Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/a3fd8b-686b-4e6c-8b7b-4310c39b1f44/1/J1pVACF6PeMRaHASpAzEk72R1og.roa
File: J1pVACF6PeMRaHASpAzEk72R1og.roa (raw, json)
Hash identifier: w+tfbD6b+VC1EgseTOng/yA5kapR5uE7759IAX7+VLk=
Subject key identifier: 27:5A:55:00:21:7A:3D:E3:11:68:70:12:A4:0C:C4:93:BD:91:D6:88
Certificate issuer: /CN=f8525e412c6ae2b16cac39ecf288c2e2e6a75de2
Certificate serial: 019FDB632BC762E5A9784659C016CE2C3C1A
Authority key identifier: F8:52:5E:41:2C:6A:E2:B1:6C:AC:39:EC:F2:88:C2:E2:E6:A7:5D:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-FJeQSxq4rFsrDns8ojC4uanXeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/a3fd8b-686b-4e6c-8b7b-4310c39b1f44/1/J1pVACF6PeMRaHASpAzEk72R1og.roa
Signing time: Fri 07 Aug 2026 08:42:17 +0000
ROA not before: Fri 07 Aug 2026 08:42:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213966
IP address blocks: 86.107.108.0/23 maxlen: 23
185.188.13.0/24 maxlen: 24
2a01:fcc0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/a3fd8b-686b-4e6c-8b7b-4310c39b1f44/1/1-FJeQSxq4rFsrDns8ojC4uanXeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/a3fd8b-686b-4e6c-8b7b-4310c39b1f44/1/1-FJeQSxq4rFsrDns8ojC4uanXeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-FJeQSxq4rFsrDns8ojC4uanXeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:db:63:2b:c7:62:e5:a9:78:46:59:c0:16:ce:2c:3c:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8525e412c6ae2b16cac39ecf288c2e2e6a75de2
Validity
Not Before: Aug 7 08:42:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=275a5500217a3de311687012a40cc493bd91d688
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:1e:74:c3:f6:4e:20:cf:45:6d:c4:4d:89:48:
7a:3a:fe:cc:e2:d8:a8:b9:1a:db:0f:c5:39:9c:0c:
38:8e:01:1e:cf:76:00:77:c2:b8:a0:0f:d1:17:51:
fb:cd:cc:79:6f:e3:c2:f2:ce:24:ac:79:6b:c0:b1:
77:1d:ce:bf:cd:d0:9a:3a:29:0d:56:28:ad:4f:1b:
cc:05:00:30:bd:29:c0:c2:68:35:f4:19:12:7a:f3:
77:94:52:49:28:2c:81:f8:9c:b8:bb:19:c7:36:9d:
cd:07:01:64:89:15:ac:a2:5c:9b:4b:0f:e4:87:c6:
80:dc:32:e5:63:f0:ed:f0:f7:94:e5:7e:16:af:74:
0c:35:5c:5b:bc:e9:c2:38:66:f3:cb:e5:73:56:38:
86:45:ff:c1:61:9c:fd:06:b5:3f:83:21:fc:73:84:
d8:8d:80:1c:60:5a:e7:da:e2:a8:83:12:5a:df:d0:
b1:bc:c7:ef:3a:fe:c4:b7:7c:2b:b4:5e:02:95:ab:
88:5b:4a:a3:ff:16:91:c5:af:19:43:d8:69:34:00:
b0:88:2a:1f:1a:81:aa:b2:78:3f:31:99:d2:99:df:
c2:65:23:d0:2c:df:fa:eb:7b:fb:91:17:7c:9b:b6:
cb:23:46:b7:fd:94:9f:43:2b:12:21:66:17:4c:fc:
27:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:5A:55:00:21:7A:3D:E3:11:68:70:12:A4:0C:C4:93:BD:91:D6:88
X509v3 Authority Key Identifier:
keyid:F8:52:5E:41:2C:6A:E2:B1:6C:AC:39:EC:F2:88:C2:E2:E6:A7:5D:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-FJeQSxq4rFsrDns8ojC4uanXeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/a3fd8b-686b-4e6c-8b7b-4310c39b1f44/1/J1pVACF6PeMRaHASpAzEk72R1og.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/a3fd8b-686b-4e6c-8b7b-4310c39b1f44/1/1-FJeQSxq4rFsrDns8ojC4uanXeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.107.108.0/23
185.188.13.0/24
IPv6:
2a01:fcc0::/29
Signature Algorithm: sha256WithRSAEncryption
77:ff:f6:84:e3:2d:b0:95:21:91:83:51:c2:5d:5d:9e:39:c4:
3c:38:cf:a4:4f:ff:2f:52:d8:91:ae:fb:17:2a:d6:41:7c:71:
e9:86:a2:a5:23:f0:b3:8d:c4:6d:f6:8e:be:29:e9:bc:2f:d9:
9c:85:d2:52:67:55:71:0a:45:29:f8:a9:a7:6c:f9:12:59:d9:
68:e7:03:9a:3f:b8:0a:af:46:5a:1f:e1:e6:aa:3c:a6:01:52:
21:a6:8d:a5:82:fd:0e:bd:69:01:eb:11:2e:ad:93:57:71:70:
09:f5:70:b6:86:19:b3:45:18:92:9b:50:9e:3e:1b:c6:03:3a:
b0:f0:43:e6:5d:b9:39:65:48:00:d0:60:ad:eb:7c:c8:c3:21:
73:8b:43:81:a9:6d:24:9b:f9:6c:bf:7a:e9:c9:2d:c9:39:b8:
4d:33:62:be:5c:f4:b2:d8:dc:1f:44:d9:3c:17:0a:d1:33:a0:
d0:44:ff:9a:b7:75:69:d7:a6:5f:96:e0:4b:ae:7a:d4:38:02:
de:b0:0f:1c:2f:2c:ab:43:9d:a9:3a:c2:eb:f8:57:72:80:82:
12:d4:d5:21:74:4c:59:a2:cc:1a:dc:cd:98:9a:b6:21:4a:16:
77:f2:33:7c:a3:4c:b0:ff:3c:4e:17:97:f1:3b:9e:bb:46:e6:
17:74:7c:14
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAZ/bYyvHYuWpeEZZwBbOLDwaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4NTI1ZTQxMmM2YWUyYjE2Y2FjMzllY2YyODhjMmUyZTZh
NzVkZTIwHhcNMjYwODA3MDg0MjE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNzVhNTUwMDIxN2EzZGUzMTE2ODcwMTJhNDBjYzQ5M2JkOTFkNjg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2B50w/ZOIM9FbcRNiUh6Ov7M4tio
uRrbD8U5nAw4jgEez3YAd8K4oA/RF1H7zcx5b+PC8s4krHlrwLF3Hc6/zdCaOikN
ViitTxvMBQAwvSnAwmg19BkSevN3lFJJKCyB+Jy4uxnHNp3NBwFkiRWsolybSw/k
h8aA3DLlY/Dt8PeU5X4Wr3QMNVxbvOnCOGbzy+VzVjiGRf/BYZz9BrU/gyH8c4TY
jYAcYFrn2uKogxJa39CxvMfvOv7Et3wrtF4ClauIW0qj/xaRxa8ZQ9hpNACwiCof
GoGqsng/MZnSmd/CZSPQLN/663v7kRd8m7bLI0a3/ZSfQysSIWYXTPwnBwIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFCdaVQAhej3jEWhwEqQMxJO9kdaIMB8GA1UdIwQY
MBaAFPhSXkEsauKxbKw57PKIwuLmp13iMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1GSmVRU3hxNHJGc3JEbnM4b2pDNHVhblhlSS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTMvYTNmZDhiLTY4NmItNGU2Yy04Yjdi
LTQzMTBjMzliMWY0NC8xL0oxcFZBQ0Y2UGVNUmFIQVNwQXpFazcyUjFvZy5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvYTMvYTNmZDhiLTY4NmItNGU2Yy04YjdiLTQzMTBjMzliMWY0
NC8xLzEtRkplUVN4cTRyRnNyRG5zOG9qQzR1YW5YZUkuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwDBAFWa2wD
BAC5vA0wDQQCAAIwBwMFAyoB/MAwDQYJKoZIhvcNAQELBQADggEBAHf/9oTjLbCV
IZGDUcJdXZ45xDw4z6RP/y9S2JGu+xcq1kF8cemGoqUj8LONxG32jr4p6bwv2ZyF
0lJnVXEKRSn4qads+RJZ2WjnA5o/uAqvRlof4eaqPKYBUiGmjaWC/Q69aQHrES6t
k1dxcAn1cLaGGbNFGJKbUJ4+G8YDOrDwQ+ZduTllSADQYK3rfMjDIXOLQ4GpbSSb
+Wy/eunJLck5uE0zYr5c9LLY3B9E2TwXCtEzoNBE/5q3dWnXpl+W4EuuetQ4At6w
DxwvLKtDnak6wuv4V3KAghLU1SF0TFmizBrczZiatiFKFnfyM3yjTLD/PE4Xl/E7
nrtG5hd0fBQ=
-----END CERTIFICATE-----
Generated at Sat Aug 15 00:25:51 2026 by rpki-client