Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/J47Et0716EoZC4zPKlDWDb5MtHY.roa
File: J47Et0716EoZC4zPKlDWDb5MtHY.roa (raw, json)
Hash identifier: QBebPKiMhPPzlovI8PE6y5odhEamJVDWtJg30ApuzMM=
Subject key identifier: 27:8E:C4:B7:4E:F5:E8:4A:19:0B:8C:CF:2A:50:D6:0D:BE:4C:B4:76
Certificate issuer: /CN=a6ed442b91d4e83a6de39fb67971a1e79c6b1ed5
Certificate serial: 019F26A87C57FF88A9487904C18FAD992864
Authority key identifier: A6:ED:44:2B:91:D4:E8:3A:6D:E3:9F:B6:79:71:A1:E7:9C:6B:1E:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pu1EK5HU6Dpt45-2eXGh55xrHtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/J47Et0716EoZC4zPKlDWDb5MtHY.roa
Signing time: Fri 03 Jul 2026 06:26:43 +0000
ROA not before: Fri 03 Jul 2026 06:26:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200019
IP address blocks: 85.137.248.0/23 maxlen: 24
85.137.248.0/24 maxlen: 24
85.137.249.0/24 maxlen: 24
91.208.162.0/24 maxlen: 24
91.208.184.0/24 maxlen: 24
91.208.197.0/24 maxlen: 24
91.208.206.0/24 maxlen: 24
131.123.32.0/19 maxlen: 24
131.123.32.0/24 maxlen: 24
131.123.33.0/24 maxlen: 24
131.123.34.0/24 maxlen: 24
131.123.50.0/24 maxlen: 24
2a0f:5f40::/29 maxlen: 48
2a0f:5f40::/48 maxlen: 48
2a0f:5f40:1::/48 maxlen: 48
2a0f:5f40:1000::/48 maxlen: 48
2a0f:5f45::/32 maxlen: 32
2a0f:5f46::/32 maxlen: 32
2a0f:5f46:600::/40 maxlen: 40
2a0f:5f46:700::/40 maxlen: 40
2a0f:5f46:800::/40 maxlen: 40
2a0f:5f47::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/pu1EK5HU6Dpt45-2eXGh55xrHtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:26:a8:7c:57:ff:88:a9:48:79:04:c1:8f:ad:99:28:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6ed442b91d4e83a6de39fb67971a1e79c6b1ed5
Validity
Not Before: Jul 3 06:26:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=278ec4b74ef5e84a190b8ccf2a50d60dbe4cb476
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:3a:a1:1c:b2:91:b3:cf:fd:9c:d4:3d:9b:15:
24:53:27:7d:2a:54:2e:18:ce:2b:0e:e0:78:5f:c0:
d2:96:d4:a9:a5:1a:a9:99:1f:d4:cb:6b:9a:cb:54:
19:ff:52:d4:ff:32:e2:5f:60:e4:30:7f:1a:37:0e:
d2:4b:a1:c3:56:a2:c1:0f:70:64:64:5e:13:03:50:
c6:bc:4a:21:02:98:70:e7:fd:cd:2b:71:56:cc:f3:
d1:d4:e2:80:62:3c:21:7f:6b:c9:4a:f7:f8:34:6c:
dd:f2:b9:e3:db:ec:38:fe:54:d8:74:81:5e:3d:2a:
e0:d4:a3:f7:6c:da:9b:d2:47:23:2f:2e:a2:6e:bb:
8b:6f:eb:6d:42:6a:ce:e7:e7:d2:2a:ef:af:32:1f:
9b:5f:b9:35:a3:b9:32:c0:dd:27:04:d3:9a:69:cd:
71:69:f8:d0:ae:77:dd:b9:9b:5a:fe:0b:7c:0f:68:
43:77:1d:dd:17:94:9b:bf:6c:99:b3:a2:40:39:4c:
f1:7a:09:36:05:07:3c:07:e9:a0:b5:58:6d:d6:de:
79:9b:3d:c5:52:76:b4:8b:be:26:3b:50:99:4b:77:
3e:a9:7c:44:69:1b:03:05:ef:5f:22:2c:5b:db:f9:
9c:10:5f:26:19:c3:e3:b7:eb:0e:c1:74:31:84:a2:
0a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:8E:C4:B7:4E:F5:E8:4A:19:0B:8C:CF:2A:50:D6:0D:BE:4C:B4:76
X509v3 Authority Key Identifier:
keyid:A6:ED:44:2B:91:D4:E8:3A:6D:E3:9F:B6:79:71:A1:E7:9C:6B:1E:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pu1EK5HU6Dpt45-2eXGh55xrHtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/J47Et0716EoZC4zPKlDWDb5MtHY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.137.248.0/23
91.208.162.0/24
91.208.184.0/24
91.208.197.0/24
91.208.206.0/24
131.123.32.0/19
IPv6:
2a0f:5f40::/29
Signature Algorithm: sha256WithRSAEncryption
76:30:b1:c3:50:89:71:56:e4:c3:da:94:00:50:b5:fc:b4:f8:
5f:71:3f:8d:40:a7:f1:59:f0:aa:f9:40:1d:fa:a8:c4:43:0d:
b8:0a:36:69:b1:98:1e:3c:82:2b:21:01:45:87:54:51:ff:ed:
a1:01:d9:71:14:ea:64:84:8a:b2:5f:c5:9f:dc:ee:74:c9:3d:
65:a5:b5:84:58:c7:da:1c:da:57:52:c5:a2:e8:9f:09:ca:37:
9d:4d:95:59:21:cb:a8:81:46:03:10:fb:82:00:5c:3a:93:1a:
e9:3f:8c:4f:52:74:89:df:ba:4a:a9:a1:08:3e:b4:2a:ed:0d:
9e:11:e1:5a:66:9a:0f:d5:14:79:72:e8:2a:d4:d5:1b:1d:d8:
bc:04:1e:c2:81:15:1b:00:b0:e4:97:48:fd:09:39:7d:c4:9b:
e6:40:fe:6f:b1:bb:cb:f2:d5:91:ed:7e:b4:f8:ff:4b:af:b7:
43:8f:72:47:3c:7b:3d:85:7f:f4:d6:65:b3:41:24:70:5f:f1:
ac:ca:f9:af:38:e5:23:86:88:77:8f:b8:6d:37:6f:7e:6b:67:
8c:7c:d3:57:3c:a8:12:1d:99:8a:d8:0a:c4:e2:a8:69:c5:d3:
73:a3:ba:9f:ef:e3:f7:80:ef:33:fa:fc:70:2f:bd:10:c5:76:
4f:df:98:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 17:56:24 2026 by rpki-client