Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/1babfc-79e6-45df-8c40-72568f06fe10/1/J5RHrIsN5ZhpMMsoWyOwOm0tf0k.roa
File: J5RHrIsN5ZhpMMsoWyOwOm0tf0k.roa (raw, json)
Hash identifier: zkDVkJoPYShr6OXV8fPBb2NBPcUAp8SMVnGkrnquQLQ=
Subject key identifier: 27:94:47:AC:8B:0D:E5:98:69:30:CB:28:5B:23:B0:3A:6D:2D:7F:49
Certificate issuer: /CN=34b31f69fcd4ed5131a139417ceb7203573b747b
Certificate serial: 019F23692A926E2D9D1E63EB5780E478B828
Authority key identifier: 34:B3:1F:69:FC:D4:ED:51:31:A1:39:41:7C:EB:72:03:57:3B:74:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NLMfafzU7VExoTlBfOtyA1c7dHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/1babfc-79e6-45df-8c40-72568f06fe10/1/J5RHrIsN5ZhpMMsoWyOwOm0tf0k.roa
Signing time: Thu 02 Jul 2026 15:18:42 +0000
ROA not before: Thu 02 Jul 2026 15:18:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8937
IP address blocks: 212.18.192.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/1babfc-79e6-45df-8c40-72568f06fe10/1/NLMfafzU7VExoTlBfOtyA1c7dHs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/1babfc-79e6-45df-8c40-72568f06fe10/1/NLMfafzU7VExoTlBfOtyA1c7dHs.mft
rsync://rpki.ripe.net/repository/DEFAULT/NLMfafzU7VExoTlBfOtyA1c7dHs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:2a:92:6e:2d:9d:1e:63:eb:57:80:e4:78:b8:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34b31f69fcd4ed5131a139417ceb7203573b747b
Validity
Not Before: Jul 2 15:18:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=279447ac8b0de5986930cb285b23b03a6d2d7f49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ea:c7:f6:3d:83:fe:66:53:73:85:25:c9:9f:
15:10:43:36:14:e0:90:c5:a6:cb:1d:37:98:d6:35:
3c:2f:50:20:67:2e:30:c3:c6:29:29:fa:a4:57:bb:
e9:d2:51:ec:57:7d:74:28:78:70:fe:46:cd:d6:13:
bd:21:b8:7c:84:12:3d:71:e3:c6:fb:87:63:a2:6b:
25:2b:f5:3d:a8:a7:c0:a1:0f:83:01:15:f2:e2:ec:
e0:f7:26:b8:e3:40:d6:28:33:95:ba:7a:ad:9f:a3:
cb:cb:9f:0b:11:ea:be:ca:08:be:f8:5e:9a:c4:9c:
96:49:a9:00:7f:27:2a:1d:57:9a:8c:b1:71:1c:c0:
47:82:e1:ee:51:f8:33:d9:ef:c9:5d:4a:28:d3:61:
ef:0a:a8:75:1d:4e:38:06:c5:bb:bb:86:ad:11:a5:
90:b7:0c:b1:70:f2:6a:09:0f:07:29:f1:c7:dc:1a:
30:d8:62:79:69:70:87:df:9f:15:07:85:5e:af:ea:
5d:e5:28:0f:fc:38:c2:ba:29:cf:bb:4d:b2:85:4b:
ad:52:26:5a:61:ee:61:47:05:01:f7:79:e6:18:e9:
99:ab:ca:2c:e3:2e:5d:f9:34:f1:98:ae:c6:a9:ec:
02:3f:f5:d1:cd:1f:4c:68:9b:f7:81:bb:13:43:a3:
a1:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:94:47:AC:8B:0D:E5:98:69:30:CB:28:5B:23:B0:3A:6D:2D:7F:49
X509v3 Authority Key Identifier:
keyid:34:B3:1F:69:FC:D4:ED:51:31:A1:39:41:7C:EB:72:03:57:3B:74:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NLMfafzU7VExoTlBfOtyA1c7dHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1babfc-79e6-45df-8c40-72568f06fe10/1/J5RHrIsN5ZhpMMsoWyOwOm0tf0k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1babfc-79e6-45df-8c40-72568f06fe10/1/NLMfafzU7VExoTlBfOtyA1c7dHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.18.192.0/19
Signature Algorithm: sha256WithRSAEncryption
06:90:c1:be:f7:58:53:f7:75:4a:03:5a:c1:32:15:3c:e7:fc:
75:c9:b0:46:fd:43:2e:b4:7e:21:7b:11:7c:57:07:99:6a:25:
3e:2d:aa:03:22:1c:70:bd:12:05:8d:7b:56:b0:f6:41:e8:29:
e2:12:e9:d0:aa:08:8c:37:47:15:66:00:aa:d0:9f:56:25:bd:
a6:86:91:b9:98:84:aa:34:28:4a:64:25:2f:df:0d:51:fb:01:
c1:e1:ba:d5:ca:4d:3d:0a:77:3d:c7:58:66:6c:cf:fa:2c:c8:
b6:79:8b:6b:66:5c:53:24:ae:75:56:b3:a6:f4:dd:72:54:01:
a6:33:06:99:ac:99:7c:60:b5:94:9e:5e:c2:f3:dc:de:79:5c:
f2:49:b6:21:12:04:11:16:ad:d9:98:3e:48:61:7b:cb:67:fb:
1b:27:bf:60:6c:26:d4:30:30:79:31:68:0e:0c:c6:73:0d:59:
bb:3d:8a:46:40:27:6b:f2:1b:43:97:c3:b7:c6:5e:dc:7f:e1:
d3:74:f4:4c:6e:9c:8b:28:72:65:61:9a:1b:08:40:de:7b:6c:
55:2b:b2:8c:93:3c:63:cb:86:c8:be:2e:0d:f7:4e:d5:a7:d0:
6b:94:92:79:e3:3b:50:60:44:bf:94:b4:f0:7b:9f:f3:9e:2d:
90:32:33:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:30:30 2026 by rpki-client