Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8f/a97889-1960-43c7-abd0-d52c8b2b56b6/1/rjxrBjFMOjbG5b4gAfbQtHaK44w.roa
File: rjxrBjFMOjbG5b4gAfbQtHaK44w.roa (raw, json)
Hash identifier: 3TKuTS71uwFUfwxCc5YEgGiYN12z6Lwh9pcmYq/oFX8=
Subject key identifier: AE:3C:6B:06:31:4C:3A:36:C6:E5:BE:20:01:F6:D0:B4:76:8A:E3:8C
Certificate issuer: /CN=9fc76d127ab067959964a2455f4ad4e7542d3bfe
Certificate serial: 01A1398B4E9BA84CF43EAFB08A6725B9F059
Authority key identifier: 9F:C7:6D:12:7A:B0:67:95:99:64:A2:45:5F:4A:D4:E7:54:2D:3B:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n8dtEnqwZ5WZZKJFX0rU51QtO_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/a97889-1960-43c7-abd0-d52c8b2b56b6/1/rjxrBjFMOjbG5b4gAfbQtHaK44w.roa
Signing time: Wed 14 Oct 2026 08:33:13 +0000
ROA not before: Wed 14 Oct 2026 08:33:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34564
IP address blocks: 194.126.228.0/24 maxlen: 24
2001:67c:2310::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/a97889-1960-43c7-abd0-d52c8b2b56b6/1/n8dtEnqwZ5WZZKJFX0rU51QtO_4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/a97889-1960-43c7-abd0-d52c8b2b56b6/1/n8dtEnqwZ5WZZKJFX0rU51QtO_4.mft
rsync://rpki.ripe.net/repository/DEFAULT/n8dtEnqwZ5WZZKJFX0rU51QtO_4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:39:8b:4e:9b:a8:4c:f4:3e:af:b0:8a:67:25:b9:f0:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fc76d127ab067959964a2455f4ad4e7542d3bfe
Validity
Not Before: Oct 14 08:33:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ae3c6b06314c3a36c6e5be2001f6d0b4768ae38c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:29:db:48:44:56:ef:b6:5e:25:80:f9:cd:88:
67:46:2f:8a:d8:9d:a8:0a:e6:b9:b3:d3:39:09:9f:
58:49:f0:23:af:69:a9:08:84:57:17:aa:2b:dc:90:
08:41:8c:56:d2:c6:84:0c:e5:ea:e9:37:09:e1:ec:
b8:da:8a:38:93:d2:7c:f5:d6:12:4b:85:92:a5:66:
a7:e1:dc:91:f5:c3:a9:da:98:99:e5:89:b6:8f:3d:
1b:81:24:63:d4:47:09:5e:9a:8b:7c:e9:88:57:15:
65:43:cc:53:2e:91:1c:b8:d0:a8:cb:b7:9f:b1:ba:
44:a5:fd:10:c1:cd:8b:f5:25:70:0e:9f:12:78:b4:
0b:f9:d3:cc:b1:8f:dd:e1:e9:30:3b:12:f5:eb:36:
32:18:fd:c8:75:19:9b:ff:65:c1:15:f1:35:d5:e4:
e5:0f:05:28:43:fd:52:3c:3b:60:b1:3e:5f:1f:16:
cd:54:e7:52:7f:5e:ba:5b:8f:b7:a6:39:2e:28:e1:
dd:bd:6d:52:42:06:33:3e:04:05:b0:7b:f8:f5:3c:
bd:de:22:08:67:5c:f5:06:28:e7:2a:6a:c2:fd:95:
98:67:de:0e:5c:aa:cc:5d:a5:e8:23:de:da:45:b6:
cf:ac:7c:7b:cd:94:cb:1f:5e:0b:f0:0f:2d:53:68:
6b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:3C:6B:06:31:4C:3A:36:C6:E5:BE:20:01:F6:D0:B4:76:8A:E3:8C
X509v3 Authority Key Identifier:
keyid:9F:C7:6D:12:7A:B0:67:95:99:64:A2:45:5F:4A:D4:E7:54:2D:3B:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n8dtEnqwZ5WZZKJFX0rU51QtO_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/a97889-1960-43c7-abd0-d52c8b2b56b6/1/rjxrBjFMOjbG5b4gAfbQtHaK44w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/a97889-1960-43c7-abd0-d52c8b2b56b6/1/n8dtEnqwZ5WZZKJFX0rU51QtO_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.126.228.0/24
IPv6:
2001:67c:2310::/48
Signature Algorithm: sha256WithRSAEncryption
8f:41:8c:05:b5:12:47:cd:95:10:55:ce:2e:37:a9:b6:1a:47:
62:f8:6f:f7:4c:7f:c2:b6:43:75:01:80:ea:4f:aa:1d:36:ec:
53:b3:e3:a0:99:f5:03:52:1d:9f:08:79:bc:4b:50:d1:d1:54:
06:6f:54:ee:61:fb:05:b7:8b:27:43:5b:91:60:77:c6:e6:c7:
89:03:39:df:c6:f8:f5:b6:97:7a:c2:95:90:7c:94:0c:23:30:
f4:0e:1a:72:1a:96:fb:f6:f9:ee:f3:8a:d3:84:1f:36:01:24:
d0:58:14:31:d4:4a:aa:c4:99:b5:ff:6e:f2:a3:16:f4:3a:89:
6c:dc:29:ae:d4:dc:96:62:df:02:d5:ba:29:40:4c:8e:08:6e:
44:62:6a:39:9b:7c:94:ac:7c:73:c9:31:9d:3c:a6:cb:bc:e7:
54:7c:49:0d:95:2b:cb:b4:7c:ed:81:7a:db:be:92:1f:4b:63:
46:8a:f5:b9:9a:24:08:1a:46:fd:4a:94:8e:8a:64:25:ea:2d:
a8:e8:af:7f:37:a8:4a:06:26:84:79:62:a1:06:ea:42:bb:22:
3c:dd:04:25:7c:fb:a5:61:12:5b:5d:92:c4:b6:af:ae:27:17:
78:e4:bd:ec:b0:3e:b5:88:43:88:cd:73:5f:6b:cf:83:af:f4:
a2:ad:a3:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 11:11:52 2026 by rpki-client