Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/J2oBLSxca0EEubzTtRX4Zu4pfF4.roa
File: J2oBLSxca0EEubzTtRX4Zu4pfF4.roa (raw, json)
Hash identifier: DhW2Csu1eYFO4R+oc4I/8u+D23rpSqFIRV415yUVAEE=
Subject key identifier: 27:6A:01:2D:2C:5C:6B:41:04:B9:BC:D3:B5:15:F8:66:EE:29:7C:5E
Certificate issuer: /CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Certificate serial: 01A117CBABA280D4097AC8358207BC9509A7
Authority key identifier: 0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/J2oBLSxca0EEubzTtRX4Zu4pfF4.roa
Signing time: Wed 07 Oct 2026 19:16:26 +0000
ROA not before: Wed 07 Oct 2026 19:16:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 188.119.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 20:43:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:17:cb:ab:a2:80:d4:09:7a:c8:35:82:07:bc:95:09:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Validity
Not Before: Oct 7 19:16:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=276a012d2c5c6b4104b9bcd3b515f866ee297c5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:60:fd:54:13:80:4a:b2:a3:41:3d:5f:69:c4:
38:c8:0b:54:be:4d:e9:d6:18:d2:4c:8a:e3:be:b3:
dc:f8:3b:65:1a:70:83:3f:09:1c:e9:e4:51:44:32:
81:09:75:d7:21:d3:1c:22:31:a9:c0:8e:bd:95:c4:
7d:eb:f5:fa:29:08:c3:5a:05:f4:5c:e2:b5:6e:f1:
b3:14:2b:0c:3b:7b:b9:0d:8d:03:7d:b7:02:d2:05:
8b:6e:55:0e:1b:33:a7:7b:a7:fb:f7:34:86:ba:47:
dc:2c:3d:96:9d:ba:f4:b9:7f:cb:89:d1:0c:92:10:
d7:ff:3e:fb:da:54:1e:9a:b2:5b:fa:b1:b0:6a:46:
73:10:9f:87:e3:e6:41:ca:85:41:e1:98:69:b9:cc:
56:44:05:25:7b:d3:68:03:eb:02:f3:bf:69:ba:75:
50:39:c2:93:13:6b:d5:b8:3e:3e:16:c3:6f:ed:9c:
73:b4:40:0d:73:5b:a5:ac:42:03:20:b8:0b:b3:3c:
28:89:95:e4:61:9e:7a:4c:c2:ce:dd:7f:fb:73:33:
fa:e1:9d:74:c8:11:ab:67:17:ca:8b:99:66:dc:12:
4b:66:b9:0c:0a:8d:81:9b:38:3b:e8:c1:b8:72:88:
f9:3d:da:87:09:e7:df:56:47:8d:c5:af:06:ff:8e:
72:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:6A:01:2D:2C:5C:6B:41:04:B9:BC:D3:B5:15:F8:66:EE:29:7C:5E
X509v3 Authority Key Identifier:
keyid:0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/J2oBLSxca0EEubzTtRX4Zu4pfF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.119.71.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:cf:69:28:53:57:cb:2b:87:a2:78:a6:e1:2f:24:cc:f0:a4:
cf:78:f1:ce:58:33:49:4a:9e:35:ab:b1:cc:b7:7f:c2:aa:c6:
3a:d9:ee:c0:62:2b:ce:0c:2b:52:a2:b1:ef:47:55:2f:2c:f9:
30:bf:b2:fd:3d:6b:d5:0b:c7:3e:f1:a8:fe:fe:05:c6:ba:de:
6f:4e:08:c7:3d:00:8f:45:0e:09:07:49:49:06:03:70:9e:b8:
2b:4d:d6:e6:e5:b9:9b:ae:c8:55:2a:2c:59:c2:32:2e:84:7c:
a5:c7:dd:38:12:39:9b:56:8b:57:0a:a9:96:2b:94:40:f1:34:
bf:70:7d:1c:62:54:8e:c0:a7:9c:10:cd:a6:16:82:e5:21:70:
22:ee:74:74:1b:85:35:b3:59:10:5b:85:57:36:82:a0:0d:0b:
bd:0a:1a:27:ca:30:14:fb:b9:ab:fc:d4:3f:16:b0:ce:1a:ae:
ba:b5:04:c4:60:7b:0d:0d:11:e9:f7:5e:34:88:05:f8:32:22:
af:1d:8f:ca:f6:98:11:d4:46:d2:10:e7:fb:57:f8:84:1b:07:
6f:96:31:96:ed:2a:c4:d0:c7:e6:90:42:5b:11:76:dd:b7:7e:
b1:33:9a:9a:a5:51:66:b7:67:56:5b:45:f5:c1:f6:dc:0d:9f:
98:f1:a2:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 06:48:47 2026 by rpki-client