Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/50/a69625-80e3-490e-bd2c-ab3dcfbe18e4/1/_J6pdmckPgHyz2FG0GKqWH27YPI.roa
File: _J6pdmckPgHyz2FG0GKqWH27YPI.roa (raw, json)
Hash identifier: g+6dKk+dtRpdHiyAdn0zdGS/dJUE/LqkB+mPs4d91gg=
Subject key identifier: FC:9E:A9:76:67:24:3E:01:F2:CF:61:46:D0:62:AA:58:7D:BB:60:F2
Certificate issuer: /CN=ebaaee569b873c7b05ecd221dbb7f34274b7bf51
Certificate serial: 01A0134682EB3C1EE2168C3667D85E5F417D
Authority key identifier: EB:AA:EE:56:9B:87:3C:7B:05:EC:D2:21:DB:B7:F3:42:74:B7:BF:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/66ruVpuHPHsF7NIh27fzQnS3v1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/a69625-80e3-490e-bd2c-ab3dcfbe18e4/1/_J6pdmckPgHyz2FG0GKqWH27YPI.roa
Signing time: Tue 18 Aug 2026 05:09:43 +0000
ROA not before: Tue 18 Aug 2026 05:09:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12302
IP address blocks: 194.102.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/a69625-80e3-490e-bd2c-ab3dcfbe18e4/1/66ruVpuHPHsF7NIh27fzQnS3v1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/a69625-80e3-490e-bd2c-ab3dcfbe18e4/1/66ruVpuHPHsF7NIh27fzQnS3v1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/66ruVpuHPHsF7NIh27fzQnS3v1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:13:46:82:eb:3c:1e:e2:16:8c:36:67:d8:5e:5f:41:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebaaee569b873c7b05ecd221dbb7f34274b7bf51
Validity
Not Before: Aug 18 05:09:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fc9ea97667243e01f2cf6146d062aa587dbb60f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3b:cb:7d:6f:72:c1:a1:98:11:82:b2:1e:e3:
3a:2f:e5:8e:a7:27:9b:d7:2a:84:b8:7c:b2:8e:76:
90:4b:1e:6c:d3:f2:0a:39:60:23:38:8b:b6:cb:bd:
53:c0:50:bb:44:ba:e7:bd:2c:fc:e0:47:77:9c:48:
9f:ea:f1:03:25:6d:cf:69:ee:50:e1:c1:09:ff:c6:
9c:cc:ca:4e:32:a4:01:ad:af:ab:88:1f:03:e4:78:
c9:7f:79:fd:95:ad:c9:45:9f:49:d4:bb:df:e9:0e:
19:38:c8:47:fd:8b:4c:b7:e1:28:55:1d:65:7f:31:
f0:50:3b:68:17:3a:fb:a2:e2:58:a4:73:c5:fc:bd:
5b:7e:3e:3f:66:50:d8:f2:b6:d0:73:74:77:d2:97:
2b:54:15:73:f3:6f:f3:f5:da:d8:2b:bb:24:95:ec:
02:fb:f8:54:41:31:79:56:98:a9:39:54:29:61:2f:
89:21:91:93:ae:83:ad:5d:93:6c:aa:b8:ad:62:5b:
85:02:d3:bb:3a:0a:a5:b2:f0:e5:fc:82:94:c6:d3:
8c:32:b3:52:4f:53:6e:b3:ff:74:fc:de:78:bd:ac:
c9:58:59:8c:3b:2d:1c:7a:62:a0:e6:cf:a6:e6:b7:
6e:7e:60:1c:a3:3c:50:a0:3d:d6:c8:c8:31:4c:9d:
06:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:9E:A9:76:67:24:3E:01:F2:CF:61:46:D0:62:AA:58:7D:BB:60:F2
X509v3 Authority Key Identifier:
keyid:EB:AA:EE:56:9B:87:3C:7B:05:EC:D2:21:DB:B7:F3:42:74:B7:BF:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/66ruVpuHPHsF7NIh27fzQnS3v1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/a69625-80e3-490e-bd2c-ab3dcfbe18e4/1/_J6pdmckPgHyz2FG0GKqWH27YPI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/a69625-80e3-490e-bd2c-ab3dcfbe18e4/1/66ruVpuHPHsF7NIh27fzQnS3v1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.102.85.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:b2:33:d3:c8:d0:04:f6:1d:8d:66:68:fa:5d:79:56:ff:ff:
43:53:f5:24:e9:18:4d:09:4e:52:1b:79:0d:ac:80:a7:d5:e8:
91:f1:83:e7:f2:9e:63:92:26:96:90:5b:21:07:4f:84:54:ff:
f7:c3:ce:36:a9:09:2e:0a:1e:d8:a3:a7:76:b5:cf:9c:7d:ff:
3d:b3:40:ac:81:be:6c:01:cc:65:e1:db:08:14:ae:41:3f:d5:
36:5e:91:1c:9e:3e:e6:a6:90:0f:de:27:63:92:c4:03:42:f5:
64:8a:cb:9c:18:d4:42:8c:6d:e3:4a:66:07:1f:1f:78:ed:e4:
90:89:92:32:9b:c1:6c:d4:99:2c:a0:b4:f4:ee:ed:bc:63:a3:
79:eb:61:4d:e0:2f:8e:b4:d6:e7:e1:5b:0d:16:80:74:76:f4:
49:45:3f:c3:07:bd:44:20:07:e4:ea:9b:3c:26:1e:06:1a:f9:
9a:23:fe:31:ba:a2:9f:7a:d5:11:8a:79:5d:f1:7c:35:d6:86:
44:4b:f9:69:29:a1:58:8a:ed:ed:0c:49:d9:68:a8:d8:26:a2:
e2:b5:0e:a3:67:7f:b2:42:e8:65:2d:66:6a:45:d0:76:8f:89:
b0:37:b8:f4:4f:71:32:91:ff:56:02:1a:e2:7f:0a:c6:15:f2:
2e:2e:b3:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 16:18:22 2026 by rpki-client