Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/j-00qQwauyTh9RgfGqNnitnD7As.roa
File: j-00qQwauyTh9RgfGqNnitnD7As.roa (raw, json)
Hash identifier: 8GRz2UtLNirTBYNw2vvahaSM779eUkDfuLUhI2aMD14=
Subject key identifier: 8F:ED:34:A9:0C:1A:BB:24:E1:F5:18:1F:1A:A3:67:8A:D9:C3:EC:0B
Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial: 01A1444ACA744E29BCFA3A45D77374830BF5
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/j-00qQwauyTh9RgfGqNnitnD7As.roa
Signing time: Fri 16 Oct 2026 10:38:34 +0000
ROA not before: Fri 16 Oct 2026 10:38:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58061
IP address blocks: 88.214.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:44:4a:ca:74:4e:29:bc:fa:3a:45:d7:73:74:83:0b:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Validity
Not Before: Oct 16 10:38:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8fed34a90c1abb24e1f5181f1aa3678ad9c3ec0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ee:f0:d9:69:a1:ab:c0:d3:07:42:cf:2c:29:
29:26:ab:d6:50:f8:d4:60:0a:25:f7:35:a1:75:a2:
5a:d1:97:5a:11:8b:19:50:1b:73:30:11:a3:c8:ca:
0d:e1:33:af:48:b4:38:2f:7c:06:71:a0:9b:76:fc:
f3:42:82:d3:ee:23:5d:bb:1b:d7:2e:a8:36:f7:bf:
eb:33:4a:d4:aa:a3:81:f8:b7:c9:d7:ce:ff:11:9d:
03:13:0f:4e:cd:96:a9:81:a6:bb:cf:22:37:9a:d2:
be:6a:d3:0e:87:ee:1d:e4:8d:61:1e:08:cc:c0:15:
fe:a2:fa:38:70:b3:a8:dc:28:67:42:0d:c9:cc:ea:
5b:54:63:c7:13:8b:03:6f:5e:0d:03:7e:9b:96:da:
ac:6e:90:e8:2d:78:e7:f0:44:ca:5d:8e:13:ad:bd:
1f:41:72:ea:ba:6b:99:10:d7:8b:52:2a:72:08:66:
8f:54:f1:3b:b5:f1:62:9d:5a:fe:40:e4:24:54:2e:
3a:24:aa:aa:b6:97:10:a9:0a:95:1d:4c:cb:fe:7d:
a5:b2:12:a4:6d:87:87:ce:84:b9:35:93:1a:5d:42:
e8:0c:cd:46:22:d6:4e:33:75:0c:da:06:8f:51:e2:
54:59:4e:f1:35:f9:81:ec:ef:2f:2a:f5:d8:8d:29:
c3:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:ED:34:A9:0C:1A:BB:24:E1:F5:18:1F:1A:A3:67:8A:D9:C3:EC:0B
X509v3 Authority Key Identifier:
keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/j-00qQwauyTh9RgfGqNnitnD7As.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.214.54.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:69:30:48:0d:64:f7:9f:b4:7b:8b:34:03:0e:4f:7d:46:09:
c0:e1:81:09:e9:56:c2:9c:28:7c:d3:c6:c5:f6:ce:89:3f:f6:
00:18:cd:7e:45:2f:27:c8:5a:28:02:03:67:84:89:d9:74:2f:
e2:8a:37:2b:05:2a:23:d0:fa:2f:65:93:b9:fd:9c:d8:8e:28:
f2:9e:63:43:f8:9f:8a:43:b2:6b:c2:49:5b:25:6f:44:0a:69:
ef:f7:68:cd:45:2f:b2:80:0b:4c:38:5d:9c:ac:69:84:75:a9:
2e:b6:f1:76:3a:7a:a7:51:43:d7:d5:7d:56:be:b7:09:52:71:
7d:f8:5c:d9:24:ec:28:67:b4:9c:dc:34:b8:19:2c:e2:1c:da:
8e:58:18:57:4e:f9:7d:65:17:a4:41:9a:1a:ce:04:35:8d:c2:
ff:0a:bd:d5:a1:66:c8:d3:46:96:54:2e:2e:ac:18:16:f4:7a:
a4:73:2b:11:39:f9:af:2c:c8:42:c9:11:67:fb:8c:47:a1:c8:
03:55:58:fe:8f:0a:fc:de:42:ca:12:3f:9c:16:e2:d0:a0:0e:
29:41:4c:10:eb:a7:94:25:08:2d:be:23:a6:cc:81:51:9c:ed:
2a:db:9f:ea:79:bf:0c:db:1c:ee:52:cb:c2:ca:3a:13:cd:30:
a0:0d:34:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 14:20:48 2026 by rpki-client