Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/2fa624-5b5d-4646-b13d-16511a6ed9c6/1/J_rm4irlXyul-9SSioq0J12OhGw.roa
File: J_rm4irlXyul-9SSioq0J12OhGw.roa (raw, json)
Hash identifier: NMx7tZKe46TFJ5ivGujHYkVVqt05EhMgXUNXkv1EpJs=
Subject key identifier: 27:FA:E6:E2:2A:E5:5F:2B:A5:FB:D4:92:8A:8A:B4:27:5D:8E:84:6C
Certificate issuer: /CN=8d454567bc458c46d9949a6c10e6da158aa7a5c0
Certificate serial: 019F236925B794CDB9D4D4F7C6E37D31825B
Authority key identifier: 8D:45:45:67:BC:45:8C:46:D9:94:9A:6C:10:E6:DA:15:8A:A7:A5:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jUVFZ7xFjEbZlJpsEObaFYqnpcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/2fa624-5b5d-4646-b13d-16511a6ed9c6/1/J_rm4irlXyul-9SSioq0J12OhGw.roa
Signing time: Thu 02 Jul 2026 15:18:41 +0000
ROA not before: Thu 02 Jul 2026 15:18:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60522
IP address blocks: 194.76.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/2fa624-5b5d-4646-b13d-16511a6ed9c6/1/jUVFZ7xFjEbZlJpsEObaFYqnpcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/2fa624-5b5d-4646-b13d-16511a6ed9c6/1/jUVFZ7xFjEbZlJpsEObaFYqnpcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/jUVFZ7xFjEbZlJpsEObaFYqnpcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:25:b7:94:cd:b9:d4:d4:f7:c6:e3:7d:31:82:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d454567bc458c46d9949a6c10e6da158aa7a5c0
Validity
Not Before: Jul 2 15:18:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=27fae6e22ae55f2ba5fbd4928a8ab4275d8e846c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:48:63:6a:ad:7b:0a:43:d3:94:31:94:bf:bb:
41:4c:df:fe:c4:87:17:b8:06:9e:aa:5f:36:c8:c6:
75:e8:ff:7d:46:a2:47:d3:75:af:7b:40:ee:b2:db:
91:71:58:30:ff:fe:28:2f:9a:4f:cf:fc:66:a3:23:
a1:a7:ea:38:95:aa:5c:70:d9:ba:14:fd:4b:20:d2:
3a:7a:c5:dd:d0:99:34:2b:09:f1:10:7b:63:37:fe:
bb:1b:ce:1e:9b:09:09:9a:e0:90:3f:62:f0:16:e0:
59:9c:27:e5:20:85:c6:52:5f:13:06:2a:d2:89:3b:
95:92:f9:5b:17:88:46:98:62:0f:80:b3:34:13:01:
6e:26:20:15:f9:cc:f0:04:6c:e0:0f:38:8a:1e:99:
60:7f:88:5d:bf:15:2e:c3:fe:7a:29:c8:c3:f4:64:
0c:45:64:dc:bd:ae:79:e0:42:30:b1:76:9f:26:57:
ca:cc:34:c8:a1:96:e3:f5:b1:cd:3c:e5:ea:88:a7:
8b:d9:b7:d2:00:d7:62:6b:64:74:14:71:b7:cd:30:
c9:44:85:d7:50:b2:dd:6c:8c:14:c8:bb:2a:2f:e7:
3f:1e:93:86:4f:c6:d4:e2:7f:bf:69:ca:c4:7e:d7:
e4:fc:b9:eb:3d:69:d5:72:12:38:9a:99:e8:4d:f0:
13:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:FA:E6:E2:2A:E5:5F:2B:A5:FB:D4:92:8A:8A:B4:27:5D:8E:84:6C
X509v3 Authority Key Identifier:
keyid:8D:45:45:67:BC:45:8C:46:D9:94:9A:6C:10:E6:DA:15:8A:A7:A5:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jUVFZ7xFjEbZlJpsEObaFYqnpcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2fa624-5b5d-4646-b13d-16511a6ed9c6/1/J_rm4irlXyul-9SSioq0J12OhGw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2fa624-5b5d-4646-b13d-16511a6ed9c6/1/jUVFZ7xFjEbZlJpsEObaFYqnpcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.76.14.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:da:0a:fe:61:39:61:4c:11:cb:47:db:56:1a:20:93:bb:0d:
c1:37:97:89:d6:8c:82:9b:58:72:5c:53:51:d8:1c:7c:90:62:
e8:cd:a8:2f:e9:3b:75:ca:9c:58:bd:b3:d3:7a:5b:d2:03:9c:
b8:45:26:de:10:bd:8e:5f:1f:eb:7c:72:ec:f8:7f:92:89:f0:
5b:6d:f4:35:cc:79:0c:d4:8f:b2:b0:28:b4:80:18:2c:a8:82:
f4:53:57:7b:85:58:b0:4b:b4:3e:50:19:6f:d0:fc:98:73:f1:
bd:96:f9:fd:27:b4:73:59:da:67:0d:d5:16:39:53:9e:eb:13:
f0:6e:62:51:b2:fd:b6:64:0b:8b:3a:0c:e1:09:ba:1b:b6:c0:
03:2b:88:ae:6e:c6:ec:7c:47:e1:41:85:5d:37:15:c2:ea:a9:
b5:4d:a9:9f:6c:d4:12:ac:30:9f:bc:48:d1:c3:76:eb:fa:1e:
4d:4c:6b:d0:83:1d:d2:00:78:cf:8f:09:71:da:98:61:e3:4a:
13:03:51:fa:38:fa:b2:48:cf:7c:b3:f5:0e:db:ba:e8:a0:5b:
a3:d2:1d:82:e4:d3:f6:8f:a1:c6:64:0b:4b:22:17:52:f4:a0:
60:f2:00:83:c1:00:88:68:d5:d2:2d:7f:37:9d:47:0a:f9:84:
71:a5:43:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:56:32 2026 by rpki-client