Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/jK_3LgcUvw_YXHb3vUGOSp1VfSc.roa
File: jK_3LgcUvw_YXHb3vUGOSp1VfSc.roa (raw, json)
Hash identifier: P0th7HsuFLYcn8GMMOM/Z7wJfSVbtZTeQOBS9o5yvmI=
Subject key identifier: 8C:AF:F7:2E:07:14:BF:0F:D8:5C:76:F7:BD:41:8E:4A:9D:55:7D:27
Certificate issuer: /CN=505127723ea0cfd0724713b291734caa353e20ea
Certificate serial: 019FB349F2846751BCB6F35F03B5D38C95D8
Authority key identifier: 50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/jK_3LgcUvw_YXHb3vUGOSp1VfSc.roa
Signing time: Thu 30 Jul 2026 13:49:55 +0000
ROA not before: Thu 30 Jul 2026 13:49:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207343
IP address blocks: 185.227.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 20:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b3:49:f2:84:67:51:bc:b6:f3:5f:03:b5:d3:8c:95:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505127723ea0cfd0724713b291734caa353e20ea
Validity
Not Before: Jul 30 13:49:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8caff72e0714bf0fd85c76f7bd418e4a9d557d27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:47:5c:5b:58:d7:28:43:fc:aa:81:60:49:ab:
4b:ba:68:89:df:8d:b7:01:54:76:4b:fe:15:ee:17:
6b:0f:a0:6e:e2:d7:91:cb:cc:d5:36:51:74:21:79:
c5:94:c1:fd:c0:c5:13:ab:05:0a:1a:a8:f8:0c:10:
fb:7d:ad:50:44:cb:31:9c:e5:0a:7a:c6:9e:da:6d:
de:1a:9d:69:fc:c0:28:3f:10:1e:5f:b7:32:9e:7b:
84:26:25:9c:54:ad:15:b3:84:42:87:82:12:d1:b5:
35:e3:f2:fc:83:8c:40:3b:72:ad:34:7d:fb:55:02:
72:7b:5d:27:1e:e8:58:94:2b:41:4a:dd:a5:de:ac:
58:3f:93:38:60:65:d1:e2:f2:11:04:d4:a8:16:24:
57:3b:2d:08:0c:e2:9b:d3:24:05:0e:b4:cf:ef:ec:
88:d2:35:4b:8c:64:b2:b3:92:41:76:8c:0d:f2:32:
09:54:90:d3:c1:84:68:eb:54:bc:e3:12:24:c1:d8:
e4:e0:f6:c1:53:c2:6b:42:b8:fb:33:f8:0f:74:63:
3c:ee:d3:75:7a:b2:9a:00:b6:6c:b0:50:88:13:a9:
b4:46:52:20:fd:54:0d:58:52:b4:29:21:af:f8:7b:
2b:2f:1b:56:7c:4f:4b:5b:5e:7c:30:40:4b:ac:7b:
16:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:AF:F7:2E:07:14:BF:0F:D8:5C:76:F7:BD:41:8E:4A:9D:55:7D:27
X509v3 Authority Key Identifier:
keyid:50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/jK_3LgcUvw_YXHb3vUGOSp1VfSc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.227.255.0/24
Signature Algorithm: sha256WithRSAEncryption
85:1e:92:8c:7a:5e:b4:b5:ed:b7:d5:78:32:0e:9c:af:c8:c6:
83:f4:30:cd:81:a5:0a:21:3d:41:6e:04:d7:db:d9:cb:e8:a1:
8e:c0:a9:c0:d7:64:ca:57:c8:17:9c:38:30:2d:d0:21:3f:d3:
a7:92:39:72:c9:5c:a1:0b:a5:19:2e:04:f9:52:c1:90:95:7d:
d2:8f:ed:96:50:a9:a4:16:1a:75:32:7c:8c:94:34:5d:14:03:
17:76:e2:84:cf:42:58:03:93:8e:64:03:0c:aa:36:d9:fe:ac:
e2:52:30:2d:28:76:0b:74:5f:48:da:42:80:29:6b:8e:c3:87:
74:07:4f:d9:b0:38:4f:69:01:42:52:c3:ab:9f:ff:ca:43:b4:
30:db:1d:5d:bc:bb:d2:4a:59:f3:95:9e:b9:ea:3d:59:3a:0b:
d1:6b:0b:6c:65:c2:4a:84:b1:ff:bf:b6:94:86:a3:b4:10:28:
cc:13:f2:23:17:a6:71:3c:19:8b:80:23:32:29:55:c3:54:7d:
1f:49:f5:22:e9:eb:5c:1c:d9:ab:97:2e:13:bb:8a:25:47:38:
0b:ed:6b:79:e6:80:45:e8:fb:1f:16:43:79:f2:59:44:ae:c8:
7b:2d:c5:fd:93:7a:52:93:29:fb:d8:d3:68:fd:a0:a8:05:d8:
4a:88:8c:a4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ+zSfKEZ1G8tvNfA7XTjJXYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwNTEyNzcyM2VhMGNmZDA3MjQ3MTNiMjkxNzM0Y2FhMzUz
ZTIwZWEwHhcNMjYwNzMwMTM0OTU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4Y2FmZjcyZTA3MTRiZjBmZDg1Yzc2ZjdiZDQxOGU0YTlkNTU3ZDI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1EdcW1jXKEP8qoFgSatLumiJ3423
AVR2S/4V7hdrD6Bu4teRy8zVNlF0IXnFlMH9wMUTqwUKGqj4DBD7fa1QRMsxnOUK
esae2m3eGp1p/MAoPxAeX7cynnuEJiWcVK0Vs4RCh4IS0bU14/L8g4xAO3KtNH37
VQJye10nHuhYlCtBSt2l3qxYP5M4YGXR4vIRBNSoFiRXOy0IDOKb0yQFDrTP7+yI
0jVLjGSys5JBdowN8jIJVJDTwYRo61S84xIkwdjk4PbBU8JrQrj7M/gPdGM87tN1
erKaALZssFCIE6m0RlIg/VQNWFK0KSGv+HsrLxtWfE9LW158MEBLrHsWCwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIyv9y4HFL8P2Fx2971BjkqdVX0nMB8GA1UdIwQY
MBaAFFBRJ3I+oM/QckcTspFzTKo1PiDqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUZFbmNqNmd6OUJ5UnhPeWtYTk1xalUtSU9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9hOTA0MjMtMGI0Yi00OTlmLWJlNjYt
NTU2MDhiNjk0NDU2LzEvaktfM0xnY1V2d19ZWEhiM3ZVR09TcDFWZlNjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC9hOTA0MjMtMGI0Yi00OTlmLWJlNjYtNTU2MDhiNjk0NDU2
LzEvVUZFbmNqNmd6OUJ5UnhPeWtYTk1xalUtSU9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAueP/MA0G
CSqGSIb3DQEBCwUAA4IBAQCFHpKMel60te231XgyDpyvyMaD9DDNgaUKIT1BbgTX
29nL6KGOwKnA12TKV8gXnDgwLdAhP9OnkjlyyVyhC6UZLgT5UsGQlX3Sj+2WUKmk
Fhp1MnyMlDRdFAMXduKEz0JYA5OOZAMMqjbZ/qziUjAtKHYLdF9I2kKAKWuOw4d0
B0/ZsDhPaQFCUsOrn//KQ7Qw2x1dvLvSSlnzlZ656j1ZOgvRawtsZcJKhLH/v7aU
hqO0ECjME/IjF6ZxPBmLgCMyKVXDVH0fSfUi6etcHNmrly4Tu4olRzgL7Wt55oBF
6PsfFkN58llErsh7LcX9k3pSkyn72NNo/aCoBdhKiIyk
-----END CERTIFICATE-----
Generated at Thu Aug 13 02:25:52 2026 by rpki-client