Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/J9MT22xdWsvgHPPc8qQSPduluPc.roa
File: J9MT22xdWsvgHPPc8qQSPduluPc.roa (raw, json)
Hash identifier: bY64obKbc9AS8Nu4CvKIMiT1F4sj6yJCkBxVK26EZR4=
Subject key identifier: 27:D3:13:DB:6C:5D:5A:CB:E0:1C:F3:DC:F2:A4:12:3D:DB:A5:B8:F7
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 01A05C4D1E62ADAF92F63B3F6FB1F3AA6A89
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/J9MT22xdWsvgHPPc8qQSPduluPc.roa
Signing time: Tue 01 Sep 2026 09:29:12 +0000
ROA not before: Tue 01 Sep 2026 09:29:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30738
IP address blocks: 188.130.228.0/23 maxlen: 23
195.211.52.0/22 maxlen: 24
2001:1468::/32 maxlen: 33
2001:1468:8000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5c:4d:1e:62:ad:af:92:f6:3b:3f:6f:b1:f3:aa:6a:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Sep 1 09:29:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=27d313db6c5d5acbe01cf3dcf2a4123ddba5b8f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:bc:90:f4:d5:0d:d3:e3:ff:97:f7:18:bb:fb:
44:97:50:92:f2:ee:0f:14:a4:ce:79:6f:12:97:ea:
56:07:3c:a2:ea:92:50:25:e1:0b:7c:47:ab:00:ea:
9a:b0:4f:43:8c:5e:3b:26:b9:23:2f:0d:e0:29:01:
3c:79:ad:17:88:d9:9f:cc:57:87:70:df:df:b0:d1:
93:57:1e:37:6c:9d:cc:42:fa:1e:a5:95:bd:bb:79:
db:61:b3:4e:3e:4b:06:8a:1e:90:14:25:9f:a8:c1:
e7:66:3b:f3:34:12:0e:13:27:23:29:aa:86:ad:e1:
68:7b:59:b0:ac:cf:ba:18:ce:98:6a:56:7e:f3:0e:
d9:04:1b:d0:16:92:92:09:58:41:28:98:c1:ef:97:
4d:42:20:a1:e3:a2:9a:05:0c:a7:80:0a:95:f3:64:
6a:6d:35:f1:0c:d9:75:b2:49:13:1f:d0:3e:df:c9:
75:c7:11:c5:47:cc:5d:ec:3c:80:62:ba:7d:5b:8b:
d5:dc:14:90:2f:bf:6a:6a:36:73:b9:2b:59:eb:ed:
d3:2c:2d:4e:35:66:94:8d:52:d8:30:8d:6b:e1:0b:
ee:d0:ae:8a:89:30:65:b1:5d:36:15:f7:30:c8:ea:
b7:c7:b2:6c:75:ba:46:6d:d1:23:85:ea:2a:72:be:
f5:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:D3:13:DB:6C:5D:5A:CB:E0:1C:F3:DC:F2:A4:12:3D:DB:A5:B8:F7
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/J9MT22xdWsvgHPPc8qQSPduluPc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.130.228.0/23
195.211.52.0/22
IPv6:
2001:1468::/32
Signature Algorithm: sha256WithRSAEncryption
04:0c:45:7d:e9:0e:33:ae:2d:24:cf:4e:ff:f9:0a:36:4c:2a:
fc:fa:fc:26:9d:cd:38:2b:8f:3f:1f:28:cb:f4:84:b8:67:5c:
52:37:c2:d0:dd:5c:db:56:35:4f:35:75:e8:b0:b2:85:9d:57:
b9:db:29:62:69:e9:7a:4f:b3:e3:ed:0f:45:38:02:68:98:0b:
38:b6:27:a5:f5:60:6a:ae:f7:43:90:38:b3:09:f7:fb:cf:93:
cd:e5:3c:6b:68:9a:6e:92:2e:9d:6d:a8:43:41:4c:51:15:2f:
60:3c:1d:f6:58:4a:bb:45:1c:ac:b7:12:0f:3d:c3:ac:91:1a:
b1:a0:c2:b9:9d:54:c4:6d:1e:09:05:f2:ec:e6:56:8d:c8:42:
e1:28:8a:14:77:f2:d6:a4:91:9e:85:4e:fb:27:96:23:f5:cf:
b9:a1:11:0d:96:38:61:d4:29:88:dc:37:cd:54:32:1c:06:0f:
dc:41:ba:cf:80:00:01:a6:2d:0e:8d:1d:f8:0a:ce:21:27:2e:
90:4c:d4:6d:4a:9f:f0:33:d6:1f:ce:13:83:dc:2a:de:88:5e:
35:20:4e:af:63:d0:8c:dc:b2:a8:c3:32:3a:09:76:69:e9:d3:
16:9d:19:4d:ae:5f:b3:85:b5:3f:ae:c8:c0:aa:e5:0d:14:bc:
b2:21:5e:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 13:22:32 2026 by rpki-client