Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/9e16c1-310f-410c-b341-41d82329f26d/1/RJaMcUy1HQkUAjmIoPgafvQ5B6Y.roa
File: RJaMcUy1HQkUAjmIoPgafvQ5B6Y.roa (raw, json)
Hash identifier: s5FHVSFxCeBSbP8NsMk3I+mCIJvgXgsbwsde/huwpmY=
Subject key identifier: 44:96:8C:71:4C:B5:1D:09:14:02:39:88:A0:F8:1A:7E:F4:39:07:A6
Certificate issuer: /CN=c24d5bd3ceeaab0786ce151a3178dadc107bf280
Certificate serial: 019F87C26F6862F2FD66575F7CE12BAB4578
Authority key identifier: C2:4D:5B:D3:CE:EA:AB:07:86:CE:15:1A:31:78:DA:DC:10:7B:F2:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wk1b087qqweGzhUaMXja3BB78oA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/9e16c1-310f-410c-b341-41d82329f26d/1/RJaMcUy1HQkUAjmIoPgafvQ5B6Y.roa
Signing time: Wed 22 Jul 2026 02:58:14 +0000
ROA not before: Wed 22 Jul 2026 02:58:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205714
IP address blocks: 86.32.0.0/15 maxlen: 15
86.32.80.0/21 maxlen: 21
86.32.88.0/21 maxlen: 21
86.32.96.0/21 maxlen: 21
86.32.104.0/21 maxlen: 21
86.32.112.0/21 maxlen: 21
86.32.124.0/24 maxlen: 24
86.32.125.0/24 maxlen: 24
86.33.0.0/21 maxlen: 21
86.33.8.0/21 maxlen: 21
86.33.16.0/21 maxlen: 21
86.33.24.0/21 maxlen: 21
86.33.32.0/21 maxlen: 21
86.33.40.0/21 maxlen: 21
2a10:5700::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/9e16c1-310f-410c-b341-41d82329f26d/1/wk1b087qqweGzhUaMXja3BB78oA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/9e16c1-310f-410c-b341-41d82329f26d/1/wk1b087qqweGzhUaMXja3BB78oA.mft
rsync://rpki.ripe.net/repository/DEFAULT/wk1b087qqweGzhUaMXja3BB78oA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:87:c2:6f:68:62:f2:fd:66:57:5f:7c:e1:2b:ab:45:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c24d5bd3ceeaab0786ce151a3178dadc107bf280
Validity
Not Before: Jul 22 02:58:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=44968c714cb51d0914023988a0f81a7ef43907a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:85:0f:c7:1f:9e:dd:c8:85:e8:25:02:54:c2:
c0:93:1b:4c:f1:e7:65:18:bf:84:e8:c3:37:b3:0b:
fa:80:e3:81:cc:7a:c6:72:f8:c7:ca:e8:a9:d2:2a:
92:bd:72:b1:8b:5a:b1:0f:de:1d:be:9d:58:e3:84:
76:2b:03:a3:e4:89:03:56:97:63:ed:2d:a8:a7:6f:
2a:a0:c8:e7:5b:b4:b3:d6:ac:a6:0c:05:7b:06:fa:
15:98:da:a1:2a:dd:e4:17:eb:6e:2b:c8:10:b6:ae:
0f:bc:00:01:a3:e8:80:43:12:87:f3:10:10:35:c9:
33:4a:5c:7c:90:5e:62:b9:de:68:32:35:94:32:21:
30:bf:2a:47:7d:8b:22:1b:6a:05:54:d3:5a:b2:14:
a6:11:6c:4d:67:50:b4:fb:7f:a7:81:56:13:e4:e2:
34:01:c9:89:00:09:14:3a:10:f4:40:15:29:2d:9a:
c9:8e:4c:2b:fe:5b:03:01:e6:13:99:92:4e:99:de:
d3:85:c4:9b:14:3c:ff:2b:18:94:42:f9:b4:99:70:
3c:31:46:2e:c1:8c:94:74:bb:af:92:86:1a:07:4c:
92:af:f7:bd:ca:37:be:44:8e:0f:dd:8e:83:ea:8c:
91:61:01:b5:48:58:67:d1:07:74:20:85:35:6e:f8:
4e:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:96:8C:71:4C:B5:1D:09:14:02:39:88:A0:F8:1A:7E:F4:39:07:A6
X509v3 Authority Key Identifier:
keyid:C2:4D:5B:D3:CE:EA:AB:07:86:CE:15:1A:31:78:DA:DC:10:7B:F2:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wk1b087qqweGzhUaMXja3BB78oA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/9e16c1-310f-410c-b341-41d82329f26d/1/RJaMcUy1HQkUAjmIoPgafvQ5B6Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/9e16c1-310f-410c-b341-41d82329f26d/1/wk1b087qqweGzhUaMXja3BB78oA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.32.0.0/15
IPv6:
2a10:5700::/29
Signature Algorithm: sha256WithRSAEncryption
44:2e:28:71:84:93:48:fc:12:0a:67:f7:98:d1:af:17:52:d9:
de:cd:8e:6c:7b:e0:2f:c3:62:6b:98:26:20:b0:72:5f:5a:d2:
2a:69:9a:ee:30:69:4e:bf:9f:03:f7:b8:a3:30:a3:7e:45:0a:
1c:bb:5f:eb:1f:1e:f0:9a:6d:74:93:6d:76:f9:c7:9d:00:88:
44:57:d3:70:fc:b9:e9:e1:4a:2d:6a:62:19:e2:e3:8d:34:d4:
2d:ec:9d:0f:53:10:9f:af:f2:a5:f5:bb:ad:03:fd:b6:37:78:
e3:c7:c5:6a:05:1b:30:e2:97:07:46:8f:12:86:87:5d:da:82:
31:0b:4b:bd:74:91:10:7e:a3:9c:b4:5f:89:89:ad:00:c9:3f:
71:ac:b2:9e:72:88:22:52:bc:a9:31:61:f4:3f:e6:b6:54:24:
8e:37:06:e2:1b:32:23:bc:84:98:bd:d0:d4:e3:c3:b5:41:39:
ff:00:63:3e:83:89:67:46:68:72:3b:1a:e0:85:1c:ab:7a:26:
cd:74:29:06:0b:6f:0d:e6:d8:e5:81:91:ba:e6:4b:d6:b8:82:
ff:50:97:36:2b:99:eb:ae:d5:27:df:c5:e9:6e:8f:49:e5:f8:
a5:35:49:51:84:80:f6:f6:0e:2a:44:9c:28:92:4c:01:f7:e0:
3e:5e:f4:51
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Jul 27 05:38:40 2026 by rpki-client