Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/J4fyG5GSFkYIyGnEK5IUbGZ5Cb8.roa
File: J4fyG5GSFkYIyGnEK5IUbGZ5Cb8.roa (raw, json)
Hash identifier: kczf2UBsd5ZJvFoKF+QiW9dSFaEmLoyNGFMiGUnRNG4=
Subject key identifier: 27:87:F2:1B:91:92:16:46:08:C8:69:C4:2B:92:14:6C:66:79:09:BF
Certificate issuer: /CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Certificate serial: 01A0F832B9E693CE9F62A2FFE8F9D6937E7A
Authority key identifier: FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/J4fyG5GSFkYIyGnEK5IUbGZ5Cb8.roa
Signing time: Thu 01 Oct 2026 16:01:08 +0000
ROA not before: Thu 01 Oct 2026 16:01:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204785
IP address blocks: 87.232.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 04:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f8:32:b9:e6:93:ce:9f:62:a2:ff:e8:f9:d6:93:7e:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Validity
Not Before: Oct 1 16:01:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2787f21b9192164608c869c42b92146c667909bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7a:c0:44:44:9d:84:40:71:11:e5:21:dd:c3:
3e:94:ed:67:38:34:7e:58:ac:7a:ca:f4:2f:76:81:
3f:20:0e:09:dd:05:66:0f:e1:33:aa:e3:82:d0:c8:
f9:9f:b3:01:ce:ec:fc:4c:55:8b:16:bf:7a:13:d6:
05:19:5f:f2:15:f6:3b:5f:0f:1d:cf:ba:a9:b3:21:
2d:d8:8b:0a:6e:80:84:02:48:27:93:e0:95:48:9b:
48:1b:89:c1:ec:6a:86:51:0b:b0:5e:53:1c:4e:7f:
f4:15:3e:e2:0e:6d:3a:3e:01:b1:d5:17:9f:03:c7:
24:21:ba:a8:4a:21:b1:b2:c0:16:46:22:4c:14:a5:
95:0c:3d:12:72:86:10:8b:5a:6f:83:2a:cd:69:9c:
0c:42:c7:4b:2b:87:b5:b7:d6:0b:57:39:7e:7f:0c:
4b:ee:08:34:2b:8c:b1:36:18:4b:03:15:0c:2a:1b:
a3:1d:79:bc:28:7a:4a:7d:cd:a5:68:bb:76:5b:0f:
e0:b9:e2:5b:92:ff:8d:c0:5b:8a:93:ba:26:58:01:
3c:f2:f3:ef:70:04:7d:66:3b:92:80:b3:ca:da:0c:
42:00:51:e1:1e:9c:42:f4:44:65:bd:8c:88:b7:8f:
92:f9:c1:10:48:e6:87:96:f3:e3:2a:12:5c:ee:ed:
6a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:87:F2:1B:91:92:16:46:08:C8:69:C4:2B:92:14:6C:66:79:09:BF
X509v3 Authority Key Identifier:
keyid:FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/J4fyG5GSFkYIyGnEK5IUbGZ5Cb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.232.116.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:63:7b:f7:45:68:b8:6d:41:9c:d0:b1:82:04:d2:0a:97:5e:
e0:8a:74:9f:95:62:da:28:4a:e3:d7:d8:98:44:56:ff:4a:22:
22:00:e8:0b:63:b9:29:19:d7:82:d7:6e:91:12:85:d4:5f:62:
35:6a:f2:88:fc:b6:49:da:c9:e5:de:8e:19:9f:60:71:e3:f7:
76:09:1a:2b:c5:a2:db:f1:02:bc:4f:27:cd:67:f1:49:5b:80:
6c:e7:7e:c2:fb:ef:d3:38:bf:fc:fe:20:72:4f:5b:77:4c:a1:
b3:1e:b0:e3:40:f9:9c:5f:0c:a6:a5:b3:6d:3f:69:b8:c1:81:
7f:28:fe:a1:b4:ff:8d:77:bb:8a:d8:67:b9:95:82:52:74:f9:
22:8c:32:eb:0a:c6:71:f8:de:91:28:5d:c6:c1:d5:c7:80:6f:
ec:59:78:1f:20:3a:29:80:3c:0b:87:7f:70:ea:32:85:1a:c9:
60:d6:98:e9:29:61:42:c6:f8:8f:ee:2a:77:c7:57:03:b7:a4:
c4:1f:fb:6c:59:88:00:6b:24:d9:9f:54:17:5e:75:27:a0:fd:
0e:36:15:4f:c2:e7:92:50:d1:11:a5:50:3b:78:cc:0b:3b:e6:
e0:05:46:8e:70:2e:bc:68:c2:c1:1a:f8:44:9a:1c:b7:b7:53:
70:fb:1c:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 12:41:56 2026 by rpki-client