Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/j0OKj3kZEaEPgcdz4aJAnjY_sd4.roa
File: j0OKj3kZEaEPgcdz4aJAnjY_sd4.roa (raw, json)
Hash identifier: 27Zt/I7ctcgfBc6vjnNIdU2i4g80UTn/VUCn8lWaWEU=
Subject key identifier: 8F:43:8A:8F:79:19:11:A1:0F:81:C7:73:E1:A2:40:9E:36:3F:B1:DE
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01A01E087E521D0200B77ABBC7BD74BFF53B
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/j0OKj3kZEaEPgcdz4aJAnjY_sd4.roa
Signing time: Thu 20 Aug 2026 07:17:48 +0000
ROA not before: Thu 20 Aug 2026 07:17:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210483
IP address blocks: 192.36.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1e:08:7e:52:1d:02:00:b7:7a:bb:c7:bd:74:bf:f5:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Aug 20 07:17:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8f438a8f791911a10f81c773e1a2409e363fb1de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:96:1e:9b:dc:59:ca:7c:72:c4:cc:5b:c7:c0:
42:d9:69:34:82:96:75:ed:df:0f:fa:e7:07:1f:a4:
1c:e5:5d:f0:c0:f9:3c:2c:cf:aa:74:3a:00:03:c4:
03:0f:54:8b:d4:b6:40:44:af:8b:be:3e:c0:e5:c7:
e7:85:73:b4:65:6b:c0:24:3a:43:fb:b2:cc:8f:fa:
6d:1d:60:10:da:c0:bf:88:32:e2:df:2e:45:11:bc:
ae:5e:0e:f9:79:98:e1:bb:ba:d8:65:64:7a:e4:3c:
3b:94:aa:6d:d0:06:13:34:5d:11:39:de:92:cb:e6:
9b:1d:4e:23:8f:98:fb:3b:25:ee:42:8d:63:2f:50:
54:25:71:34:07:ac:d2:40:91:7e:6e:ed:f7:67:6c:
4f:2d:5b:b2:d1:15:42:60:d8:e3:08:f9:6e:45:df:
12:f0:86:4c:bb:d7:ad:86:3b:8f:47:a0:56:7e:c5:
4d:39:93:00:47:67:a0:08:9c:1e:fe:ad:8d:14:9c:
be:77:21:44:1f:d4:9d:48:03:8a:26:6b:5f:74:2a:
b0:9c:22:b4:3a:53:da:60:39:67:5b:c5:4c:a1:77:
5e:77:4c:4d:f9:ce:92:3e:c5:bd:b2:a9:f1:2a:61:
e8:6b:b2:f6:a7:9c:63:9f:6a:3b:02:26:31:63:82:
6c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:43:8A:8F:79:19:11:A1:0F:81:C7:73:E1:A2:40:9E:36:3F:B1:DE
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/j0OKj3kZEaEPgcdz4aJAnjY_sd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.36.88.0/24
Signature Algorithm: sha256WithRSAEncryption
74:ca:34:0c:01:fc:1f:1a:54:fe:8a:6d:c5:4b:56:b4:20:fb:
32:9c:c2:00:50:be:40:9b:48:b2:02:fd:b6:b3:73:c2:b0:dc:
0a:ba:7e:26:0d:3b:4c:ff:1a:9d:24:87:e6:85:47:ce:b7:7d:
78:ce:a8:74:a8:a5:e6:6d:db:3e:84:4b:f4:c0:24:37:48:a8:
2d:5d:a8:6c:27:f2:2b:e6:e2:f5:e6:d4:42:93:bc:d6:97:0b:
41:6e:12:00:10:88:15:60:64:1b:d9:86:88:cb:b0:a3:34:a3:
69:a0:a5:84:58:38:17:17:92:fb:11:da:21:72:8c:41:b9:86:
de:b8:ab:5e:79:10:59:6e:02:4d:ab:0c:80:e9:b0:64:69:4c:
93:38:02:26:61:60:72:92:5d:9b:a7:1d:cd:38:cd:b7:0b:9e:
1c:b7:de:88:b3:53:98:5f:db:2c:d5:f7:f9:1a:0d:af:81:d5:
3b:47:dd:b6:2e:73:61:71:31:60:29:82:fc:f1:e0:3f:3d:98:
bb:5b:c0:7b:59:cc:6d:07:16:71:62:3c:15:d3:ff:58:cd:0b:
42:7f:2a:69:e6:59:dc:01:fa:3b:93:30:4f:81:15:92:fb:29:
bf:18:3b:95:3d:ab:fe:88:52:71:f2:40:0b:44:1d:8f:15:e7:
d3:e4:3a:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 14:45:30 2026 by rpki-client