Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/J1aCTCe9S3EttkG3gjoMsOR6Xk4.roa
File: J1aCTCe9S3EttkG3gjoMsOR6Xk4.roa (raw, json)
Hash identifier: BW0JcsAW2YXqSEQ+lbB1GbYcVdH4XyQmnvM9e9JVf3o=
Subject key identifier: 27:56:82:4C:27:BD:4B:71:2D:B6:41:B7:82:3A:0C:B0:E4:7A:5E:4E
Certificate issuer: /CN=1b2c219f3c297b775880c3b651a2003f9be6de5e
Certificate serial: 01A0F3D68F5C5D6F3AB826FCDE0697A573C7
Authority key identifier: 1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/J1aCTCe9S3EttkG3gjoMsOR6Xk4.roa
Signing time: Wed 30 Sep 2026 19:41:59 +0000
ROA not before: Wed 30 Sep 2026 19:41:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209242
IP address blocks: 176.98.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f3:d6:8f:5c:5d:6f:3a:b8:26:fc:de:06:97:a5:73:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b2c219f3c297b775880c3b651a2003f9be6de5e
Validity
Not Before: Sep 30 19:41:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2756824c27bd4b712db641b7823a0cb0e47a5e4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d5:b8:6a:37:13:1b:f0:ac:a0:ae:47:b1:8f:
dc:47:d0:33:14:e4:f6:92:28:c7:cc:e5:4b:c4:76:
96:52:80:89:56:7f:7d:a7:83:bf:a4:c9:26:ac:a0:
ed:17:9d:95:fb:58:65:96:2d:a9:30:72:cd:1f:b8:
37:44:ce:f4:cf:40:5c:4c:2d:40:55:38:c5:c9:39:
82:7c:f7:dd:bc:b3:5d:b6:1d:36:ca:76:30:f3:05:
5e:79:67:0c:e6:ff:93:3f:ba:82:2a:7c:15:c4:42:
5f:f3:3e:e3:66:4c:ef:6a:11:5a:71:d4:77:6b:95:
01:b5:eb:08:4c:4a:bb:56:b8:b5:81:9c:4a:fe:cf:
8b:10:88:d5:2c:13:5e:39:be:08:22:59:33:5d:67:
89:87:68:35:22:9f:00:0f:94:45:e3:95:d4:92:91:
94:da:1c:ae:e1:07:45:a7:c5:5c:9c:81:6c:ce:3f:
dc:67:fa:c9:23:0e:5e:8b:22:4b:9f:53:b6:90:6d:
9e:30:44:28:35:dc:5a:e6:21:27:07:96:c1:94:33:
b5:3d:db:7c:d6:8b:24:cf:5b:68:9a:da:fd:2c:f2:
d3:81:69:e0:39:7f:45:47:fd:63:e4:f5:90:68:f9:
c6:44:a8:77:49:6f:e6:b9:e5:a8:6d:81:aa:d2:11:
f9:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:56:82:4C:27:BD:4B:71:2D:B6:41:B7:82:3A:0C:B0:E4:7A:5E:4E
X509v3 Authority Key Identifier:
keyid:1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/J1aCTCe9S3EttkG3gjoMsOR6Xk4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.98.190.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:90:ad:65:c3:ef:91:72:09:89:ce:cf:92:22:db:57:cb:15:
e1:91:68:59:80:d1:7c:03:03:61:5e:2a:4d:7e:cf:dc:a4:61:
e5:e1:66:9d:cc:eb:e7:e9:1e:4c:36:6a:ee:77:82:9c:54:78:
de:be:94:f3:42:11:9b:e5:db:02:de:ea:a2:a8:b2:7f:99:e6:
fd:d4:2a:5e:0d:5a:4d:5d:52:d8:aa:d4:63:c5:eb:09:27:74:
2c:00:90:13:32:01:c1:b3:98:fa:b1:74:c2:25:de:a8:b3:cc:
cb:68:66:1c:40:a4:91:2a:f5:0d:ec:c4:76:2c:2a:23:95:ab:
9c:57:25:04:73:bd:36:8d:f5:2c:5a:39:0d:92:e7:18:f3:6f:
de:01:ad:3e:e3:25:e7:73:5f:dd:44:80:3f:a2:c4:70:ee:da:
03:20:1e:66:ed:a1:02:cf:2e:c3:fb:49:53:36:30:7c:0f:64:
94:b0:3f:0a:23:24:96:dd:87:72:4b:cd:af:06:91:a4:01:53:
06:41:bf:3e:53:2e:1a:92:a2:10:14:4d:fd:cd:15:26:10:d8:
86:9a:72:ed:f5:f4:e3:40:ce:72:2b:59:7b:0e:b3:ee:82:72:
01:6b:17:d8:01:bb:e0:54:07:e7:35:fc:56:71:10:9c:7c:81:
b3:ef:db:7c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaDz1o9cXW86uCb83gaXpXPHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiMmMyMTlmM2MyOTdiNzc1ODgwYzNiNjUxYTIwMDNmOWJl
NmRlNWUwHhcNMjYwOTMwMTk0MTU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNzU2ODI0YzI3YmQ0YjcxMmRiNjQxYjc4MjNhMGNiMGU0N2E1ZTRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNW4ajcTG/CsoK5HsY/cR9AzFOT2
kijHzOVLxHaWUoCJVn99p4O/pMkmrKDtF52V+1hlli2pMHLNH7g3RM70z0BcTC1A
VTjFyTmCfPfdvLNdth02ynYw8wVeeWcM5v+TP7qCKnwVxEJf8z7jZkzvahFacdR3
a5UBtesITEq7Vri1gZxK/s+LEIjVLBNeOb4IIlkzXWeJh2g1Ip8AD5RF45XUkpGU
2hyu4QdFp8VcnIFszj/cZ/rJIw5eiyJLn1O2kG2eMEQoNdxa5iEnB5bBlDO1Pdt8
1oskz1tomtr9LPLTgWngOX9FR/1j5PWQaPnGRKh3SW/mueWobYGq0hH5mwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCdWgkwnvUtxLbZBt4I6DLDkel5OMB8GA1UdIwQY
MBaAFBssIZ88KXt3WIDDtlGiAD+b5t5eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3l3aG56d3BlM2RZZ01PMlVhSUFQNXZtM2w0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9iMTFhNDAtNDhlOS00ZTA2LWJmMTEt
OTJjODFmMjJlNzEyLzEvSjFhQ1RDZTlTM0V0dGtHM2dqb01zT1I2WGs0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi9iMTFhNDAtNDhlOS00ZTA2LWJmMTEtOTJjODFmMjJlNzEy
LzEvR3l3aG56d3BlM2RZZ01PMlVhSUFQNXZtM2w0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsGK+MA0G
CSqGSIb3DQEBCwUAA4IBAQC0kK1lw++RcgmJzs+SIttXyxXhkWhZgNF8AwNhXipN
fs/cpGHl4WadzOvn6R5MNmrud4KcVHjevpTzQhGb5dsC3uqiqLJ/meb91CpeDVpN
XVLYqtRjxesJJ3QsAJATMgHBs5j6sXTCJd6os8zLaGYcQKSRKvUN7MR2LCojlauc
VyUEc702jfUsWjkNkucY82/eAa0+4yXnc1/dRIA/osRw7toDIB5m7aECzy7D+0lT
NjB8D2SUsD8KIySW3YdyS82vBpGkAVMGQb8+Uy4akqIQFE39zRUmENiGmnLt9fTj
QM5yK1l7DrPugnIBaxfYAbvgVAfnNfxWcRCcfIGz79t8
-----END CERTIFICATE-----
Generated at Mon Oct 26 03:35:17 2026 by rpki-client