Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/J0--o1lrJsP_M4SKvtP6uLLTEhI.roa
File: J0--o1lrJsP_M4SKvtP6uLLTEhI.roa (raw, json)
Hash identifier: x2kLQ/vE2PqS2+jhROtWLD6sBlgO3Ul4csYjnheYWiE=
Subject key identifier: 27:4F:BE:A3:59:6B:26:C3:FF:33:84:8A:BE:D3:FA:B8:B2:D3:12:12
Certificate issuer: /CN=fa3d0bc11b29da44ad57304c3f8568870a019c24
Certificate serial: 019FEC62451F52BB3979C4EFE474B10A84DF
Authority key identifier: FA:3D:0B:C1:1B:29:DA:44:AD:57:30:4C:3F:85:68:87:0A:01:9C:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/J0--o1lrJsP_M4SKvtP6uLLTEhI.roa
Signing time: Mon 10 Aug 2026 15:54:51 +0000
ROA not before: Mon 10 Aug 2026 15:54:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60631
IP address blocks: 178.236.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ec:62:45:1f:52:bb:39:79:c4:ef:e4:74:b1:0a:84:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa3d0bc11b29da44ad57304c3f8568870a019c24
Validity
Not Before: Aug 10 15:54:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=274fbea3596b26c3ff33848abed3fab8b2d31212
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:98:6b:60:09:66:5f:7c:8f:9a:bb:10:e1:a7:
68:35:0e:1b:1b:19:3e:41:06:2a:9e:49:ef:47:ea:
dc:75:0c:aa:31:c9:32:2a:c9:22:9c:57:20:1c:13:
3f:a4:dc:32:94:d9:a1:19:69:be:cf:98:5c:bd:fb:
1f:d6:c4:8f:3b:ca:17:4c:09:9e:71:e6:5e:36:5f:
2c:15:2f:f2:b0:f5:60:e2:4b:59:2c:d9:27:f1:9b:
be:0b:12:8b:cc:e0:c8:05:c1:75:b3:ec:1a:f2:2c:
49:a3:ac:b5:12:6d:4e:5a:35:1a:fd:8e:a5:ea:15:
59:2c:d7:a9:4a:99:ce:ea:81:32:dc:a2:88:bc:11:
96:67:48:0b:09:5a:af:64:7f:fb:52:1b:b7:30:35:
b8:ff:a9:4e:fc:81:1d:28:f3:5d:99:df:23:12:24:
fc:4a:ec:2c:f6:39:bf:a3:f8:c3:62:dc:8d:26:55:
fa:5c:1c:be:52:52:d8:6b:ff:03:15:61:bf:54:21:
00:5a:7f:4a:5e:26:bf:34:61:c0:70:da:ab:1d:a6:
61:29:74:8d:8a:b1:0a:94:2a:05:95:43:84:71:b0:
80:07:94:3a:cc:5a:fc:dc:ca:4c:9e:6f:10:e1:69:
22:6e:7d:a1:1a:d0:78:0c:2b:1e:4b:5e:97:3a:e0:
4e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:4F:BE:A3:59:6B:26:C3:FF:33:84:8A:BE:D3:FA:B8:B2:D3:12:12
X509v3 Authority Key Identifier:
keyid:FA:3D:0B:C1:1B:29:DA:44:AD:57:30:4C:3F:85:68:87:0A:01:9C:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/J0--o1lrJsP_M4SKvtP6uLLTEhI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.236.32.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:97:8a:ec:43:19:c7:23:75:4e:99:bb:02:df:f7:ed:db:83:
83:f4:d0:58:76:c4:70:dd:1a:4f:d6:6d:f4:a3:fa:b2:6a:aa:
7a:59:c0:6c:1e:4e:e8:a8:03:e3:d2:97:d5:a2:6e:af:aa:42:
e0:18:35:d4:90:e2:82:d8:05:85:e6:7b:02:11:43:2d:1c:1e:
91:4c:b4:83:74:76:b7:d4:18:c7:c6:59:f8:55:fb:ad:cc:04:
de:a6:92:10:a8:f1:50:1f:c7:62:c4:21:50:cf:53:be:d3:9d:
62:48:f3:cc:8d:52:cc:25:27:d9:f3:e4:55:ba:fb:eb:5c:50:
b9:ea:a2:ac:bf:4e:37:b3:1a:6f:93:3c:32:f5:bd:61:28:d5:
a5:d0:dc:24:24:c9:b1:85:65:b9:95:44:66:41:02:e3:6e:62:
85:9c:fb:2b:67:2f:31:53:af:7f:76:3c:72:c9:5e:94:f5:fa:
08:db:ec:18:ac:ee:96:dc:79:65:bc:4d:b6:53:8f:35:34:73:
68:9e:3a:e6:19:44:d0:4a:e9:5c:29:f0:01:5a:58:a7:fa:18:
78:74:4f:f6:c5:28:76:f6:e9:c3:f1:1a:cb:bb:53:c3:d6:3d:
08:91:aa:04:9a:87:63:83:7c:1f:2a:cc:07:1d:ca:3a:8d:2e:
42:ac:d5:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 13:02:54 2026 by rpki-client