Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/jMjm9D-4xflyL6CqFx24UnxHNto.roa
File: jMjm9D-4xflyL6CqFx24UnxHNto.roa (raw, json)
Hash identifier: zk6K2DcoWMQmkWhweos+tpn8p5/7IlXATCKSD4PHiN0=
Subject key identifier: 8C:C8:E6:F4:3F:B8:C5:F9:72:2F:A0:AA:17:1D:B8:52:7C:47:36:DA
Certificate issuer: /CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Certificate serial: 01A07FDCCFC94E99D4D2714C949A147E6097
Authority key identifier: BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/jMjm9D-4xflyL6CqFx24UnxHNto.roa
Signing time: Tue 08 Sep 2026 07:12:52 +0000
ROA not before: Tue 08 Sep 2026 07:12:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209693
IP address blocks: 213.21.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 08:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7f:dc:cf:c9:4e:99:d4:d2:71:4c:94:9a:14:7e:60:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Validity
Not Before: Sep 8 07:12:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8cc8e6f43fb8c5f9722fa0aa171db8527c4736da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1b:71:6e:d4:1b:1d:ce:f4:31:90:a9:01:01:
4d:4f:59:3b:74:50:5a:3a:40:62:11:5a:be:de:87:
d6:6b:5b:0b:5e:94:3b:d6:21:4b:64:69:ef:f3:4d:
55:42:50:79:ee:66:b5:06:21:f4:61:7f:ce:73:ea:
2f:56:26:d9:d8:b0:e9:0d:ce:e0:70:db:02:39:ad:
ea:17:2d:0c:e2:ae:9d:89:1b:4d:dc:b8:be:72:34:
8f:f2:7c:fe:76:58:36:e7:91:40:53:30:72:56:3e:
fb:84:f6:fc:e5:40:9e:ef:a0:ed:04:8c:70:ee:6e:
1a:23:47:a8:bb:6c:49:7c:3f:02:63:c2:fd:08:71:
cc:7a:7d:b6:58:7c:68:97:3c:8b:05:c0:fa:1b:81:
bd:64:95:41:6c:a9:8f:32:3e:75:7a:46:22:9b:d7:
4c:74:83:6f:4a:6a:30:39:45:1f:21:a0:f9:f9:06:
dc:15:37:fe:1b:4b:4f:70:9d:b0:98:15:30:dc:b8:
57:89:68:b4:1f:41:b7:cc:c0:0f:a3:5d:8f:67:7e:
bc:9a:3e:e4:38:a5:b5:5c:1d:f9:62:37:f1:76:c6:
6a:54:86:6c:69:b5:71:cc:b6:6a:42:04:33:4a:e0:
2c:9e:d8:8f:19:7e:aa:73:5e:fa:42:9d:6b:a1:bb:
01:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:C8:E6:F4:3F:B8:C5:F9:72:2F:A0:AA:17:1D:B8:52:7C:47:36:DA
X509v3 Authority Key Identifier:
keyid:BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/jMjm9D-4xflyL6CqFx24UnxHNto.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.21.232.0/24
Signature Algorithm: sha256WithRSAEncryption
11:13:a3:a2:60:06:25:02:28:38:4e:b5:1a:cc:2b:e6:d0:95:
69:54:78:de:64:9e:d4:36:a2:11:1c:22:a2:ea:d8:d0:e0:5d:
d0:42:72:83:e3:f2:7f:de:81:64:a1:79:ae:6f:e0:f8:ea:86:
6f:69:de:d3:80:eb:f4:71:27:f1:85:7e:7d:13:ac:f0:ab:78:
71:21:4b:8c:0b:c3:69:ed:eb:6b:06:40:ad:6f:d5:cc:4a:6a:
f8:17:22:ba:b7:02:44:c0:95:47:d7:6e:23:c6:93:fe:f0:3f:
5a:a1:04:20:08:ea:8e:e0:99:d8:9e:6d:f5:cb:03:0f:ce:24:
ab:1a:8d:c5:83:e6:92:f4:88:5d:fe:ae:28:66:6b:f4:7c:11:
e0:73:2a:58:ff:91:90:9f:ac:df:ad:0a:3b:ec:ca:23:7c:f1:
27:c2:c3:5d:1a:3c:fd:aa:95:cf:f7:6c:66:46:97:24:3b:be:
50:74:f4:df:9a:70:7b:2e:41:f5:ec:82:01:a1:32:61:e2:79:
1c:64:ca:03:6c:cc:c2:e2:65:d1:7e:ab:51:9e:50:e9:23:2e:
87:47:9a:e6:8e:85:b7:e4:65:c5:54:b0:9e:66:0e:e7:e3:59:
26:fc:9f:4c:7e:de:5d:c2:bd:98:fa:ea:2d:ba:16:4c:8b:64:
56:7e:ba:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 18:32:49 2026 by rpki-client