUb1FuMWNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC85ZmI1ZTAtNTUwOC00OWY0LTlmOWUt
MzQzNjI0MTUxODJhLzEvX0ptR18weHJIY01GalVGbDhESnNJRlVhWUQ4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC85ZmI1ZTAtNTUwOC00OWY0LTlmOWUtMzQzNjI0MTUxODJh
LzEvem9DUFRQSldSMzF3b3BUUk1CYkNUb1FuMWNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAuWAiMA8E
AgACMAkDBwAqE+sAAAAwDQYJKoZIhvcNAQELBQADggEBADneptwfr5b+zoQTJaEU
ENymIYPNW62FyfZBQg8zHJyivYIC2TEcakOHWUGJSaTeNUtlc9MajvQwxpW2YilM
aMDWkkhZDnCjn77hJD2IJ+iBDVyACMn8FCI/b/nZXcMHfZDg3IzCqJs0nLOy3rki
SLR+hd9A4zDOwFJkyoHyZxIvRPMQuBFw6wkjbdAqeQ4Oe67cTfAKTSHQ9y7FFWEm
gJ4WRF3HIiY0IpTcKZBSUWUBmZOAlbgX0AQ5UifNCnJRReoymRlhfuVLbnP3LVsG
pLUpUcoZiQdvHfdP+C6QZzxQpeRFcXDCTNrZAHf403dLQf0P8gdYQE5F+UtkgDiI
llo=
-----END CERTIFICATE-----
Generated at Fri Jul 24 06:07:19 2026 by rpki-client