Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/1bf470-f95f-4bc7-a274-289fdc63996e/1/J5ndYN47GulHNdd8j26GfEdBb4o.roa
File: J5ndYN47GulHNdd8j26GfEdBb4o.roa (raw, json)
Hash identifier: iuNL8Ztc0MFggBQFipuWLLh7iLuDAe58bhFd6SGPtXk=
Subject key identifier: 27:99:DD:60:DE:3B:1A:E9:47:35:D7:7C:8F:6E:86:7C:47:41:6F:8A
Certificate issuer: /CN=62212bda03e2908965937850ae8491a373ba87d6
Certificate serial: 019F23689BE40EEFDC692F9D836EBF4ABA74
Authority key identifier: 62:21:2B:DA:03:E2:90:89:65:93:78:50:AE:84:91:A3:73:BA:87:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiEr2gPikIllk3hQroSRo3O6h9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/1bf470-f95f-4bc7-a274-289fdc63996e/1/J5ndYN47GulHNdd8j26GfEdBb4o.roa
Signing time: Thu 02 Jul 2026 15:18:05 +0000
ROA not before: Thu 02 Jul 2026 15:18:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 680
IP address blocks: 141.89.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/1bf470-f95f-4bc7-a274-289fdc63996e/1/YiEr2gPikIllk3hQroSRo3O6h9Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/1bf470-f95f-4bc7-a274-289fdc63996e/1/YiEr2gPikIllk3hQroSRo3O6h9Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/YiEr2gPikIllk3hQroSRo3O6h9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:9b:e4:0e:ef:dc:69:2f:9d:83:6e:bf:4a:ba:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62212bda03e2908965937850ae8491a373ba87d6
Validity
Not Before: Jul 2 15:18:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2799dd60de3b1ae94735d77c8f6e867c47416f8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7f:8c:68:08:57:71:ae:28:ab:38:0e:66:63:
00:aa:66:50:3f:9d:15:fb:ff:81:9a:56:f7:a9:66:
39:d5:58:1b:66:66:0f:42:c8:5a:4c:7c:33:8c:81:
e7:9e:17:8a:a4:10:54:ee:28:6b:a4:85:87:a9:fe:
25:5b:99:53:57:09:a9:b1:a2:d4:7d:4b:fe:95:49:
50:44:e3:1f:af:29:ff:d1:fe:53:a2:25:b6:e3:8d:
de:54:3f:01:e8:01:cf:73:69:eb:f8:3f:3a:7b:75:
bf:6e:ba:4c:fd:87:dc:06:6f:40:f2:c4:37:39:58:
a4:28:46:43:98:6c:91:72:48:45:b3:3f:f3:e9:f4:
85:7e:ef:ec:b3:c8:64:98:4a:7e:02:2d:24:78:90:
b3:89:c0:3f:4d:30:ec:37:ef:58:0e:fc:9d:97:7e:
b7:ff:9e:74:83:91:19:09:fe:32:c4:56:07:8a:36:
e2:cc:de:20:31:20:07:69:7c:6a:af:76:3c:f8:96:
64:cc:c8:2f:ff:6e:52:e1:fd:27:58:05:89:65:55:
1f:a1:fb:e0:5b:f6:c2:04:cc:55:e9:6d:5a:45:b4:
93:27:61:75:b8:ed:09:2b:7c:79:28:dd:2b:af:13:
76:f0:d3:52:36:4f:60:8b:d2:e4:f9:fa:67:92:b9:
2a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:99:DD:60:DE:3B:1A:E9:47:35:D7:7C:8F:6E:86:7C:47:41:6F:8A
X509v3 Authority Key Identifier:
keyid:62:21:2B:DA:03:E2:90:89:65:93:78:50:AE:84:91:A3:73:BA:87:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiEr2gPikIllk3hQroSRo3O6h9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1bf470-f95f-4bc7-a274-289fdc63996e/1/J5ndYN47GulHNdd8j26GfEdBb4o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1bf470-f95f-4bc7-a274-289fdc63996e/1/YiEr2gPikIllk3hQroSRo3O6h9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.89.0.0/16
Signature Algorithm: sha256WithRSAEncryption
59:27:98:67:8d:bb:78:ab:5f:e6:67:f7:ca:a9:0c:14:e3:c8:
a0:f1:4d:0e:8d:64:ea:3f:16:4c:41:8a:b0:7a:0a:b7:d8:c1:
0e:88:31:e1:6d:74:2c:51:06:2a:c6:c0:99:4d:f9:11:1c:34:
fc:b8:1b:2f:f0:e8:43:a6:b0:75:f3:47:ce:1a:1c:2d:40:f1:
69:37:c2:32:25:9d:72:8d:77:64:65:63:ca:3f:fa:09:34:cc:
b1:c0:8f:c1:3c:1a:f2:f8:ae:33:aa:ee:e3:09:48:75:ab:9f:
80:15:5a:a6:b5:5a:a5:2a:d3:3c:3b:3a:99:a7:0d:16:d9:da:
38:86:98:89:98:96:3a:95:74:b6:40:90:e2:da:88:22:71:67:
8f:8f:d4:52:af:28:82:a5:af:26:c1:a9:8d:37:58:c5:49:3d:
e4:18:aa:b2:e4:ea:00:bb:68:59:df:96:84:e3:c4:cf:a5:43:
cc:ac:8a:43:36:aa:3d:58:fc:02:61:ba:6a:35:e1:e8:f9:d1:
0b:6c:63:54:44:1a:b5:7e:ce:d4:ad:8e:64:3b:06:18:27:ce:
b8:20:6d:a6:42:47:8c:ab:68:0c:7c:b7:e9:e3:cf:c3:e5:da:
af:db:21:db:bc:b4:05:fd:94:50:67:44:1b:d6:e2:97:35:d8:
50:0f:b3:ca
-----BEGIN CERTIFICATE-----
MIIE/DCCA+SgAwIBAgISAZ8jaJvkDu/caS+dg26/Srp0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyMjEyYmRhMDNlMjkwODk2NTkzNzg1MGFlODQ5MWEzNzNi
YTg3ZDYwHhcNMjYwNzAyMTUxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNzk5ZGQ2MGRlM2IxYWU5NDczNWQ3N2M4ZjZlODY3YzQ3NDE2ZjhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwn+MaAhXca4oqzgOZmMAqmZQP50V
+/+Bmlb3qWY51VgbZmYPQshaTHwzjIHnnheKpBBU7ihrpIWHqf4lW5lTVwmpsaLU
fUv+lUlQROMfryn/0f5ToiW2443eVD8B6AHPc2nr+D86e3W/brpM/YfcBm9A8sQ3
OVikKEZDmGyRckhFsz/z6fSFfu/ss8hkmEp+Ai0keJCzicA/TTDsN+9YDvydl363
/550g5EZCf4yxFYHijbizN4gMSAHaXxqr3Y8+JZkzMgv/25S4f0nWAWJZVUfofvg
W/bCBMxV6W1aRbSTJ2F1uO0JK3x5KN0rrxN28NNSNk9gi9Lk+fpnkrkq+wIDAQAB
o4ICCDCCAgQwHQYDVR0OBBYEFCeZ3WDeOxrpRzXXfI9uhnxHQW+KMB8GA1UdIwQY
MBaAFGIhK9oD4pCJZZN4UK6EkaNzuofWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWlFcjJnUGlrSWxsazNoUXJvU1JvM082aDlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS8xYmY0NzAtZjk1Zi00YmM3LWEyNzQt
Mjg5ZmRjNjM5OTZlLzEvSjVuZFlONDdHdWxITmRkOGoyNkdmRWRCYjRvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS8xYmY0NzAtZjk1Zi00YmM3LWEyNzQtMjg5ZmRjNjM5OTZl
LzEvWWlFcjJnUGlrSWxsazNoUXJvU1JvM082aDlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAjVkwDQYJ
KoZIhvcNAQELBQADggEBAFknmGeNu3irX+Zn98qpDBTjyKDxTQ6NZOo/FkxBirB6
CrfYwQ6IMeFtdCxRBirGwJlN+REcNPy4Gy/w6EOmsHXzR84aHC1A8Wk3wjIlnXKN
d2RlY8o/+gk0zLHAj8E8GvL4rjOq7uMJSHWrn4AVWqa1WqUq0zw7OpmnDRbZ2jiG
mImYljqVdLZAkOLaiCJxZ4+P1FKvKIKlrybBqY03WMVJPeQYqrLk6gC7aFnfloTj
xM+lQ8ysikM2qj1Y/AJhumo14ej50QtsY1REGrV+ztStjmQ7BhgnzrggbaZCR4yr
aAx8t+njz8Pl2q/bIdu8tAX9lFBnRBvW4pc12FAPs8o=
-----END CERTIFICATE-----
Generated at Mon Jul 27 07:00:52 2026 by rpki-client