Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/JuF8JYffuOtSCwcMiYZo3Pey5ZA.roa
File: JuF8JYffuOtSCwcMiYZo3Pey5ZA.roa (raw, json)
Hash identifier: j7powXlxfgyaZKtk7QfQHckjKifyc8G2y+8yFvttFik=
Subject key identifier: 26:E1:7C:25:87:DF:B8:EB:52:0B:07:0C:89:86:68:DC:F7:B2:E5:90
Certificate issuer: /CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Certificate serial: 01A039825E8FC13539F581D50C58FFFAA133
Authority key identifier: 0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/JuF8JYffuOtSCwcMiYZo3Pey5ZA.roa
Signing time: Tue 25 Aug 2026 15:20:40 +0000
ROA not before: Tue 25 Aug 2026 15:20:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 395374
IP address blocks: 213.139.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:39:82:5e:8f:c1:35:39:f5:81:d5:0c:58:ff:fa:a1:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Validity
Not Before: Aug 25 15:20:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=26e17c2587dfb8eb520b070c898668dcf7b2e590
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e5:95:65:59:04:66:dc:44:75:7c:6d:53:37:
a4:dc:06:db:c6:a2:bb:24:f6:46:03:f0:0d:6b:60:
ee:c9:61:8f:47:fd:dd:ff:d1:b9:85:13:6a:3a:0d:
4a:20:b9:cc:29:8f:5e:a4:08:c3:0e:1f:cd:44:91:
06:4c:b8:89:f7:7e:59:7d:35:0b:ff:0b:53:3f:9d:
99:08:b3:c1:63:fb:06:52:00:52:b3:25:55:9b:b2:
ba:30:62:2d:89:c1:b7:c1:69:b3:48:c3:6e:ba:6f:
aa:5a:42:a5:c9:39:3e:be:73:01:9a:98:8e:af:f8:
d5:98:75:b0:1a:16:8d:35:22:b0:76:5e:be:38:f9:
dd:34:7b:60:eb:21:4d:f8:3b:cd:e6:fe:f4:31:8d:
be:59:ff:54:b7:3f:28:df:c5:51:cd:13:9c:b4:b6:
60:6a:63:21:78:af:22:44:70:89:bc:db:c5:3f:3e:
c6:13:09:4a:91:b3:bc:15:52:d9:d7:e0:71:fe:51:
32:dd:4f:63:0a:c2:12:9e:7d:d6:cb:27:8f:e1:ba:
54:1e:8d:d8:92:74:e6:7e:99:18:97:64:56:a3:af:
76:c2:2d:c9:19:15:56:e9:03:a3:7a:ff:9c:90:d4:
75:c6:38:50:df:8c:a5:44:21:f4:e7:f3:21:29:55:
1f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:E1:7C:25:87:DF:B8:EB:52:0B:07:0C:89:86:68:DC:F7:B2:E5:90
X509v3 Authority Key Identifier:
keyid:0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/JuF8JYffuOtSCwcMiYZo3Pey5ZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.139.227.0/24
Signature Algorithm: sha256WithRSAEncryption
68:15:31:b8:2e:b6:ec:94:09:8e:b9:a3:e0:5c:cf:dd:0b:c3:
26:a1:e5:50:27:57:d0:19:ad:db:cd:e9:b9:fe:c8:21:3d:af:
6a:b0:85:6f:a8:2b:5d:5d:22:38:f3:ab:8b:ae:54:04:54:c2:
3b:5c:4a:05:c5:af:39:2c:e9:79:c3:20:bf:47:fe:bd:6b:bf:
29:4a:d6:d1:0e:fe:f1:aa:71:37:02:e1:aa:93:00:2e:9a:29:
9c:f2:5d:4b:ea:11:98:91:fe:84:96:ed:e9:49:d4:ad:4f:2f:
32:72:36:00:a4:22:0c:67:99:1d:d7:03:d2:3e:71:ba:8e:cd:
a9:6f:4e:6d:04:57:3f:5f:f4:16:84:71:fa:89:8d:73:47:2f:
d4:68:8c:be:19:0f:26:c7:81:4b:cd:f6:30:0c:49:46:52:1e:
33:28:13:55:72:25:b3:b2:30:4d:5f:2d:c8:c7:2c:a3:b9:14:
5b:88:90:96:0b:72:33:c3:63:65:ad:94:24:48:33:83:e3:d2:
c2:bc:57:d3:ff:5f:48:09:d0:9d:8c:e2:28:bf:a9:78:fa:1c:
a9:33:d0:ed:e7:77:f7:1a:2d:42:4b:7a:4f:04:37:7c:5e:40:
68:95:77:2c:9e:ee:b3:df:ef:57:95:c4:54:d9:41:37:68:cb:
3b:ff:5e:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 02:04:32 2026 by rpki-client