Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/J_MejqchmOosn1DeA9-FVRc3-e4.roa
File: J_MejqchmOosn1DeA9-FVRc3-e4.roa (raw, json)
Hash identifier: lmUnRUUtLL0iEMV4JNidoNOnz65NaQ0PkHtjMl9+Vw8=
Subject key identifier: 27:F3:1E:8E:A7:21:98:EA:2C:9F:50:DE:03:DF:85:55:17:37:F9:EE
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 019FCE41F21AAD6C23B3F41AA1486AE1DAB7
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/J_MejqchmOosn1DeA9-FVRc3-e4.roa
Signing time: Tue 04 Aug 2026 19:30:56 +0000
ROA not before: Tue 04 Aug 2026 19:30:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214716
IP address blocks: 194.87.36.0/24 maxlen: 24
194.87.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ce:41:f2:1a:ad:6c:23:b3:f4:1a:a1:48:6a:e1:da:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Aug 4 19:30:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=27f31e8ea72198ea2c9f50de03df85551737f9ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3b:39:c8:68:6f:a4:20:12:26:7e:c6:db:10:
55:42:15:58:59:a9:d1:e2:ac:5c:58:9a:9b:64:03:
e1:1c:7f:30:51:cf:96:ac:35:a5:9f:42:32:92:4d:
b1:9a:1e:f2:aa:d7:9d:2b:39:ca:af:f6:ad:8a:40:
bc:51:02:c3:a8:0e:5b:c2:b6:0a:cb:d3:32:ab:02:
a2:3a:f1:22:dd:24:de:be:0c:d6:93:49:d3:f4:ac:
b7:79:a1:83:11:4b:d9:8f:52:d4:6d:ac:06:81:c8:
7f:e0:26:84:4d:15:0d:3b:b6:77:e8:f3:67:1a:ce:
c7:9c:0a:8d:a5:42:1c:c4:14:04:5b:9e:28:58:18:
ba:cb:04:1b:2f:6c:d8:5c:c8:d4:b4:d3:1c:ab:61:
00:7d:49:05:9f:b8:20:0c:db:f5:7e:01:07:95:e6:
e9:20:63:9c:f2:e9:4f:47:08:a2:5e:e1:2d:57:87:
c9:34:32:a0:79:bf:c1:ab:69:10:35:4d:67:ee:bb:
0b:a6:16:d5:a4:18:00:4c:39:77:d4:bf:0d:1d:04:
60:a3:8e:4b:8f:d2:6b:ed:aa:d9:78:7a:97:ad:f0:
c7:c8:51:e1:cb:b2:43:b1:b1:b6:6b:75:33:bd:eb:
65:b0:18:c4:51:79:2b:15:7f:3f:fc:0d:ec:1c:5c:
6a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:F3:1E:8E:A7:21:98:EA:2C:9F:50:DE:03:DF:85:55:17:37:F9:EE
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/J_MejqchmOosn1DeA9-FVRc3-e4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.36.0/24
194.87.159.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:fe:14:ce:2b:b2:19:49:df:a2:d2:ca:42:66:ce:7a:f3:06:
0b:9a:66:96:48:64:1c:fd:56:d5:42:db:36:1d:de:19:de:c6:
36:ed:77:23:ff:d4:ee:fb:c9:f0:1e:7e:e9:1b:1b:96:57:cd:
b6:ba:2c:6b:16:52:d9:3d:60:7b:c9:c3:5a:3c:58:06:2d:e2:
80:77:b8:70:ec:46:45:93:37:f4:61:53:47:f1:c8:ed:77:81:
a3:4c:77:58:2b:5d:2c:67:a8:bc:8b:2a:54:a8:3c:67:0b:64:
31:4e:a5:03:bb:cb:c2:e3:cd:b7:01:28:9d:25:72:a4:d6:bf:
3d:95:7b:07:71:1b:86:3d:68:f5:66:0e:24:59:7c:93:f7:7f:
aa:55:54:b4:54:1d:b4:79:2d:25:fd:bd:ff:6b:64:1e:32:f9:
50:36:aa:6a:70:13:db:54:50:f9:57:53:ff:30:ed:30:bb:6c:
e5:f4:14:86:92:b1:c7:f1:30:43:63:8b:1a:81:96:00:61:9c:
f2:e6:f7:ea:ee:5c:41:72:f0:74:69:e0:82:27:8b:8d:1d:57:
50:c8:70:9c:6b:1e:4f:14:b6:9a:9b:a4:43:1c:b0:ef:48:d2:
6c:6f:24:d3:43:4a:a4:8b:f9:80:d2:ba:9d:f0:99:a5:0e:ba:
83:e4:18:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:09:01 2026 by rpki-client