Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/J8hBxRtMDIPBesOI8A32d2Q1vuM.roa
File: J8hBxRtMDIPBesOI8A32d2Q1vuM.roa (raw, json)
Hash identifier: FgMg815dIzm/KILSayRZMcXAhUE650Gz2WCzyThK+O0=
Subject key identifier: 27:C8:41:C5:1B:4C:0C:83:C1:7A:C3:88:F0:0D:F6:77:64:35:BE:E3
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 019D1A648AF7ED00AD2BF3BC8B194E53DF08
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/J8hBxRtMDIPBesOI8A32d2Q1vuM.roa
Signing time: Mon 23 Mar 2026 11:11:29 +0000
ROA not before: Mon 23 Mar 2026 11:11:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209579
IP address blocks: 94.103.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:1a:64:8a:f7:ed:00:ad:2b:f3:bc:8b:19:4e:53:df:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Mar 23 11:11:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=27c841c51b4c0c83c17ac388f00df6776435bee3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:f3:49:4c:ef:64:a5:7f:82:6a:b6:f6:01:eb:
65:42:f0:63:6c:10:7f:a2:ce:a9:53:8e:39:05:55:
e7:81:82:97:dc:c3:07:7f:86:d3:d3:37:ee:94:4f:
6b:2d:e0:7b:ce:71:f0:0f:ed:48:87:72:38:0a:ce:
5d:ac:da:25:40:da:d3:65:02:99:2d:4d:70:71:1c:
b3:6a:dd:33:95:fe:c7:7a:dd:78:fb:84:cd:86:de:
b0:5e:8c:d9:01:ff:4e:9b:48:69:a5:49:91:8d:24:
af:e5:9b:28:b0:83:77:bf:40:50:da:58:b8:d3:f9:
d1:a5:8e:87:a2:b4:cc:c4:2d:d2:16:f9:ea:80:60:
be:0f:e4:de:21:08:0a:28:a8:06:ab:fd:06:8c:35:
97:5e:fd:ed:9b:ba:ee:78:85:b4:da:f0:e4:81:08:
a2:80:14:e9:a9:53:43:8d:23:71:17:e6:d0:28:d6:
c4:ee:1b:5d:a7:f3:5f:c4:21:8c:66:5f:3e:07:81:
53:78:b6:6a:00:88:54:c1:61:80:0a:2e:ee:9c:4e:
66:d1:f6:2c:61:cc:05:01:22:02:e1:95:0a:bc:16:
a3:39:5e:fd:a8:52:23:ef:a5:6d:c5:ac:80:a8:fa:
a8:26:8b:26:a1:ce:8a:2a:1f:17:1f:40:c9:9f:65:
77:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:C8:41:C5:1B:4C:0C:83:C1:7A:C3:88:F0:0D:F6:77:64:35:BE:E3
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/J8hBxRtMDIPBesOI8A32d2Q1vuM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.103.184.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:15:ce:ca:5c:3b:37:74:0b:ac:64:5f:29:e8:78:f4:28:9b:
24:3d:1a:8b:4e:bd:5f:95:03:a1:46:d2:8c:68:2a:7a:2c:63:
c2:e3:ee:75:c5:0f:8e:ac:c9:7e:53:38:0c:8c:21:f7:e3:fe:
a6:56:71:20:6b:24:68:6e:ed:24:a1:21:59:1d:ff:27:ba:52:
81:dc:dc:9c:9e:a9:11:e8:25:2f:57:da:bc:0f:23:81:c4:59:
51:66:9e:05:3e:2e:d4:1d:5d:07:3e:44:40:68:47:f6:70:0f:
17:c9:8f:a9:a7:d2:44:85:48:bd:61:5c:43:71:3a:15:b9:68:
3f:73:34:37:3d:94:32:54:9b:d4:c1:ec:f8:8d:83:f5:c3:6e:
8d:4b:68:5f:74:77:75:3c:38:76:48:a0:f9:8f:9a:52:0f:96:
f3:68:20:9b:f6:54:73:b0:c0:2c:b2:cf:49:75:c0:d0:3a:85:
a7:52:60:39:ad:1c:d5:a6:a5:a9:2a:6a:f7:9c:a6:2b:4f:99:
1b:74:a1:87:83:bd:aa:4b:91:91:5a:70:cf:2e:25:2a:5e:82:
f3:52:7b:8c:2b:6f:76:3f:1e:fa:81:1e:6f:88:54:68:f3:5b:
76:3a:85:fd:78:f8:f3:0a:7a:cf:56:87:9c:30:37:28:3a:65:
25:8b:4f:91
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ0aZIr37QCtK/O8ixlOU98IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlYmJmMzE3ZTVmYWY1ZWYwMmM5Y2NlNzk1MjdkNWU3NGI4
YWJjYzUwHhcNMjYwMzIzMTExMTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyN2M4NDFjNTFiNGMwYzgzYzE3YWMzODhmMDBkZjY3NzY0MzViZWUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5fNJTO9kpX+Carb2AetlQvBjbBB/
os6pU445BVXngYKX3MMHf4bT0zfulE9rLeB7znHwD+1Ih3I4Cs5drNolQNrTZQKZ
LU1wcRyzat0zlf7Het14+4TNht6wXozZAf9Om0hppUmRjSSv5ZsosIN3v0BQ2li4
0/nRpY6HorTMxC3SFvnqgGC+D+TeIQgKKKgGq/0GjDWXXv3tm7rueIW02vDkgQii
gBTpqVNDjSNxF+bQKNbE7htdp/NfxCGMZl8+B4FTeLZqAIhUwWGACi7unE5m0fYs
YcwFASIC4ZUKvBajOV79qFIj76VtxayAqPqoJosmoc6KKh8XH0DJn2V32wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCfIQcUbTAyDwXrDiPAN9ndkNb7jMB8GA1UdIwQY
MBaAFO678xfl+vXvAsnM55Un1edLirzFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMt
NmZlOWJmNjA1NjFjLzEvSjhoQnhSdE1ESVBCZXNPSThBMzJkMlExdnVNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMtNmZlOWJmNjA1NjFj
LzEvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXme4MA0G
CSqGSIb3DQEBCwUAA4IBAQAeFc7KXDs3dAusZF8p6Hj0KJskPRqLTr1flQOhRtKM
aCp6LGPC4+51xQ+OrMl+UzgMjCH34/6mVnEgayRobu0koSFZHf8nulKB3NycnqkR
6CUvV9q8DyOBxFlRZp4FPi7UHV0HPkRAaEf2cA8XyY+pp9JEhUi9YVxDcToVuWg/
czQ3PZQyVJvUwez4jYP1w26NS2hfdHd1PDh2SKD5j5pSD5bzaCCb9lRzsMAsss9J
dcDQOoWnUmA5rRzVpqWpKmr3nKYrT5kbdKGHg72qS5GRWnDPLiUqXoLzUnuMK292
Px76gR5viFRo81t2OoX9ePjzCnrPVoecMDcoOmUli0+R
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:05:35 2026 by rpki-client