Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/J6-Cc4NWO6ccHc-jz_TXUtwpkRw.roa
File: J6-Cc4NWO6ccHc-jz_TXUtwpkRw.roa (raw, json)
Hash identifier: B2siFLp0M8HWVkio4t64n/1XBr5g9nYykLn0BL2yQr4=
Subject key identifier: 27:AF:82:73:83:56:3B:A7:1C:1D:CF:A3:CF:F4:D7:52:DC:29:91:1C
Certificate issuer: /CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Certificate serial: 01A0ED6B2E50B1EA5AB479548E38F220CE5C
Authority key identifier: 65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/J6-Cc4NWO6ccHc-jz_TXUtwpkRw.roa
Signing time: Tue 29 Sep 2026 13:46:59 +0000
ROA not before: Tue 29 Sep 2026 13:46:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25198
IP address blocks: 213.182.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 11:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ed:6b:2e:50:b1:ea:5a:b4:79:54:8e:38:f2:20:ce:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Validity
Not Before: Sep 29 13:46:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=27af827383563ba71c1dcfa3cff4d752dc29911c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c6:81:d0:17:81:be:27:fd:f5:54:9b:93:04:
f6:7e:3b:dd:b5:e9:e4:b5:05:fd:cc:ad:93:ea:68:
27:da:10:78:9e:3a:11:8d:a7:e7:95:a5:fe:2b:b0:
e1:af:5e:3e:10:30:d5:fc:32:19:11:d0:ed:08:a4:
1e:c8:a1:85:4b:51:4b:83:ae:59:20:39:e7:39:f4:
f8:a1:c4:b9:42:07:50:f9:2c:49:5f:5a:d6:0c:a4:
a6:b1:3f:94:26:71:10:24:75:d7:a6:4f:b0:43:1a:
41:e8:80:67:d0:2c:8e:69:29:b6:46:1b:e2:96:fd:
39:a3:0d:c9:23:7b:9b:76:a8:eb:25:3e:d7:52:4a:
68:27:14:58:c8:56:9e:fe:b0:ed:b1:f2:b6:7d:02:
89:bd:5e:20:d1:b5:e5:03:03:32:7a:f0:68:dc:72:
63:ad:8b:da:5f:9d:cf:3a:6f:ae:f5:a6:bd:45:66:
a0:ce:b2:71:85:46:52:70:e8:e9:2c:7b:bd:d6:2c:
91:8d:a9:bd:28:78:ff:12:ec:26:48:e0:cd:b1:6b:
eb:3e:ab:93:ba:09:3a:9b:54:90:07:5b:a9:4d:b7:
de:59:28:d4:32:c4:7a:0a:71:0d:c1:10:12:d2:84:
e1:fd:b0:37:87:94:09:b1:1e:f1:ee:22:88:49:89:
fc:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:AF:82:73:83:56:3B:A7:1C:1D:CF:A3:CF:F4:D7:52:DC:29:91:1C
X509v3 Authority Key Identifier:
keyid:65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/J6-Cc4NWO6ccHc-jz_TXUtwpkRw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.182.203.0/24
Signature Algorithm: sha256WithRSAEncryption
56:45:cc:59:07:4b:67:4e:c7:a3:c7:85:cb:ff:8f:73:de:b0:
d4:7b:f1:af:da:d0:bb:11:41:77:c9:7a:b1:25:5d:a4:1f:ab:
73:41:82:aa:cc:3a:eb:d1:9a:10:2b:f9:45:1f:1a:b0:13:cb:
83:f9:0f:3a:a4:cf:3e:5f:0f:7f:b1:25:9e:4a:3c:cc:24:c8:
88:5c:1e:88:0d:00:72:f2:d2:b7:5d:19:00:0b:3b:fe:0b:84:
af:25:ff:88:c3:2b:95:53:a7:54:3d:6d:c4:22:bf:f4:b2:1e:
17:95:eb:c0:dd:f6:bc:6e:23:3e:ef:ee:1a:c5:1d:04:4d:fa:
f8:de:37:13:ff:16:88:4b:e7:a2:94:17:4a:e1:23:0c:d6:47:
0f:e5:55:66:94:f0:4c:4b:37:33:45:db:a3:f4:06:26:68:8d:
6a:f6:83:cb:05:8d:40:ec:4f:dc:21:be:1f:29:94:84:21:cf:
5b:55:56:99:20:a2:f4:74:e3:44:e2:d3:7c:e8:29:19:93:e4:
bb:50:b8:04:b7:87:33:95:23:61:a8:b2:0e:37:33:7e:5f:00:
dc:a7:64:54:89:dc:c9:91:52:bc:40:80:a8:44:3f:0b:f1:dd:
39:c5:a4:0d:25:93:1c:e3:17:4c:45:b2:8c:5a:c1:9b:38:c4:
32:94:30:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 19:43:46 2026 by rpki-client