Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/mS8tnbA8YK7l-MbOUY5q-8ZOThg.roa
File: mS8tnbA8YK7l-MbOUY5q-8ZOThg.roa (raw, json)
Hash identifier: eZEcq7z1/SIiSQ1+v1fAeWHe9SlknoEdloBfTp8Rfac=
Subject key identifier: 99:2F:2D:9D:B0:3C:60:AE:E5:F8:C6:CE:51:8E:6A:FB:C6:4E:4E:18
Certificate issuer: /CN=ada25aafe3a9870e9524afa0265987ed5a5a4da3
Certificate serial: 019FB8D24426A29A4B223A190CB0F852B911
Authority key identifier: AD:A2:5A:AF:E3:A9:87:0E:95:24:AF:A0:26:59:87:ED:5A:5A:4D:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/mS8tnbA8YK7l-MbOUY5q-8ZOThg.roa
Signing time: Fri 31 Jul 2026 15:36:55 +0000
ROA not before: Fri 31 Jul 2026 15:36:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 135330
IP address blocks: 139.28.168.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 10:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b8:d2:44:26:a2:9a:4b:22:3a:19:0c:b0:f8:52:b9:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ada25aafe3a9870e9524afa0265987ed5a5a4da3
Validity
Not Before: Jul 31 15:36:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=992f2d9db03c60aee5f8c6ce518e6afbc64e4e18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:14:12:3c:89:ab:96:c0:23:d1:8b:d1:69:e6:
6c:ce:7e:76:18:ca:85:67:28:96:fb:c8:7f:e7:19:
4a:e6:8d:9d:99:a9:05:0a:71:84:6c:df:e6:20:64:
69:15:4f:47:c5:4e:12:be:7b:03:08:90:fa:3c:b8:
82:20:1f:84:80:ae:a3:80:32:fc:02:b4:c7:0c:ec:
fe:8b:3c:19:a7:2f:86:bb:81:c8:cc:82:ae:a3:b2:
f1:57:b8:49:93:e8:90:90:3f:99:0a:fa:92:6b:9a:
37:96:87:3f:8d:12:24:85:90:61:ab:37:d8:7b:c5:
6f:10:a0:26:c6:01:b4:87:91:3a:41:3d:da:05:92:
9a:68:a4:2a:ee:63:94:42:2d:99:1a:32:a1:2a:c3:
75:dc:36:48:19:af:06:f4:2f:d0:9d:2b:93:3f:76:
f4:bf:46:75:06:b8:72:44:93:f3:ff:c0:17:ce:75:
ef:b6:ed:e6:26:ce:18:0b:75:53:f3:ed:ee:d0:6b:
2d:9b:83:20:2b:9f:4c:ed:8b:fd:01:79:08:4f:82:
3c:f1:8c:30:c5:2d:53:7e:96:0d:b0:54:10:9f:2d:
4c:ea:ce:fb:7b:c1:21:eb:f4:ad:83:99:c9:42:76:
8d:6b:da:f3:e4:4b:57:cd:14:6e:ee:ca:15:87:a0:
8a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:2F:2D:9D:B0:3C:60:AE:E5:F8:C6:CE:51:8E:6A:FB:C6:4E:4E:18
X509v3 Authority Key Identifier:
keyid:AD:A2:5A:AF:E3:A9:87:0E:95:24:AF:A0:26:59:87:ED:5A:5A:4D:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/mS8tnbA8YK7l-MbOUY5q-8ZOThg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.28.168.0/22
Signature Algorithm: sha256WithRSAEncryption
83:f3:ee:14:2c:c8:b3:35:9d:03:14:f6:c1:29:5e:87:28:01:
30:85:85:03:73:c7:a0:0b:06:21:a8:f4:71:16:c5:3e:bf:d3:
15:7f:d6:9e:59:d0:84:b3:41:94:b7:cf:98:1c:d3:63:42:db:
fc:cf:43:53:3b:c2:be:e3:53:ac:c3:d4:7a:f7:b2:33:f5:75:
36:ae:1f:21:9c:28:96:97:64:ae:51:04:51:88:1b:9e:0b:31:
10:07:6c:61:aa:f7:5d:b2:48:b6:44:78:98:da:7d:b7:b3:78:
03:ef:b6:1c:15:a5:62:13:40:de:ed:62:c2:27:08:56:2f:2e:
b6:89:39:82:fc:a9:2e:3f:70:1b:b5:e9:02:1d:1f:32:b7:ff:
f6:c6:34:7c:f5:55:ba:c6:cf:fb:10:02:1a:6c:21:86:99:da:
d3:2e:99:5e:c2:90:76:7d:76:99:98:a6:23:d8:e2:c1:f2:e0:
e7:94:81:a1:b3:3d:04:04:ca:8f:ab:13:c7:ab:d9:6e:19:b8:
83:5f:4e:bb:e4:98:62:51:54:cf:44:15:40:b5:18:17:dc:8b:
bb:79:41:dc:6d:9d:da:7e:40:58:ad:de:0c:aa:0f:be:8b:b3:
73:bc:41:cc:34:a6:9e:cb:40:7a:09:ea:0c:62:eb:90:05:d6:
07:91:99:b4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ+40kQmoppLIjoZDLD4UrkRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkYTI1YWFmZTNhOTg3MGU5NTI0YWZhMDI2NTk4N2VkNWE1
YTRkYTMwHhcNMjYwNzMxMTUzNjU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OTJmMmQ5ZGIwM2M2MGFlZTVmOGM2Y2U1MThlNmFmYmM2NGU0ZTE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxQSPImrlsAj0YvRaeZszn52GMqF
ZyiW+8h/5xlK5o2dmakFCnGEbN/mIGRpFU9HxU4SvnsDCJD6PLiCIB+EgK6jgDL8
ArTHDOz+izwZpy+Gu4HIzIKuo7LxV7hJk+iQkD+ZCvqSa5o3loc/jRIkhZBhqzfY
e8VvEKAmxgG0h5E6QT3aBZKaaKQq7mOUQi2ZGjKhKsN13DZIGa8G9C/QnSuTP3b0
v0Z1BrhyRJPz/8AXznXvtu3mJs4YC3VT8+3u0Gstm4MgK59M7Yv9AXkIT4I88Yww
xS1TfpYNsFQQny1M6s77e8Eh6/Stg5nJQnaNa9rz5EtXzRRu7soVh6CKowIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJkvLZ2wPGCu5fjGzlGOavvGTk4YMB8GA1UdIwQY
MBaAFK2iWq/jqYcOlSSvoCZZh+1aWk2jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmFKYXItT3BodzZWSkstZ0psbUg3VnBhVGFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS84MTBkMjQtYWNiZS00Y2IyLTlhYzUt
OWQ1ODc1ZDg2MzczLzEvbVM4dG5iQThZSzdsLU1iT1VZNXEtOFpPVGhnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS84MTBkMjQtYWNiZS00Y2IyLTlhYzUtOWQ1ODc1ZDg2Mzcz
LzEvcmFKYXItT3BodzZWSkstZ0psbUg3VnBhVGFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCixyoMA0G
CSqGSIb3DQEBCwUAA4IBAQCD8+4ULMizNZ0DFPbBKV6HKAEwhYUDc8egCwYhqPRx
FsU+v9MVf9aeWdCEs0GUt8+YHNNjQtv8z0NTO8K+41Osw9R697Iz9XU2rh8hnCiW
l2SuUQRRiBueCzEQB2xhqvddski2RHiY2n23s3gD77YcFaViE0De7WLCJwhWLy62
iTmC/KkuP3AbtekCHR8yt//2xjR89VW6xs/7EAIabCGGmdrTLplewpB2fXaZmKYj
2OLB8uDnlIGhsz0EBMqPqxPHq9luGbiDX0675JhiUVTPRBVAtRgX3Iu7eUHcbZ3a
fkBYrd4Mqg++i7NzvEHMNKaey0B6CeoMYuuQBdYHkZm0
-----END CERTIFICATE-----
Generated at Thu Sep 10 17:28:10 2026 by rpki-client