Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/j_QCSh7ZF3PrwHAJ9e8hUlOg6lI.roa
File: j_QCSh7ZF3PrwHAJ9e8hUlOg6lI.roa (raw, json)
Hash identifier: pmebqOompZdeawcmXruuUY8oJRLj4i7j3MeIvnSwW8o=
Subject key identifier: 8F:F4:02:4A:1E:D9:17:73:EB:C0:70:09:F5:EF:21:52:53:A0:EA:52
Certificate issuer: /CN=9f26ac9eeb3a2cfa2f6ca3f413efb9cdffe9724e
Certificate serial: 019FD75844F757F7AB2FBF6031D7E79E896F
Authority key identifier: 9F:26:AC:9E:EB:3A:2C:FA:2F:6C:A3:F4:13:EF:B9:CD:FF:E9:72:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nyasnus6LPovbKP0E--5zf_pck4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/j_QCSh7ZF3PrwHAJ9e8hUlOg6lI.roa
Signing time: Thu 06 Aug 2026 13:51:54 +0000
ROA not before: Thu 06 Aug 2026 13:51:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51263
IP address blocks: 136.148.152.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.mft
rsync://rpki.ripe.net/repository/DEFAULT/nyasnus6LPovbKP0E--5zf_pck4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d7:58:44:f7:57:f7:ab:2f:bf:60:31:d7:e7:9e:89:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f26ac9eeb3a2cfa2f6ca3f413efb9cdffe9724e
Validity
Not Before: Aug 6 13:51:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8ff4024a1ed91773ebc07009f5ef215253a0ea52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b7:cf:fa:d3:23:06:3f:22:46:b5:6a:2b:d2:
8d:91:2d:3f:dd:b3:d9:c1:9e:f2:de:0f:63:36:fa:
8b:ed:77:3f:ed:ee:17:2e:d2:b4:1d:3c:00:ad:83:
d9:63:dd:53:88:46:74:c1:d9:d6:2e:52:70:65:e3:
16:55:55:b8:d2:a0:88:66:6a:84:0d:e8:13:ec:96:
93:67:04:4d:11:12:e6:8c:a7:d6:d3:e0:ba:77:ee:
11:9d:d4:5c:76:18:63:64:fb:fd:81:d9:bf:d5:b2:
fe:56:73:6c:0b:01:70:08:a4:39:8b:77:8b:3e:11:
b7:68:59:af:1a:9c:78:38:4f:c6:8f:42:e6:c5:06:
28:6e:01:4a:c4:a5:c9:ea:de:ce:a1:3e:a2:1a:38:
58:2d:f6:29:ad:d3:16:fd:3c:3b:7c:8f:aa:cc:1a:
65:cb:61:ff:3d:a4:2a:6c:7c:31:08:81:55:54:df:
55:15:ae:57:7f:f4:b9:7c:ba:49:fa:62:4d:75:c1:
48:37:61:0e:b3:fe:7a:9e:fa:7d:51:98:78:45:89:
69:39:ac:8a:8e:14:66:d3:85:eb:de:fd:ce:7b:7d:
ad:b3:40:63:e2:3a:c3:9f:c4:2b:bf:66:f5:fc:30:
61:8d:32:53:de:5f:70:a8:33:53:6d:6f:10:a9:8f:
20:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:F4:02:4A:1E:D9:17:73:EB:C0:70:09:F5:EF:21:52:53:A0:EA:52
X509v3 Authority Key Identifier:
keyid:9F:26:AC:9E:EB:3A:2C:FA:2F:6C:A3:F4:13:EF:B9:CD:FF:E9:72:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nyasnus6LPovbKP0E--5zf_pck4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/j_QCSh7ZF3PrwHAJ9e8hUlOg6lI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
136.148.152.0/21
Signature Algorithm: sha256WithRSAEncryption
49:82:78:1c:22:bf:5c:61:f2:bb:2c:3c:34:eb:ea:a5:71:99:
3e:30:12:18:1f:79:a9:b8:68:b2:9c:a8:e3:19:e5:39:70:48:
1a:7d:40:a9:79:ef:5e:b8:4b:0a:57:dd:2d:88:56:01:dc:eb:
bf:f5:93:f4:de:30:18:3c:0b:85:23:92:50:0a:1c:81:44:76:
24:04:06:a6:4c:39:5d:8c:82:72:9a:38:cb:08:6b:b8:be:73:
5f:09:6f:46:91:c8:19:84:32:55:6f:3f:98:fd:e8:33:04:4b:
09:14:10:50:22:80:27:e9:21:00:e9:f9:40:b1:d6:87:dc:eb:
f3:26:40:b3:ca:10:2c:13:95:0e:bd:f3:7c:11:14:22:57:40:
aa:e1:90:97:6d:f5:84:97:15:7c:01:d2:d1:14:0c:66:03:7e:
a4:ef:41:98:24:33:d4:b3:98:78:8e:c9:ad:19:9e:03:8d:89:
c8:16:eb:0a:e2:e1:21:9d:9c:8d:07:c2:c1:f7:08:08:32:6e:
2e:6d:2c:f3:ca:11:18:99:63:ea:d9:de:e3:12:bd:9d:a2:6c:
dc:18:79:bb:2e:dd:b8:9b:ea:46:d3:8e:b3:55:02:00:ef:dc:
7f:c5:0e:d3:60:0d:f0:7e:43:5a:ee:a9:67:8e:5b:c8:fa:6a:
e0:43:23:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:23:30 2026 by rpki-client