Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/j_vT15gdCBerEJD3w18H2AVY8vQ.roa
File: j_vT15gdCBerEJD3w18H2AVY8vQ.roa (raw, json)
Hash identifier: UKJURUuU4I1OLrHsAopP6DwwYkaWm738i/kF5cVc+Ag=
Subject key identifier: 8F:FB:D3:D7:98:1D:08:17:AB:10:90:F7:C3:5F:07:D8:05:58:F2:F4
Certificate issuer: /CN=464dcfa96399716692d245a804887c09da451f8f
Certificate serial: 01A16D2B232897C4335812813CAA2041EB07
Authority key identifier: 46:4D:CF:A9:63:99:71:66:92:D2:45:A8:04:88:7C:09:DA:45:1F:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rk3PqWOZcWaS0kWoBIh8CdpFH48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/j_vT15gdCBerEJD3w18H2AVY8vQ.roa
Signing time: Sat 24 Oct 2026 09:08:25 +0000
ROA not before: Sat 24 Oct 2026 09:08:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20473
IP address blocks: 87.192.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rk3PqWOZcWaS0kWoBIh8CdpFH48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 07:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6d:2b:23:28:97:c4:33:58:12:81:3c:aa:20:41:eb:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=464dcfa96399716692d245a804887c09da451f8f
Validity
Not Before: Oct 24 09:08:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8ffbd3d7981d0817ab1090f7c35f07d80558f2f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:98:88:41:71:d4:09:aa:17:47:5f:e2:2b:f5:
70:7d:b5:b4:c4:dd:1b:48:20:de:34:c3:77:86:f6:
69:cc:da:d3:64:e3:97:df:6e:30:4f:4a:ae:12:e1:
14:92:e2:29:ba:69:5b:18:5f:35:95:4a:52:96:03:
92:c0:51:0e:f9:c5:3b:c3:2f:a6:91:fd:5a:88:c6:
db:cf:b0:fc:3c:0b:fc:ad:fd:79:2b:ef:3c:c9:92:
8a:27:92:6a:d7:6c:d0:d9:a1:dc:50:26:33:4d:88:
00:60:c2:11:28:23:1f:bb:b3:1d:37:51:82:11:67:
a0:62:ab:31:c6:40:81:86:c8:e0:9a:b2:6a:47:c6:
d1:7c:c2:f6:83:6e:8c:c7:8a:48:f8:06:bc:c5:23:
5b:33:2d:4a:d8:58:13:f1:26:a3:5b:3c:26:4a:71:
af:7f:5c:95:f9:e4:e9:69:55:50:e4:6b:52:21:ea:
4a:75:67:55:bf:b0:00:a3:67:a2:2d:ac:ee:51:73:
cc:75:2b:39:d1:2f:b0:ad:07:f0:e4:c9:f9:9d:e6:
3e:be:9d:18:2a:e8:51:3f:5e:d3:b0:3a:0c:32:ee:
2f:f6:43:45:e4:9a:c9:d6:14:49:64:da:a6:4e:0c:
10:47:a8:55:ca:68:ba:d1:7c:6d:a3:11:6e:fd:7f:
87:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:FB:D3:D7:98:1D:08:17:AB:10:90:F7:C3:5F:07:D8:05:58:F2:F4
X509v3 Authority Key Identifier:
keyid:46:4D:CF:A9:63:99:71:66:92:D2:45:A8:04:88:7C:09:DA:45:1F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rk3PqWOZcWaS0kWoBIh8CdpFH48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/j_vT15gdCBerEJD3w18H2AVY8vQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.192.218.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:3e:1e:9b:69:97:39:07:34:b0:24:81:50:8f:f6:e8:3f:e5:
65:92:17:fb:38:7c:fa:f6:98:b7:0c:cd:9b:f8:57:7b:2d:44:
fd:29:9a:c4:ad:d9:18:3b:22:8b:dc:0c:fb:4e:7c:bb:59:0e:
b3:7f:c5:8a:94:7e:02:c6:c2:89:c5:33:18:ea:fa:29:ca:f2:
62:fb:ff:8f:da:88:8b:38:89:09:63:16:8d:e2:d5:a3:97:e4:
4f:5c:b5:2d:a0:49:68:42:02:45:91:3b:4b:7e:65:cb:b9:91:
82:a7:b5:a4:e8:fe:93:f1:55:77:11:0a:b3:0f:d8:33:b5:8f:
87:60:79:1c:e8:5a:f4:68:2f:26:00:53:5e:ac:19:35:a9:73:
76:3c:bc:72:7f:5d:07:5a:79:9e:85:01:cc:94:3f:2c:5c:8c:
e6:14:9c:95:c5:d0:28:08:bb:d2:11:81:ad:99:62:fc:56:15:
c2:ef:4d:2c:d6:19:6c:cc:26:c6:ef:68:d6:87:d7:fc:14:ca:
d3:b7:bd:77:a8:d9:7b:5b:60:97:e5:83:10:75:f6:90:3d:f7:
06:12:c9:5a:2f:06:8b:27:a5:8d:ce:a9:d3:5b:91:a6:2d:e7:
c9:1f:5e:29:0d:83:d6:15:8c:cc:e7:e3:13:d6:52:b1:18:f1:
a7:6c:c3:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 14:20:39 2026 by rpki-client