Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/JQruQZHfOBAggRfW1jPYqO7krws.roa
File: JQruQZHfOBAggRfW1jPYqO7krws.roa (raw, json)
Hash identifier: zGjAQGJ4W7CBbAo8sZqwJ4+BqayevAA8V+gwWcGgtGY=
Subject key identifier: 25:0A:EE:41:91:DF:38:10:20:81:17:D6:D6:33:D8:A8:EE:E4:AF:0B
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 01A17899C37FE7F99B240FA99B03195B99E0
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/JQruQZHfOBAggRfW1jPYqO7krws.roa
Signing time: Mon 26 Oct 2026 14:25:05 +0000
ROA not before: Mon 26 Oct 2026 14:25:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56582
IP address blocks: 212.87.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:99:c3:7f:e7:f9:9b:24:0f:a9:9b:03:19:5b:99:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Oct 26 14:25:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=250aee4191df3810208117d6d633d8a8eee4af0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:de:29:1e:2b:b4:cb:b4:56:45:0f:d8:9a:74:
9b:af:11:1c:35:80:e2:e7:99:9b:ca:04:7a:f5:17:
24:f5:b5:20:3a:f5:cf:43:03:56:ed:2b:74:45:9c:
76:eb:f4:4e:6f:5c:32:0d:21:ba:fd:6a:a5:62:45:
e1:f7:1b:31:2c:62:6e:a2:d3:1a:eb:5b:42:5d:d6:
b6:8f:43:28:31:4f:39:40:e3:84:13:60:14:17:00:
48:f7:72:c3:b1:b8:3e:d3:40:e5:10:0d:5d:e2:64:
7d:db:9d:0f:ed:7b:04:d0:6a:b6:0d:c6:b9:c6:d5:
9b:39:10:2c:ab:ed:bc:50:cb:6a:e6:99:28:6f:54:
79:ea:f2:ec:00:31:c6:bf:50:57:07:db:a8:bf:7c:
b9:b0:bc:c5:60:5f:8f:e0:2e:ae:4c:b4:74:a9:65:
9c:0e:9e:ff:4b:54:79:92:aa:61:da:76:57:3e:05:
3e:60:ad:f4:85:7b:24:1c:65:31:9f:9e:01:71:be:
4f:43:0b:0a:0c:cd:ee:64:79:3a:21:56:8e:1b:5e:
2e:42:aa:40:22:4b:16:eb:97:65:ae:05:06:d2:9e:
2c:47:cb:08:f1:8b:55:9b:26:98:d2:21:67:47:fe:
8a:1b:a7:45:d8:b2:fe:82:44:67:25:12:cc:d4:ce:
f4:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:0A:EE:41:91:DF:38:10:20:81:17:D6:D6:33:D8:A8:EE:E4:AF:0B
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/JQruQZHfOBAggRfW1jPYqO7krws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.87.196.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:6a:3f:bf:48:1f:81:bc:49:bf:de:c7:80:7b:0b:f0:9a:53:
76:d0:40:b3:48:e8:d8:5e:f1:40:a0:d0:cd:39:e3:b4:84:38:
a4:05:d3:8f:7e:72:13:62:d3:7e:6a:66:9b:43:54:d7:85:b9:
71:cf:7b:44:b0:e1:b1:64:1a:da:4d:ba:fc:42:ec:23:a5:4b:
39:44:32:53:4b:ec:a8:d2:d6:5c:9d:32:97:23:e8:3b:12:97:
b1:cd:06:60:3e:91:fe:81:ba:44:45:17:f0:81:39:30:f5:04:
51:2e:91:5d:8c:59:b8:09:5e:1a:3c:84:55:6c:27:b7:82:a3:
78:33:a6:7d:59:ba:a7:6a:c8:b8:7f:f0:2a:df:1b:a3:bf:13:
80:a7:e3:6d:db:63:50:f0:fd:e6:6f:a7:3d:c8:eb:9d:0c:6f:
b3:a5:f7:bb:9f:d1:0a:89:ff:58:02:7b:be:ac:78:19:2f:38:
2e:73:44:75:70:83:ba:b7:af:fa:1f:43:b7:aa:c2:ed:2a:25:
72:70:72:43:e5:ce:0c:91:a0:ae:7b:82:ff:ec:ff:e7:52:57:
32:cb:d2:6b:2d:8f:51:f9:b7:63:59:d4:d0:b6:c4:9a:f1:60:
11:53:56:79:17:e0:63:a0:e5:9f:f9:5f:83:94:4a:19:48:26:
5c:e5:bb:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 06:00:18 2026 by rpki-client