Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/J0R6VY3S2d3PrATNDiYjsxxU-1Q.roa
File: J0R6VY3S2d3PrATNDiYjsxxU-1Q.roa (raw, json)
Hash identifier: H6hEzBvZWFJA5RCrRzQKSdwuEbt6HoyUjOOv0Kg2Ucs=
Subject key identifier: 27:44:7A:55:8D:D2:D9:DD:CF:AC:04:CD:0E:26:23:B3:1C:54:FB:54
Certificate issuer: /CN=583d76051017d0afa915fcfb790a00f4667b0a88
Certificate serial: 019F98C857C5477719B816023DF993010E73
Authority key identifier: 58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/J0R6VY3S2d3PrATNDiYjsxxU-1Q.roa
Signing time: Sat 25 Jul 2026 10:18:14 +0000
ROA not before: Sat 25 Jul 2026 10:18:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42337
IP address blocks: 94.184.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.mft
rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:98:c8:57:c5:47:77:19:b8:16:02:3d:f9:93:01:0e:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=583d76051017d0afa915fcfb790a00f4667b0a88
Validity
Not Before: Jul 25 10:18:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=27447a558dd2d9ddcfac04cd0e2623b31c54fb54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c4:60:af:01:b2:71:42:bc:81:63:bf:51:87:
19:32:18:1d:91:ae:fb:70:4a:97:08:80:46:7f:42:
06:3b:c7:6b:fb:8a:8d:18:2f:31:30:d4:f3:e4:14:
7c:52:b6:e1:5a:89:ba:c9:c6:00:d6:39:85:fa:59:
8e:67:05:3a:c0:cc:45:d7:6a:9f:d0:87:6e:2a:73:
a0:43:84:37:72:78:ec:f9:69:b2:dd:c5:51:ec:b5:
a2:07:7e:b7:f9:17:5d:7b:28:8a:3a:b7:d0:8b:76:
52:1f:d9:4f:72:d3:2d:56:51:2a:cb:f7:81:65:4f:
d1:bb:37:71:2e:35:b5:24:0a:10:ee:2c:f2:bf:b7:
35:4e:fc:13:7f:af:74:5e:d8:77:f4:a9:9f:d3:29:
26:20:5f:cc:2c:99:c2:62:e5:1e:a7:ab:7f:b3:cf:
e0:97:7e:06:86:ba:8d:6a:d3:2a:d5:cc:08:28:5e:
43:c3:4c:08:8a:56:91:6f:07:68:68:90:18:6c:b0:
70:ff:a3:22:5c:3e:2c:79:e9:f1:dc:df:1c:ec:c0:
91:69:eb:f1:6b:aa:b4:8d:fb:2f:98:96:03:02:62:
73:1b:fb:d1:f3:39:0d:f6:4b:d2:17:57:a8:72:ff:
d6:c1:0c:cb:71:b6:7c:f6:16:6b:81:0f:6e:24:0a:
21:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:44:7A:55:8D:D2:D9:DD:CF:AC:04:CD:0E:26:23:B3:1C:54:FB:54
X509v3 Authority Key Identifier:
keyid:58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/J0R6VY3S2d3PrATNDiYjsxxU-1Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.184.33.0/24
Signature Algorithm: sha256WithRSAEncryption
98:d4:64:c1:b2:e0:e6:7c:24:ce:b6:19:72:3b:f6:44:d5:d6:
10:23:53:0a:48:87:38:09:b4:01:b0:2d:d3:ef:85:02:cd:06:
2d:b5:c0:03:55:f7:0c:eb:85:d7:5e:bb:88:28:64:8c:eb:28:
bf:e5:5b:d0:2b:8e:49:8d:89:11:b5:fc:f1:42:81:5d:45:25:
dd:cd:c2:e0:31:d2:1c:fb:37:27:ba:c3:05:72:22:f3:c6:50:
10:be:f7:3a:af:6f:4a:83:8f:20:15:bf:82:5a:db:e4:dd:83:
f6:0c:d0:f6:a8:8c:fe:40:c5:cf:59:d9:4b:2d:1a:61:8c:0f:
30:a6:d1:c0:1d:92:25:50:ee:6a:24:f6:f3:00:89:b4:d1:0e:
9c:19:37:1b:4d:fd:f0:3c:dd:de:cd:52:fa:8d:39:42:5f:ce:
bf:ae:99:8b:dd:79:ad:f9:7e:a4:41:97:77:e6:13:50:a5:7c:
0d:e7:56:bb:2b:e7:83:4b:98:1f:14:fd:12:26:a3:b1:48:b9:
f9:cc:09:6c:60:a8:54:5a:d0:54:7f:64:1a:98:bf:66:1c:4e:
e3:23:5c:45:4d:03:d3:20:25:6a:aa:9d:6b:f4:1b:2f:4b:09:
8e:ed:a4:e5:0c:8d:e6:08:65:75:9f:43:c3:23:ea:71:9f:64:
b2:f6:f1:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 08:56:59 2026 by rpki-client