Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/j0O3QqEAKxBIurzqupf19ooBC2Q.roa
File: j0O3QqEAKxBIurzqupf19ooBC2Q.roa (raw, json)
Hash identifier: lqgmu0Q3rGQnKd7YQUi3rshBshIXMyyxF0xhRSz2zf0=
Subject key identifier: 8F:43:B7:42:A1:00:2B:10:48:BA:BC:EA:BA:97:F5:F6:8A:01:0B:64
Certificate issuer: /CN=53c912a0411bb0174507092d0ca35a91ad79905c
Certificate serial: 01A12EEA667BF7402CCAC18BD6704911EB1B
Authority key identifier: 53:C9:12:A0:41:1B:B0:17:45:07:09:2D:0C:A3:5A:91:AD:79:90:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U8kSoEEbsBdFBwktDKNaka15kFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/j0O3QqEAKxBIurzqupf19ooBC2Q.roa
Signing time: Mon 12 Oct 2026 07:01:15 +0000
ROA not before: Mon 12 Oct 2026 07:01:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49685
IP address blocks: 194.59.136.0/24 maxlen: 24
194.59.138.0/24 maxlen: 24
2a07:cb80::/32 maxlen: 32
2a07:cb84:3001::/48 maxlen: 48
2a07:cb84:3005::/48 maxlen: 48
2a07:cb84:3006::/48 maxlen: 48
2a07:cb84:3013::/48 maxlen: 48
2a07:cb84:3015::/48 maxlen: 48
2a07:cb84:3018::/48 maxlen: 48
2a07:cb84:3019::/48 maxlen: 48
2a07:cb84:3026::/48 maxlen: 48
2a07:cb84:3035::/48 maxlen: 48
2a07:cb84:3036::/48 maxlen: 48
2a07:cb84:3038::/48 maxlen: 48
2a07:cb84:3057::/48 maxlen: 48
2a07:cb84:3059::/48 maxlen: 48
2a07:cb84:3063::/48 maxlen: 48
2a07:cb84:3069::/48 maxlen: 48
2a07:cb84:3075::/48 maxlen: 48
2a07:cb84:3076::/48 maxlen: 48
2a07:cb84:3101::/48 maxlen: 48
2a07:cb84:3104::/48 maxlen: 48
2a07:cb84:3112::/48 maxlen: 48
2a07:cb84:3114::/48 maxlen: 48
2a07:cb84:3119::/48 maxlen: 48
2a07:cb84:3120::/48 maxlen: 48
2a07:cb84:3123::/48 maxlen: 48
2a07:cb84:3130::/48 maxlen: 48
2a07:cb84:3131::/48 maxlen: 48
2a07:cb84:3154::/48 maxlen: 48
2a07:cb84:3160::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/U8kSoEEbsBdFBwktDKNaka15kFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2e:ea:66:7b:f7:40:2c:ca:c1:8b:d6:70:49:11:eb:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53c912a0411bb0174507092d0ca35a91ad79905c
Validity
Not Before: Oct 12 07:01:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8f43b742a1002b1048babceaba97f5f68a010b64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:e1:1a:63:e3:ae:33:be:b8:81:6f:31:b4:5c:
36:e0:9d:47:a0:9b:57:ba:e3:4d:d3:88:f9:d6:34:
71:d7:e9:2c:8e:a9:ba:47:26:e2:04:8a:a6:d6:60:
6a:0a:f0:86:b8:fe:5f:dc:9d:db:fd:07:cb:26:a2:
13:94:88:b9:40:8a:dc:60:00:41:6e:ce:7f:5d:b7:
a4:30:8c:e2:66:5a:25:81:25:35:fb:d9:03:1a:6e:
17:e6:e6:a3:f2:9e:b2:cf:a7:57:08:db:5a:f8:b8:
85:ce:46:44:77:67:d4:3d:d0:87:16:37:da:b8:66:
99:a7:b3:f1:87:82:93:f1:a7:5a:8b:91:52:07:73:
40:41:53:d9:62:08:50:34:5d:9e:3b:34:7e:53:c4:
b3:8e:82:29:90:3f:b6:44:c9:30:3d:97:86:77:82:
26:fc:78:38:70:ee:a5:ab:e8:e0:4f:ec:c9:59:03:
82:c4:e8:f9:dc:ff:aa:a0:69:c1:c6:a1:3e:67:7c:
37:5a:c7:b2:6f:ae:7e:a9:2a:a4:b5:73:f4:52:fb:
12:36:b1:f6:f0:cb:ec:e1:82:2c:05:fd:41:51:fb:
8f:ad:a8:88:25:1e:6a:cb:bc:d8:da:a5:30:d3:5c:
a4:51:54:68:e1:d9:f0:25:ff:0c:c0:fa:98:dd:3e:
49:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:43:B7:42:A1:00:2B:10:48:BA:BC:EA:BA:97:F5:F6:8A:01:0B:64
X509v3 Authority Key Identifier:
keyid:53:C9:12:A0:41:1B:B0:17:45:07:09:2D:0C:A3:5A:91:AD:79:90:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8kSoEEbsBdFBwktDKNaka15kFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/j0O3QqEAKxBIurzqupf19ooBC2Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.59.136.0/24
194.59.138.0/24
IPv6:
2a07:cb80::/32
2a07:cb84:3001::/48
2a07:cb84:3005::-2a07:cb84:3006:ffff:ffff:ffff:ffff:ffff
2a07:cb84:3013::/48
2a07:cb84:3015::/48
2a07:cb84:3018::/47
2a07:cb84:3026::/48
2a07:cb84:3035::-2a07:cb84:3036:ffff:ffff:ffff:ffff:ffff
2a07:cb84:3038::/48
2a07:cb84:3057::/48
2a07:cb84:3059::/48
2a07:cb84:3063::/48
2a07:cb84:3069::/48
2a07:cb84:3075::-2a07:cb84:3076:ffff:ffff:ffff:ffff:ffff
2a07:cb84:3101::/48
2a07:cb84:3104::/48
2a07:cb84:3112::/48
2a07:cb84:3114::/48
2a07:cb84:3119::/48
2a07:cb84:3120::/48
2a07:cb84:3123::/48
2a07:cb84:3130::/47
2a07:cb84:3154::/48
2a07:cb84:3160::/48
Signature Algorithm: sha256WithRSAEncryption
3f:97:28:9b:70:67:65:5d:1f:39:4e:c6:0b:fc:14:8f:4d:10:
81:12:e2:ae:ec:cd:d4:62:56:04:22:55:97:4b:ec:a7:f7:4b:
0a:23:a6:11:33:0f:f8:5f:28:eb:f3:3c:b2:73:78:55:4c:20:
4b:f0:ef:3a:c6:db:f3:c8:37:1d:1c:86:4c:a1:74:ee:f9:fb:
aa:38:ae:32:2f:f2:73:1e:06:ba:c0:f4:31:6a:fe:f9:04:11:
d3:d2:6e:1a:4d:3f:0d:c2:4a:30:bb:b9:22:cb:ef:91:25:8f:
77:7e:2c:fc:74:3d:dc:c3:5e:91:d8:13:12:65:d0:e8:63:7c:
ab:95:4e:7b:86:47:19:4e:6a:c0:17:80:2f:27:22:07:cc:cb:
c4:e9:85:79:b6:b3:2a:c1:a7:44:db:ee:c2:fc:3b:2c:e0:b3:
9b:d4:32:d0:c4:2e:ea:06:2c:fa:54:b8:0b:dc:45:19:c8:71:
f0:57:46:92:a6:3a:57:ce:0a:c5:37:2d:83:51:93:a8:cc:0e:
16:50:2c:db:71:a5:6b:57:40:1d:ca:4b:42:b9:b9:3f:66:f6:
91:15:37:ec:09:a2:f6:b5:a2:cd:12:5e:72:b9:3f:a5:a1:a1:
38:67:a9:ed:b8:ea:2c:21:61:76:2f:70:c2:76:23:49:7a:ef:
c0:69:a3:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 12:48:00 2026 by rpki-client