Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/70/2ba70c-2251-48b1-9edb-2f9d69e62531/1/tXjP3An2bJU77XpoARfdw9owN1E.roa
File: tXjP3An2bJU77XpoARfdw9owN1E.roa (raw, json)
Hash identifier: JXarnRbZIy+Z4AEeK+NGzHW6bngC4ezetFYPofIrgyg=
Subject key identifier: B5:78:CF:DC:09:F6:6C:95:3B:ED:7A:68:01:17:DD:C3:DA:30:37:51
Certificate issuer: /CN=8f7f4647c889da8017aa2e590b94858e4eb8b36b
Certificate serial: 01A0D2DA916E32C5EA792A4CAC8986982E58
Authority key identifier: 8F:7F:46:47:C8:89:DA:80:17:AA:2E:59:0B:94:85:8E:4E:B8:B3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j39GR8iJ2oAXqi5ZC5SFjk64s2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/2ba70c-2251-48b1-9edb-2f9d69e62531/1/tXjP3An2bJU77XpoARfdw9owN1E.roa
Signing time: Thu 24 Sep 2026 09:58:54 +0000
ROA not before: Thu 24 Sep 2026 09:58:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8881
IP address blocks: 194.76.107.0/24 maxlen: 24
2a11:d00::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/2ba70c-2251-48b1-9edb-2f9d69e62531/1/j39GR8iJ2oAXqi5ZC5SFjk64s2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/2ba70c-2251-48b1-9edb-2f9d69e62531/1/j39GR8iJ2oAXqi5ZC5SFjk64s2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/j39GR8iJ2oAXqi5ZC5SFjk64s2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 09:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:da:91:6e:32:c5:ea:79:2a:4c:ac:89:86:98:2e:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f7f4647c889da8017aa2e590b94858e4eb8b36b
Validity
Not Before: Sep 24 09:58:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b578cfdc09f66c953bed7a680117ddc3da303751
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:29:56:ec:1a:ac:b8:27:15:4c:51:ae:88:1a:
82:2c:31:36:99:e6:1f:59:ea:c6:94:85:1e:82:a5:
38:59:cb:3c:ae:07:e2:2c:89:49:1a:43:1f:ec:e8:
cd:c9:d9:dc:ee:47:dd:68:29:e5:9c:58:9e:e9:2d:
86:e7:f7:f7:b6:ad:7b:78:83:09:31:a1:a6:e2:bd:
cd:72:98:bc:0b:bc:d5:84:43:c8:a4:17:79:81:bf:
f1:bd:06:72:47:d2:6a:a3:3b:e8:9c:7d:bd:52:b9:
ac:7b:67:1d:58:17:ba:99:29:36:ad:c2:61:62:10:
40:70:1c:d5:64:71:e1:aa:44:19:9b:37:e4:57:17:
91:0f:b3:36:13:89:45:7b:aa:44:32:ff:92:83:f7:
71:bd:1a:1e:80:26:00:1d:79:8b:b0:d8:e0:88:74:
a0:eb:4b:5a:a6:b7:99:c9:78:56:23:df:0b:7e:36:
24:0d:d1:61:0c:de:7c:92:54:c1:74:c9:39:dd:c8:
24:b5:68:77:db:0c:01:54:51:ba:4c:27:ff:ec:8a:
63:35:79:6f:01:c8:73:48:dc:60:48:73:7a:7f:61:
79:4e:93:b2:c4:a8:fc:f4:f2:f9:05:d6:67:19:09:
67:55:8c:77:f5:90:b8:53:af:c4:60:94:3d:60:fb:
57:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:78:CF:DC:09:F6:6C:95:3B:ED:7A:68:01:17:DD:C3:DA:30:37:51
X509v3 Authority Key Identifier:
keyid:8F:7F:46:47:C8:89:DA:80:17:AA:2E:59:0B:94:85:8E:4E:B8:B3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j39GR8iJ2oAXqi5ZC5SFjk64s2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/2ba70c-2251-48b1-9edb-2f9d69e62531/1/tXjP3An2bJU77XpoARfdw9owN1E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/2ba70c-2251-48b1-9edb-2f9d69e62531/1/j39GR8iJ2oAXqi5ZC5SFjk64s2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.76.107.0/24
IPv6:
2a11:d00::/32
Signature Algorithm: sha256WithRSAEncryption
6d:08:d5:d3:ab:ac:f7:c9:5e:1e:ba:06:dc:a9:5a:7d:f0:d6:
9e:91:e7:95:b0:b5:25:06:3d:72:e2:99:87:39:b2:fa:9d:8f:
63:06:5c:23:8f:05:a9:1c:ce:a4:10:38:04:9b:87:1e:5f:09:
58:7d:1d:f1:00:49:8e:3b:ed:9c:ad:d7:3b:ec:0f:0d:4e:7c:
42:7c:8c:a6:ba:d5:6f:d5:a0:b0:a9:2b:30:1f:88:05:1f:38:
e3:b4:41:1e:62:3d:d1:67:3e:34:74:73:1b:98:87:d9:4d:1a:
2b:f9:4a:e3:c7:b5:a9:72:0f:73:3a:19:1b:c6:55:e2:9c:d9:
9a:23:6e:fe:d1:81:48:e3:d1:88:93:fa:da:5c:a4:4f:f0:23:
cd:54:aa:d2:9c:45:90:b7:56:7c:23:d0:34:b3:0d:72:c4:e2:
d0:f1:85:e0:93:60:fe:1b:bc:4c:cb:b9:c1:79:fe:a0:c3:8b:
13:18:bf:54:91:90:c1:24:5e:e4:6b:1b:1b:c3:0d:2f:54:fa:
ec:65:db:37:8e:84:61:21:ac:6a:1a:62:58:75:8e:be:c0:cc:
34:fc:74:a2:68:df:f4:8b:7f:a9:33:76:fa:eb:44:ad:c8:0b:
3d:43:c4:d7:3f:93:72:01:97:3f:ce:72:f8:68:91:e2:a7:1c:
fd:4d:96:55
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAaDS2pFuMsXqeSpMrImGmC5YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmN2Y0NjQ3Yzg4OWRhODAxN2FhMmU1OTBiOTQ4NThlNGVi
OGIzNmIwHhcNMjYwOTI0MDk1ODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNTc4Y2ZkYzA5ZjY2Yzk1M2JlZDdhNjgwMTE3ZGRjM2RhMzAzNzUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSlW7BqsuCcVTFGuiBqCLDE2meYf
WerGlIUegqU4Wcs8rgfiLIlJGkMf7OjNydnc7kfdaCnlnFie6S2G5/f3tq17eIMJ
MaGm4r3Ncpi8C7zVhEPIpBd5gb/xvQZyR9JqozvonH29Urmse2cdWBe6mSk2rcJh
YhBAcBzVZHHhqkQZmzfkVxeRD7M2E4lFe6pEMv+Sg/dxvRoegCYAHXmLsNjgiHSg
60tapreZyXhWI98LfjYkDdFhDN58klTBdMk53cgktWh32wwBVFG6TCf/7IpjNXlv
AchzSNxgSHN6f2F5TpOyxKj89PL5BdZnGQlnVYx39ZC4U6/EYJQ9YPtXUwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFLV4z9wJ9myVO+16aAEX3cPaMDdRMB8GA1UdIwQY
MBaAFI9/RkfIidqAF6ouWQuUhY5OuLNrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajM5R1I4aUoyb0FYcWk1WkM1U0ZqazY0czJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8yYmE3MGMtMjI1MS00OGIxLTllZGIt
MmY5ZDY5ZTYyNTMxLzEvdFhqUDNBbjJiSlU3N1hwb0FSZmR3OW93TjFFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC8yYmE3MGMtMjI1MS00OGIxLTllZGItMmY5ZDY5ZTYyNTMx
LzEvajM5R1I4aUoyb0FYcWk1WkM1U0ZqazY0czJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAwkxrMA0E
AgACMAcDBQAqEQ0AMA0GCSqGSIb3DQEBCwUAA4IBAQBtCNXTq6z3yV4eugbcqVp9
8NaekeeVsLUlBj1y4pmHObL6nY9jBlwjjwWpHM6kEDgEm4ceXwlYfR3xAEmOO+2c
rdc77A8NTnxCfIymutVv1aCwqSswH4gFHzjjtEEeYj3RZz40dHMbmIfZTRor+Urj
x7Wpcg9zOhkbxlXinNmaI27+0YFI49GIk/raXKRP8CPNVKrSnEWQt1Z8I9A0sw1y
xOLQ8YXgk2D+G7xMy7nBef6gw4sTGL9UkZDBJF7kaxsbww0vVPrsZds3joRhIaxq
GmJYdY6+wMw0/HSiaN/0i3+pM3b660StyAs9Q8TXP5NyAZc/znL4aJHipxz9TZZV
-----END CERTIFICATE-----
Generated at Thu Nov 5 19:30:38 2026 by rpki-client