Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/CjV6mdrfVrhVAUrftKRzM-oPLEY.roa
File: CjV6mdrfVrhVAUrftKRzM-oPLEY.roa (raw, json)
Hash identifier: zq75eQCdFlGPvNTanm5A04Aosb4EDvywxu0fCf+FaxM=
Subject key identifier: 0A:35:7A:99:DA:DF:56:B8:55:01:4A:DF:B4:A4:73:33:EA:0F:2C:46
Certificate issuer: /CN=ba9d30e6035be8b8386061f271481c707e04ce2b
Certificate serial: 01A0F1EC4F69516675BE8153824FD5E90CD3
Authority key identifier: BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/CjV6mdrfVrhVAUrftKRzM-oPLEY.roa
Signing time: Wed 30 Sep 2026 10:46:30 +0000
ROA not before: Wed 30 Sep 2026 10:46:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396982
IP address blocks: 82.222.68.0/24 maxlen: 24
82.222.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft
rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 04:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f1:ec:4f:69:51:66:75:be:81:53:82:4f:d5:e9:0c:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba9d30e6035be8b8386061f271481c707e04ce2b
Validity
Not Before: Sep 30 10:46:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0a357a99dadf56b855014adfb4a47333ea0f2c46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:4b:d9:9c:56:8a:bf:0b:0d:21:83:84:42:7b:
b3:a3:d7:30:a5:4b:ff:7e:ed:70:ec:a4:06:e3:ff:
13:51:3d:17:fa:30:ea:82:a1:85:1e:75:dd:5b:ad:
f3:f1:6b:75:da:cd:f6:2e:62:67:c0:8d:87:91:ce:
a8:0d:dc:03:53:4b:5c:2c:e4:89:34:c8:61:10:fc:
63:06:0b:ac:59:b3:25:14:41:28:ec:02:cb:44:03:
df:5e:2c:1d:ea:84:9f:23:84:6b:2a:d1:1e:2c:d7:
86:af:41:66:22:0e:4e:d1:d4:10:14:ca:b9:ef:e5:
df:27:0e:29:26:be:da:42:41:5a:f5:67:97:64:32:
ad:ef:88:08:79:5f:d1:a8:70:26:ca:ea:17:68:b0:
93:36:be:e3:4b:d0:25:39:84:9a:30:8d:7e:80:6d:
28:33:d8:7d:55:b9:c2:0b:85:af:6f:5e:7f:64:ce:
2c:24:e8:39:c4:7b:8d:f8:ed:ae:c4:6a:9d:c3:5d:
bb:ee:c1:80:c2:17:67:00:f9:4e:6d:ff:10:6f:a1:
fa:fa:aa:ae:0b:bd:06:64:7a:4f:3f:b1:8d:dd:98:
08:a4:44:8b:eb:e1:f4:ce:8b:47:cb:83:2d:40:01:
76:e0:93:92:14:41:ce:65:9e:2e:48:f1:c9:2d:d4:
62:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:35:7A:99:DA:DF:56:B8:55:01:4A:DF:B4:A4:73:33:EA:0F:2C:46
X509v3 Authority Key Identifier:
keyid:BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/CjV6mdrfVrhVAUrftKRzM-oPLEY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.222.68.0/23
Signature Algorithm: sha256WithRSAEncryption
47:0e:f7:b6:f4:bc:7a:8e:50:6a:95:91:74:e3:1b:67:89:a3:
b1:fc:b6:a9:61:db:c4:54:38:a9:cb:d3:47:07:3f:7c:1f:e4:
d6:d4:95:fb:29:36:89:79:c1:d9:95:9e:18:62:60:43:e8:26:
fd:14:5a:0c:d4:c7:ea:17:ee:5c:69:33:fa:6b:82:12:d3:35:
fc:f7:3b:dd:8c:eb:40:b6:06:1d:7c:87:65:4f:53:09:af:52:
26:ad:60:45:b1:86:74:e0:e1:57:71:a8:3e:49:e9:54:c6:da:
30:c4:db:30:f5:d3:0b:be:4b:44:a3:33:aa:09:3d:5d:a8:89:
11:83:59:d9:e3:13:1a:19:36:70:b2:aa:2f:9c:0e:2e:1e:b0:
30:60:35:fc:b8:04:d8:df:90:ac:30:7e:b4:91:0d:d9:60:25:
14:e9:06:46:e2:00:71:05:0c:ee:0a:22:3f:12:c1:62:f4:75:
11:84:35:30:63:6d:a8:f9:28:bb:e8:f1:4d:a4:6c:bf:2f:35:
d4:a0:88:44:a7:9d:9e:68:18:27:65:85:c9:69:4a:3a:9f:df:
34:19:89:f2:25:42:09:de:9f:e6:f5:13:29:dc:24:bf:8c:80:
48:85:f5:9c:83:59:e5:c0:b5:89:94:e7:cf:c7:e2:df:01:c4:
77:10:36:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 11:54:26 2026 by rpki-client