Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a9/07d0e6-8573-4bf6-85c7-8f41bfc41b8a/1/1-jujSdDD2_MAgtrX_hFEt7IbELM.roa
File: 1-jujSdDD2_MAgtrX_hFEt7IbELM.roa (raw, json)
Hash identifier: u7WpCsHhA0JUCiWeyt19ZqHHjdIbql3njSFkXX2GUJc=
Subject key identifier: FA:3B:A3:49:D0:C3:DB:F3:00:82:DA:D7:FE:11:44:B7:B2:1B:10:B3
Certificate issuer: /CN=61ccb555c200e20862f6fdb8326137cd4c65198b
Certificate serial: 01A0E6B0564432E57221B0C6968DC81BE87B
Authority key identifier: 61:CC:B5:55:C2:00:E2:08:62:F6:FD:B8:32:61:37:CD:4C:65:19:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ycy1VcIA4ghi9v24MmE3zUxlGYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/07d0e6-8573-4bf6-85c7-8f41bfc41b8a/1/1-jujSdDD2_MAgtrX_hFEt7IbELM.roa
Signing time: Mon 28 Sep 2026 06:25:11 +0000
ROA not before: Mon 28 Sep 2026 06:25:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15694
IP address blocks: 194.169.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/07d0e6-8573-4bf6-85c7-8f41bfc41b8a/1/Ycy1VcIA4ghi9v24MmE3zUxlGYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/07d0e6-8573-4bf6-85c7-8f41bfc41b8a/1/Ycy1VcIA4ghi9v24MmE3zUxlGYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ycy1VcIA4ghi9v24MmE3zUxlGYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e6:b0:56:44:32:e5:72:21:b0:c6:96:8d:c8:1b:e8:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61ccb555c200e20862f6fdb8326137cd4c65198b
Validity
Not Before: Sep 28 06:25:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fa3ba349d0c3dbf30082dad7fe1144b7b21b10b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c8:50:fe:6e:5d:7d:78:e1:0f:5e:c9:55:b7:
48:24:98:11:3b:07:31:73:74:72:35:62:96:9c:27:
50:29:d2:66:fb:60:a8:aa:1d:63:be:30:fd:e0:15:
0e:fb:b8:e0:18:1b:31:6b:0c:0f:4f:82:1e:b2:b1:
15:ff:8f:43:9d:25:d7:07:5c:7f:f6:c9:7f:65:da:
a5:ba:0a:00:5b:04:a6:05:a3:90:4a:25:61:0a:97:
93:07:d2:9b:6b:39:e3:33:6c:cd:62:a9:f7:9c:1d:
ee:2f:c7:4a:f9:cc:9e:97:95:a9:ba:12:77:92:ca:
0f:05:b1:fe:4d:e2:a0:24:78:d6:94:7a:1f:c9:60:
b3:4c:2b:c2:d6:5d:22:01:e7:ca:3f:79:1c:42:4c:
27:07:d0:b2:67:d2:01:61:b9:bb:43:c1:2b:4c:e6:
f0:fe:e3:c1:8f:df:ee:6d:2f:42:c7:cf:ae:9a:3a:
a1:72:b8:db:fb:64:77:30:24:97:95:93:63:75:31:
98:ce:10:dc:4f:49:87:ce:ef:05:27:a4:ec:df:9d:
a1:06:d0:81:3a:bd:69:7a:5d:1d:64:b1:41:49:84:
df:ae:4f:86:5d:ad:fa:ac:3d:ed:c8:74:94:fd:39:
57:18:09:b1:90:eb:50:c4:7e:0c:3c:e2:f7:f0:85:
30:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:3B:A3:49:D0:C3:DB:F3:00:82:DA:D7:FE:11:44:B7:B2:1B:10:B3
X509v3 Authority Key Identifier:
keyid:61:CC:B5:55:C2:00:E2:08:62:F6:FD:B8:32:61:37:CD:4C:65:19:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ycy1VcIA4ghi9v24MmE3zUxlGYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/07d0e6-8573-4bf6-85c7-8f41bfc41b8a/1/1-jujSdDD2_MAgtrX_hFEt7IbELM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/07d0e6-8573-4bf6-85c7-8f41bfc41b8a/1/Ycy1VcIA4ghi9v24MmE3zUxlGYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.169.229.0/24
Signature Algorithm: sha256WithRSAEncryption
53:9d:9d:16:28:ba:ed:76:6c:0d:cc:93:bf:b4:a3:78:e3:3e:
a1:e8:44:f6:46:94:ff:f3:ad:d2:d8:1f:b9:6e:dc:bc:13:50:
40:c3:d5:65:3a:79:76:8a:2a:cc:4d:9d:fc:4f:70:ec:91:8d:
ac:cd:bf:57:4a:51:35:06:a8:e7:a7:2c:8c:10:d3:46:91:33:
67:de:20:04:a2:d7:80:a1:2f:f4:7e:38:5a:d4:52:b5:63:16:
1e:8c:c7:13:5c:d9:08:fd:d4:bb:96:e3:0e:13:e6:4e:08:31:
8e:84:07:92:50:c9:26:ea:d4:8d:cd:4e:7e:a6:cb:af:16:4b:
81:ee:9a:25:fe:a9:09:6c:02:e6:9a:c7:36:81:bf:10:37:6d:
93:c1:4a:51:3a:1f:47:57:dd:6d:10:62:d7:84:48:a8:b8:b1:
45:8e:b8:1c:9b:f9:98:79:2c:37:ea:be:4e:9e:06:55:8c:85:
b6:09:ce:bb:fd:27:80:3e:ed:66:15:75:93:96:fb:3b:ce:aa:
62:d2:00:4a:4f:65:e0:37:dd:e4:d3:d1:4d:ad:57:77:8d:25:
f0:5c:8d:aa:84:a4:9a:3e:6d:72:d9:51:ed:9f:e5:4f:34:8e:
c3:40:aa:22:b1:18:3c:2f:65:06:0a:5a:bd:e7:72:12:ae:05:
da:b1:1f:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:56:36 2026 by rpki-client