Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/j-01fraGIv3X1wHK_rA9dAYiDjs.roa
File: j-01fraGIv3X1wHK_rA9dAYiDjs.roa (raw, json)
Hash identifier: h6Il0TO8I7Dg8CRRFY6K9k0PuloqO5JzRJ0+39HF1JA=
Subject key identifier: 8F:ED:35:7E:B6:86:22:FD:D7:D7:01:CA:FE:B0:3D:74:06:22:0E:3B
Certificate issuer: /CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Certificate serial: 01A03982579C718A041C6C1C6FDB8353FB32
Authority key identifier: 0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/j-01fraGIv3X1wHK_rA9dAYiDjs.roa
Signing time: Tue 25 Aug 2026 15:20:38 +0000
ROA not before: Tue 25 Aug 2026 15:20:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215291
IP address blocks: 194.93.48.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:39:82:57:9c:71:8a:04:1c:6c:1c:6f:db:83:53:fb:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Validity
Not Before: Aug 25 15:20:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8fed357eb68622fdd7d701cafeb03d7406220e3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:75:87:8d:8b:b1:59:8a:c2:c1:3a:2c:cc:af:
73:98:f5:d2:78:da:db:e6:f1:a6:24:1e:01:75:fc:
64:63:d2:4f:bf:26:09:18:51:30:ea:b9:2c:37:e9:
f2:8f:e0:bf:76:bb:bc:44:19:91:8a:2b:99:c2:e3:
66:de:fc:89:a5:4b:01:7a:93:12:7a:52:79:a8:d9:
76:af:ac:f8:c4:ee:40:2b:83:19:91:5f:06:64:1d:
f9:45:48:f8:59:1a:1c:a7:62:92:eb:91:85:ea:2b:
f9:8c:ca:81:0f:9a:ad:d1:c8:2a:0f:77:12:b5:0a:
e3:1b:d4:c5:dd:2d:bf:99:60:2a:d9:78:d0:00:2b:
97:45:51:5d:ab:41:ee:1b:ea:c4:84:0d:de:a3:91:
39:44:f4:14:90:08:21:d4:af:45:03:3d:1e:9a:65:
79:96:b0:d4:37:c4:40:c3:f0:62:ae:4f:0c:9d:f7:
75:a5:81:ef:cb:10:29:a4:71:6f:9b:ba:3c:33:77:
b7:fa:68:7e:fb:ab:5a:85:c4:a6:00:c8:e2:ba:ee:
18:e5:6a:ae:0f:2f:98:33:ed:58:99:59:f2:e9:50:
e2:09:52:16:92:7a:af:80:02:a4:0c:85:83:ce:f0:
29:9e:43:b0:a7:21:ce:4d:5c:33:d0:ac:9f:e7:9b:
c4:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:ED:35:7E:B6:86:22:FD:D7:D7:01:CA:FE:B0:3D:74:06:22:0E:3B
X509v3 Authority Key Identifier:
keyid:0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/j-01fraGIv3X1wHK_rA9dAYiDjs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.93.48.0/23
Signature Algorithm: sha256WithRSAEncryption
99:4f:3f:07:0b:45:f0:41:3c:79:ce:ab:99:bf:fd:00:85:bd:
58:b7:89:9d:b1:c6:5e:61:f7:6c:4d:1d:58:bb:f5:e0:b1:61:
6a:c9:88:43:48:99:e4:da:96:6c:78:ec:d4:0d:52:4f:5e:4a:
f1:d6:d3:80:10:89:fe:ea:23:8a:a4:bb:b4:bd:08:95:66:44:
29:63:19:97:10:00:62:1c:6b:61:4e:c8:0e:3a:67:4e:f4:05:
b5:cd:7c:31:4f:a9:55:d2:69:d3:bb:f2:16:05:c9:44:1d:2f:
06:58:76:16:10:c1:ea:55:cc:53:98:09:e5:82:db:b7:ad:3b:
eb:a0:3d:84:73:40:1d:9e:c2:af:e0:3b:b1:54:42:c2:ba:fb:
91:d9:03:25:d1:8c:7b:1b:3b:42:b9:c3:e9:ea:37:7f:cc:17:
f1:77:ba:d3:3c:b7:6e:47:95:e2:f8:af:fd:8a:3a:cb:68:b7:
3d:eb:e9:36:74:6f:cd:74:14:2d:cb:63:39:da:d6:1d:51:b4:
6d:39:bf:a3:97:e6:de:d2:5d:33:33:a1:b6:ca:4d:ff:81:60:
bc:0c:bf:50:fa:21:cc:36:63:9e:c8:72:7e:8b:c8:e2:71:77:
42:22:8a:6a:62:36:86:68:75:db:1c:be:f2:c6:56:f3:7b:4e:
be:1e:3a:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 02:04:56 2026 by rpki-client