Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/d5f804-a193-4b3f-a652-45f2afc91d2d/1/jD8J05fKqBnQ1FidkKEiCIt01lI.roa
File: jD8J05fKqBnQ1FidkKEiCIt01lI.roa (raw, json)
Hash identifier: gJQd80Hz94dcxSPHqS2DCXZJ3/IbTnGgpfChN5UQ9Mg=
Subject key identifier: 8C:3F:09:D3:97:CA:A8:19:D0:D4:58:9D:90:A1:22:08:8B:74:D6:52
Certificate issuer: /CN=db2303e96803793c3c48cda5207a41e74e50cb7c
Certificate serial: 019CB06F40874325794E3582F44699421C89
Authority key identifier: DB:23:03:E9:68:03:79:3C:3C:48:CD:A5:20:7A:41:E7:4E:50:CB:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2yMD6WgDeTw8SM2lIHpB505Qy3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/d5f804-a193-4b3f-a652-45f2afc91d2d/1/jD8J05fKqBnQ1FidkKEiCIt01lI.roa
Signing time: Mon 02 Mar 2026 21:23:26 +0000
ROA not before: Mon 02 Mar 2026 21:23:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202732
IP address blocks: 213.239.140.0/22 maxlen: 24
2001:3ac0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/d5f804-a193-4b3f-a652-45f2afc91d2d/1/2yMD6WgDeTw8SM2lIHpB505Qy3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/d5f804-a193-4b3f-a652-45f2afc91d2d/1/2yMD6WgDeTw8SM2lIHpB505Qy3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/2yMD6WgDeTw8SM2lIHpB505Qy3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 21:16:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b0:6f:40:87:43:25:79:4e:35:82:f4:46:99:42:1c:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db2303e96803793c3c48cda5207a41e74e50cb7c
Validity
Not Before: Mar 2 21:23:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8c3f09d397caa819d0d4589d90a122088b74d652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b3:66:cf:f7:ec:4a:06:d7:ae:29:7b:c3:3c:
f6:4d:9b:30:e7:af:b1:5d:be:8a:ce:62:94:6f:5f:
a0:23:90:f6:b7:74:8d:c8:fa:ca:63:fb:1e:81:f4:
05:42:08:91:bc:f2:c3:33:41:73:80:c6:6d:bc:b6:
a3:c6:0c:3d:7d:e7:64:e2:dd:f4:cd:05:6c:a7:a2:
d2:42:b2:99:58:e1:a4:cc:fa:84:b1:3e:fa:d4:c0:
fd:d4:7c:95:c7:2e:e1:0e:a3:ee:54:00:1a:6a:b5:
5c:d4:e1:34:11:f1:08:99:12:ff:a5:e8:c2:c7:9b:
08:bc:0f:e8:eb:48:19:a0:5a:ca:66:52:fc:fc:e6:
99:a1:ad:1b:bf:0e:d7:95:f5:7a:12:51:56:f5:55:
86:bd:f4:2b:1d:ea:c2:9c:ec:60:c9:0c:45:56:e3:
9d:52:f7:64:4f:2f:84:17:80:2f:1a:cf:d8:fe:20:
e2:8c:20:46:3d:2c:9d:60:7c:d5:94:cd:7f:b5:af:
af:b7:16:d6:39:a9:de:22:1e:16:c7:1a:b6:0f:04:
e0:b0:80:d9:40:ad:15:64:65:83:17:cb:32:88:91:
6f:99:5b:d1:89:3c:78:a4:32:79:69:06:55:f0:ae:
64:b2:d2:3b:4a:ec:f6:de:4d:e7:23:d8:6a:8a:b3:
dc:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:3F:09:D3:97:CA:A8:19:D0:D4:58:9D:90:A1:22:08:8B:74:D6:52
X509v3 Authority Key Identifier:
keyid:DB:23:03:E9:68:03:79:3C:3C:48:CD:A5:20:7A:41:E7:4E:50:CB:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2yMD6WgDeTw8SM2lIHpB505Qy3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/d5f804-a193-4b3f-a652-45f2afc91d2d/1/jD8J05fKqBnQ1FidkKEiCIt01lI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/d5f804-a193-4b3f-a652-45f2afc91d2d/1/2yMD6WgDeTw8SM2lIHpB505Qy3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.239.140.0/22
IPv6:
2001:3ac0::/29
Signature Algorithm: sha256WithRSAEncryption
4a:71:05:68:8a:f1:62:ec:59:91:ab:5d:02:39:7c:92:86:c8:
32:93:9e:be:3a:20:22:82:82:ed:9d:43:a6:52:f0:10:64:61:
e3:6c:b6:65:4b:dd:a0:9b:86:1d:2c:16:f9:e2:ed:a7:09:6f:
c0:06:bf:3d:ba:b5:f9:ae:02:75:f1:6f:6b:c8:76:fb:04:31:
75:0f:b8:fd:25:75:db:58:82:16:c4:2f:bf:8b:f4:f7:93:a6:
e8:fe:df:34:4d:1b:46:3a:b8:27:22:8d:5e:a4:fd:bc:46:17:
ec:48:06:92:04:2f:78:d0:af:70:72:21:e5:d4:8f:12:1a:34:
6d:41:6f:b8:a0:d9:21:1b:71:5a:5f:55:f4:69:85:83:68:b0:
af:16:2a:9c:f9:b0:3a:1d:21:6d:0a:3f:5a:86:8a:22:41:35:
57:3f:84:0c:19:0e:14:d7:f5:7c:13:ac:77:db:1f:41:b9:fc:
1e:b2:44:00:6b:ae:85:e8:e7:33:97:49:90:be:45:13:65:a4:
53:f3:d2:f4:fc:11:dd:61:7a:b9:01:31:d5:a3:ac:27:f0:90:
af:bb:9e:fb:32:d8:9b:d6:bc:e0:e8:5d:fe:3d:b5:f4:36:52:
0a:4b:2c:35:ca:03:3f:34:33:01:e6:0b:0c:78:17:ed:97:1a:
db:76:0f:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 05:58:01 2026 by rpki-client