Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/j5JmtvCUNBz8yPoDwZ_IjwbRZ90.roa
File: j5JmtvCUNBz8yPoDwZ_IjwbRZ90.roa (raw, json)
Hash identifier: dSVmMuka2P06pNunQJXxcpT1pN70Xq/atDn8/iHEiNE=
Subject key identifier: 8F:92:66:B6:F0:94:34:1C:FC:C8:FA:03:C1:9F:C8:8F:06:D1:67:DD
Certificate issuer: /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Certificate serial: 019F949B022FBC3724D8EFB2C8B8E5CB20AA
Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/j5JmtvCUNBz8yPoDwZ_IjwbRZ90.roa
Signing time: Fri 24 Jul 2026 14:50:14 +0000
ROA not before: Fri 24 Jul 2026 14:50:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48964
IP address blocks: 141.105.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft
rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:9b:02:2f:bc:37:24:d8:ef:b2:c8:b8:e5:cb:20:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Validity
Not Before: Jul 24 14:50:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8f9266b6f094341cfcc8fa03c19fc88f06d167dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a2:5e:c6:4f:f0:b8:67:7e:f9:2f:5d:e6:cc:
57:82:e9:73:96:ce:e5:f5:e1:0a:99:30:24:93:ff:
3e:cc:e5:33:46:7a:e2:42:53:87:34:4b:13:93:63:
a6:4e:4f:96:97:54:79:21:c7:5c:bf:6b:21:45:23:
04:43:02:2e:14:95:d6:40:68:80:9a:32:14:93:ef:
ed:cd:1f:39:60:be:e5:74:ba:b4:4e:2f:ea:06:c0:
a1:3e:54:d9:7b:42:f8:22:40:cb:da:c5:f6:03:95:
c3:8f:7a:22:9c:c7:bd:56:ce:fa:ab:6f:fd:19:55:
f7:8e:36:0d:6c:a4:1c:bc:8d:fa:b0:da:70:d2:e9:
7f:b9:42:dc:92:18:3f:d9:03:95:cf:af:d0:96:e9:
77:a1:5d:18:d5:69:d5:a9:27:f3:49:6d:72:ad:c3:
e4:0e:b8:8e:0c:5a:59:14:47:d8:9a:08:b8:9c:a8:
16:9d:3d:91:1b:12:1a:17:b0:39:cf:bf:3c:73:2c:
ed:0a:7e:78:ad:44:cf:a2:17:08:3c:1f:34:bc:5d:
d1:ba:fc:09:51:ee:0c:e7:e6:f1:99:ad:90:31:05:
ee:b8:1f:83:66:e8:0b:89:19:8f:4a:b1:ad:7b:09:
51:dc:de:e7:0d:90:0a:3e:5a:2c:1c:8b:90:47:19:
ae:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:92:66:B6:F0:94:34:1C:FC:C8:FA:03:C1:9F:C8:8F:06:D1:67:DD
X509v3 Authority Key Identifier:
keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/j5JmtvCUNBz8yPoDwZ_IjwbRZ90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.105.138.0/24
Signature Algorithm: sha256WithRSAEncryption
35:61:38:00:94:21:90:e7:04:63:bc:9f:d0:52:b1:8a:d8:36:
a2:06:78:62:81:92:c7:57:78:1d:b4:b9:45:01:07:f3:c9:f3:
70:cd:36:44:24:74:65:a1:f0:29:75:cb:7d:c3:46:19:80:1c:
62:5f:45:f0:f2:dc:6c:2c:58:a5:0a:88:09:4b:27:db:de:df:
a1:15:e9:c1:f9:1f:bb:70:30:52:b8:6c:c6:9e:61:c6:66:10:
c5:2c:08:82:c5:cc:91:d9:bd:f1:14:12:e3:66:c3:62:fd:d7:
19:b2:ed:29:90:60:67:06:c8:5c:6f:70:da:f7:42:4d:5c:21:
75:f2:e8:f8:e2:31:05:a4:b2:bd:5d:c6:f1:c2:41:5e:9c:5e:
dd:9c:70:44:da:cd:ae:21:9e:11:a2:7c:f7:03:81:1b:f8:4a:
52:21:7f:aa:24:ed:c1:8d:d1:83:39:1b:ca:3e:47:99:9e:fa:
5f:d9:90:c6:7a:cf:7b:9e:4f:7a:28:65:94:fe:4c:a1:d1:72:
45:2b:14:7b:76:37:f3:0b:64:6f:92:a5:eb:4f:e2:f5:e5:f3:
40:91:71:eb:13:21:7f:43:c8:a3:d7:dd:bd:c9:87:81:71:60:
93:4e:4c:52:1b:22:59:57:3c:b1:d2:6f:18:38:b7:22:72:5b:
1d:65:db:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 09:13:49 2026 by rpki-client