Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/juIzgP22NEhGAXovD29zwJrX41Y.roa
File: juIzgP22NEhGAXovD29zwJrX41Y.roa (raw, json)
Hash identifier: vNr3Wvl+Q27Ly1Qyx02MgGusCAGDQTMRZd+2QHUZJ4w=
Subject key identifier: 8E:E2:33:80:FD:B6:34:48:46:01:7A:2F:0F:6F:73:C0:9A:D7:E3:56
Certificate issuer: /CN=826605b4d27f13968e8794e6ef091223748817d8
Certificate serial: 01A0E7E8476D02BF48B0B0FBA111CFCB28D4
Authority key identifier: 82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/juIzgP22NEhGAXovD29zwJrX41Y.roa
Signing time: Mon 28 Sep 2026 12:05:54 +0000
ROA not before: Mon 28 Sep 2026 12:05:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48806
IP address blocks: 168.199.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 15:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:e8:47:6d:02:bf:48:b0:b0:fb:a1:11:cf:cb:28:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=826605b4d27f13968e8794e6ef091223748817d8
Validity
Not Before: Sep 28 12:05:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8ee23380fdb6344846017a2f0f6f73c09ad7e356
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:09:c8:cf:59:10:bd:99:3d:aa:a7:a5:f6:8d:
58:c5:06:f6:cb:91:33:c3:e1:14:98:c1:1f:51:ad:
a3:1f:10:1b:f3:11:fd:ea:bc:ca:bf:df:ea:fc:61:
59:3f:10:25:7d:8e:e6:a6:ab:65:e6:87:af:71:c0:
26:54:b1:c7:47:c6:37:00:83:bb:22:c7:c7:37:c3:
8b:05:25:a5:3b:1e:f2:b3:3d:cc:f6:ae:91:b1:1a:
54:f7:15:73:28:e9:ea:cd:b5:09:8c:3f:9a:08:29:
0f:3f:b9:74:1b:56:a7:c6:2c:53:d0:ae:be:a6:2c:
bb:52:66:2b:34:91:23:2c:fb:6a:b8:5b:d1:5c:75:
e0:c4:49:3b:37:35:cb:68:10:82:5d:4d:b8:6a:8c:
f4:76:f6:4d:76:9d:41:45:90:32:dc:77:23:87:bf:
c0:24:bc:31:ee:a9:56:d8:67:dd:cd:2e:fe:71:19:
6f:86:96:f0:ab:56:8f:c7:5d:70:19:77:6f:3b:59:
c8:fa:39:43:51:31:c6:fa:e1:62:56:ab:97:8a:74:
8d:3e:d8:85:d6:49:9c:d3:c2:44:99:00:87:d6:ad:
09:81:2f:be:d9:39:d9:3a:a4:f1:c0:ab:be:9a:07:
7d:38:f9:61:a6:f5:50:72:7d:b6:9f:49:7e:78:3f:
3d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:E2:33:80:FD:B6:34:48:46:01:7A:2F:0F:6F:73:C0:9A:D7:E3:56
X509v3 Authority Key Identifier:
keyid:82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/juIzgP22NEhGAXovD29zwJrX41Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.199.27.0/24
Signature Algorithm: sha256WithRSAEncryption
78:27:c7:85:0a:c7:51:62:76:3c:41:dc:19:82:62:b2:3b:67:
43:82:4a:8f:02:b8:a6:98:40:5b:19:2f:4d:32:14:af:1b:f3:
d3:8f:59:f8:b0:ee:f3:46:f6:df:1e:38:c6:a4:bd:59:5c:7b:
2d:74:e0:2d:d5:8b:a4:82:a9:87:85:10:6b:f1:72:68:ea:41:
d7:24:ae:17:06:39:0c:10:17:04:f6:25:b7:79:8c:58:e8:d0:
cc:4c:01:66:ca:73:bd:cc:37:51:d6:32:62:18:52:25:e1:d3:
f4:6f:4a:5e:76:73:40:be:80:7c:bc:25:c4:03:30:7f:f6:69:
7b:67:cd:e5:07:17:40:d4:f9:a2:f3:d1:75:3b:d1:51:94:ae:
74:f9:7d:4e:40:88:ad:24:22:8c:05:eb:7d:2f:2f:9a:a8:60:
ab:b2:eb:98:d4:3f:41:08:5c:df:f3:16:8b:36:fb:fc:7a:3d:
29:60:ae:ec:83:51:e5:4d:2b:7b:6c:50:46:61:84:9f:b7:91:
4e:52:00:b9:a2:15:82:ec:21:73:5e:0d:fc:5d:31:83:db:fc:
93:38:bb:8d:25:42:b0:a5:24:c1:ec:ac:2a:57:e8:5d:98:64:
42:c1:9c:e7:0c:df:29:95:1d:fb:6a:09:6e:d5:7a:e4:42:4a:
7a:b5:13:85
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaDn6EdtAr9IsLD7oRHPyyjUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyNjYwNWI0ZDI3ZjEzOTY4ZTg3OTRlNmVmMDkxMjIzNzQ4
ODE3ZDgwHhcNMjYwOTI4MTIwNTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZWUyMzM4MGZkYjYzNDQ4NDYwMTdhMmYwZjZmNzNjMDlhZDdlMzU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgnIz1kQvZk9qqel9o1YxQb2y5Ez
w+EUmMEfUa2jHxAb8xH96rzKv9/q/GFZPxAlfY7mpqtl5oevccAmVLHHR8Y3AIO7
IsfHN8OLBSWlOx7ysz3M9q6RsRpU9xVzKOnqzbUJjD+aCCkPP7l0G1anxixT0K6+
piy7UmYrNJEjLPtquFvRXHXgxEk7NzXLaBCCXU24aoz0dvZNdp1BRZAy3Hcjh7/A
JLwx7qlW2GfdzS7+cRlvhpbwq1aPx11wGXdvO1nI+jlDUTHG+uFiVquXinSNPtiF
1kmc08JEmQCH1q0JgS++2TnZOqTxwKu+mgd9OPlhpvVQcn22n0l+eD895wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFI7iM4D9tjRIRgF6Lw9vc8Ca1+NWMB8GA1UdIwQY
MBaAFIJmBbTSfxOWjoeU5u8JEiN0iBfYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ21ZRnROSl9FNWFPaDVUbTd3a1NJM1NJRjlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9mYmNjMzItMzNjOC00MWZmLTg5ZmEt
MmQxOTE4YmExYzBlLzEvanVJemdQMjJORWhHQVhvdkQyOXp3SnJYNDFZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny9mYmNjMzItMzNjOC00MWZmLTg5ZmEtMmQxOTE4YmExYzBl
LzEvZ21ZRnROSl9FNWFPaDVUbTd3a1NJM1NJRjlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqMcbMA0G
CSqGSIb3DQEBCwUAA4IBAQB4J8eFCsdRYnY8QdwZgmKyO2dDgkqPArimmEBbGS9N
MhSvG/PTj1n4sO7zRvbfHjjGpL1ZXHstdOAt1YukgqmHhRBr8XJo6kHXJK4XBjkM
EBcE9iW3eYxY6NDMTAFmynO9zDdR1jJiGFIl4dP0b0pednNAvoB8vCXEAzB/9ml7
Z83lBxdA1Pmi89F1O9FRlK50+X1OQIitJCKMBet9Ly+aqGCrsuuY1D9BCFzf8xaL
Nvv8ej0pYK7sg1HlTSt7bFBGYYSft5FOUgC5ohWC7CFzXg38XTGD2/yTOLuNJUKw
pSTB7KwqV+hdmGRCwZznDN8plR37aglu1XrkQkp6tROF
-----END CERTIFICATE-----
Generated at Sun Oct 18 23:34:53 2026 by rpki-client