Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/jJKRPsvjAAfIe7fEeqnkr5L_8So.roa
File: jJKRPsvjAAfIe7fEeqnkr5L_8So.roa (raw, json)
Hash identifier: l3GP7zQM3a9WxMHyz63IMhLibk8A+dGz1vv7Za1MVcU=
Subject key identifier: 8C:92:91:3E:CB:E3:00:07:C8:7B:B7:C4:7A:A9:E4:AF:92:FF:F1:2A
Certificate issuer: /CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Certificate serial: 019DB01FCC4E221D4449471D5BFC27DB20A2
Authority key identifier: FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/jJKRPsvjAAfIe7fEeqnkr5L_8So.roa
Signing time: Tue 21 Apr 2026 12:59:27 +0000
ROA not before: Tue 21 Apr 2026 12:59:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 46370
IP address blocks: 87.232.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 May 2026 07:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b0:1f:cc:4e:22:1d:44:49:47:1d:5b:fc:27:db:20:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Validity
Not Before: Apr 21 12:59:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8c92913ecbe30007c87bb7c47aa9e4af92fff12a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:9f:2d:3c:30:1d:26:8b:69:d1:cb:d0:41:79:
78:96:5b:3f:d3:bd:83:e0:17:54:3e:42:6a:c3:3e:
96:d9:e3:ec:dd:ed:6c:24:65:9c:80:cb:29:c0:6e:
17:e1:47:26:75:ad:94:16:13:c6:ba:9d:7b:b7:e0:
4c:7c:7d:d4:84:c4:df:ee:2b:55:6c:7d:19:a9:8e:
2f:41:06:2c:58:1e:d5:25:b8:7b:2b:54:a0:eb:9f:
86:00:22:2a:bf:5b:a5:6b:4a:0e:76:aa:02:18:99:
1d:44:db:cb:b6:7c:62:01:c0:da:3b:45:2a:a2:69:
0b:e4:96:33:08:fd:16:84:f0:ed:f1:52:7b:b3:e8:
29:15:82:de:62:b2:38:78:f8:c9:45:fd:ec:2b:4f:
67:d8:25:14:e5:1c:39:48:9f:25:cd:d3:c3:0f:69:
c2:bc:33:23:4a:5e:1e:2e:e3:d1:09:b1:70:38:59:
e8:93:b1:2c:dd:46:f4:12:04:a8:15:a7:71:3e:09:
cc:41:de:b9:7b:7d:b9:64:5b:1f:bf:18:49:39:c8:
6b:a0:fe:e4:9b:bb:b6:b3:06:17:33:12:d1:af:71:
49:28:ab:6c:dd:2d:08:52:c8:33:b5:9e:46:27:68:
2b:68:bb:ff:c9:ba:48:fb:8f:bc:ee:22:b5:62:04:
f0:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:92:91:3E:CB:E3:00:07:C8:7B:B7:C4:7A:A9:E4:AF:92:FF:F1:2A
X509v3 Authority Key Identifier:
keyid:FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/jJKRPsvjAAfIe7fEeqnkr5L_8So.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.232.99.0/24
Signature Algorithm: sha256WithRSAEncryption
90:33:81:05:aa:38:dc:02:7e:b3:a4:6b:d1:0c:16:f7:5b:4d:
ad:6c:ba:97:61:3e:f8:db:20:74:81:08:2c:0c:04:96:a6:d7:
dd:b0:5d:46:68:62:f3:a9:28:51:a7:24:87:2c:52:b2:01:ac:
57:1f:77:6d:15:a2:19:c1:5e:7d:55:56:86:33:c5:ec:0d:11:
c3:96:16:c2:7e:9e:cb:81:53:4b:e6:fa:75:5a:b1:4d:aa:0d:
c7:6e:9c:f0:f9:21:24:97:b5:2d:fe:c0:5b:76:4a:00:a0:89:
3e:a2:9d:06:2c:e5:45:a7:03:a9:53:12:3d:83:b1:94:bd:73:
4a:5c:d8:ba:e9:24:0d:5b:55:b3:d4:66:7e:a1:89:55:da:88:
86:4a:42:68:a9:87:9d:ad:29:2c:01:f6:05:e8:b6:93:ef:7f:
5e:37:bd:92:65:77:20:ab:78:c3:63:18:26:73:c3:28:02:88:
bc:9c:78:a7:98:7d:21:05:67:0c:e5:f2:2f:87:05:9d:f3:42:
ca:42:2a:da:67:99:c5:c1:60:35:92:91:d4:c5:95:e9:ba:a0:
ab:93:17:59:26:80:63:0e:7c:0e:c6:56:a3:df:18:59:0e:5f:
94:1e:40:b2:7f:b7:f3:6f:2d:2b:f3:49:5b:b3:08:ee:1c:24:
7e:a7:19:15
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ2wH8xOIh1ESUcdW/wn2yCiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmYTNlNTUxNDFjMWExZjlmMmUyODgxMWVkN2U3N2ZhZDM3
OGE1NzkwHhcNMjYwNDIxMTI1OTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YzkyOTEzZWNiZTMwMDA3Yzg3YmI3YzQ3YWE5ZTRhZjkyZmZmMTJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA158tPDAdJotp0cvQQXl4lls/072D
4BdUPkJqwz6W2ePs3e1sJGWcgMspwG4X4Ucmda2UFhPGup17t+BMfH3UhMTf7itV
bH0ZqY4vQQYsWB7VJbh7K1Sg65+GACIqv1ula0oOdqoCGJkdRNvLtnxiAcDaO0Uq
omkL5JYzCP0WhPDt8VJ7s+gpFYLeYrI4ePjJRf3sK09n2CUU5Rw5SJ8lzdPDD2nC
vDMjSl4eLuPRCbFwOFnok7Es3Ub0EgSoFadxPgnMQd65e325ZFsfvxhJOchroP7k
m7u2swYXMxLRr3FJKKts3S0IUsgztZ5GJ2graLv/ybpI+4+87iK1YgTwCQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIySkT7L4wAHyHu3xHqp5K+S//EqMB8GA1UdIwQY
MBaAFP+j5VFBwaH58uKIEe1+d/rTeKV5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzZQbFVVSEJvZm55NG9nUjdYNTMtdE40cFhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9iMjYzYTItMGY2Zi00ZjVkLWFmOWUt
YTM5YWMyNTM5ZmM1LzEvakpLUlBzdmpBQWZJZTdmRWVxbmtyNUxfOFNvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9iMjYzYTItMGY2Zi00ZjVkLWFmOWUtYTM5YWMyNTM5ZmM1
LzEvXzZQbFVVSEJvZm55NG9nUjdYNTMtdE40cFhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV+hjMA0G
CSqGSIb3DQEBCwUAA4IBAQCQM4EFqjjcAn6zpGvRDBb3W02tbLqXYT742yB0gQgs
DASWptfdsF1GaGLzqShRpySHLFKyAaxXH3dtFaIZwV59VVaGM8XsDRHDlhbCfp7L
gVNL5vp1WrFNqg3Hbpzw+SEkl7Ut/sBbdkoAoIk+op0GLOVFpwOpUxI9g7GUvXNK
XNi66SQNW1Wz1GZ+oYlV2oiGSkJoqYedrSksAfYF6LaT739eN72SZXcgq3jDYxgm
c8MoAoi8nHinmH0hBWcM5fIvhwWd80LKQiraZ5nFwWA1kpHUxZXpuqCrkxdZJoBj
DnwOxlaj3xhZDl+UHkCyf7fzby0r80lbswjuHCR+pxkV
-----END CERTIFICATE-----
Generated at Thu May 7 15:29:08 2026 by rpki-client