Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/jwB4zN15Dz0mBSEVC3TVgEW9Zpo.roa
File: jwB4zN15Dz0mBSEVC3TVgEW9Zpo.roa (raw, json)
Hash identifier: 5Pt3Ize/q+a+7aO+hYglfsfYUPua8ySbTiwN+zIbslM=
Subject key identifier: 8F:00:78:CC:DD:79:0F:3D:26:05:21:15:0B:74:D5:80:45:BD:66:9A
Certificate issuer: /CN=8d298d63970ab03cdfbf514fa0e8ed21310985f1
Certificate serial: 019CDA9E911666C559A86FA7E247A3E73326
Authority key identifier: 8D:29:8D:63:97:0A:B0:3C:DF:BF:51:4F:A0:E8:ED:21:31:09:85:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jSmNY5cKsDzfv1FPoOjtITEJhfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/jwB4zN15Dz0mBSEVC3TVgEW9Zpo.roa
Signing time: Wed 11 Mar 2026 01:59:10 +0000
ROA not before: Wed 11 Mar 2026 01:59:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 185.27.146.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/jSmNY5cKsDzfv1FPoOjtITEJhfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/jSmNY5cKsDzfv1FPoOjtITEJhfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/jSmNY5cKsDzfv1FPoOjtITEJhfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Mar 2026 13:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:da:9e:91:16:66:c5:59:a8:6f:a7:e2:47:a3:e7:33:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d298d63970ab03cdfbf514fa0e8ed21310985f1
Validity
Not Before: Mar 11 01:59:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8f0078ccdd790f3d260521150b74d58045bd669a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1e:c6:9c:16:38:aa:69:b0:10:38:9e:4b:13:
14:f9:8f:2d:59:e2:c1:84:e3:56:c7:d5:42:6e:5a:
08:e7:5b:b5:91:fe:1d:27:bb:fb:df:1e:d2:4f:11:
e1:49:6f:ce:9f:29:f8:56:08:da:ac:45:27:a1:04:
7b:81:9e:55:ac:5d:a0:19:a3:70:4e:8c:58:46:10:
f7:ce:d4:8f:6f:60:71:9d:24:0b:49:57:86:5a:26:
1b:22:e4:aa:de:8e:c8:ef:1e:dc:c3:73:67:39:9b:
c5:e9:03:91:5e:5b:28:62:4e:11:1e:31:00:f5:dc:
0c:ff:6c:ed:57:71:b6:26:5c:8f:bd:51:5d:41:e1:
fc:e7:32:cb:50:a3:0c:04:b8:4c:39:5a:73:59:73:
88:92:a2:61:41:7a:66:9c:11:a6:69:18:b3:35:d5:
2b:cf:9c:56:46:97:bd:73:ea:5e:96:4c:b2:c4:4d:
a4:e5:07:15:bd:a0:fd:fe:32:bf:dd:cf:a5:83:73:
17:e8:53:6c:42:5b:98:78:e9:1e:27:61:a6:b4:7e:
1b:a0:ec:52:3d:ff:6e:cd:6d:a2:1a:67:2d:5f:fa:
f9:0f:1f:be:89:85:4d:4a:c6:96:56:59:77:11:29:
ec:ef:13:fa:30:4a:35:fd:16:f1:2f:6f:bc:76:8a:
0f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:00:78:CC:DD:79:0F:3D:26:05:21:15:0B:74:D5:80:45:BD:66:9A
X509v3 Authority Key Identifier:
keyid:8D:29:8D:63:97:0A:B0:3C:DF:BF:51:4F:A0:E8:ED:21:31:09:85:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jSmNY5cKsDzfv1FPoOjtITEJhfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/jwB4zN15Dz0mBSEVC3TVgEW9Zpo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/jSmNY5cKsDzfv1FPoOjtITEJhfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.27.146.0/23
Signature Algorithm: sha256WithRSAEncryption
9b:99:94:29:21:f1:2b:72:39:e1:25:34:fa:e7:16:5e:18:10:
56:e2:4e:08:1f:27:6b:74:59:e9:c1:27:82:bf:23:03:76:97:
3b:a0:96:7c:1e:f6:f6:be:ed:13:94:25:ec:75:78:3a:32:9f:
11:29:00:a2:bc:e0:5e:97:4b:1d:02:af:49:4d:25:31:3f:0e:
35:95:7b:49:f8:0c:7e:64:e5:7c:c1:ab:3e:f2:90:81:c8:ec:
f6:5a:e7:eb:8b:3e:e5:7c:5c:91:74:80:9e:4a:22:d6:38:d6:
b0:e7:8a:91:ce:54:40:23:75:2f:0d:1b:c2:65:6d:71:08:54:
e7:bf:59:34:bb:79:52:ea:62:ef:ce:a6:c6:f6:16:54:ba:76:
a4:fe:66:05:9c:71:6f:29:b1:07:2a:76:9a:2b:2f:aa:0b:5f:
5b:ea:97:e4:13:d2:49:13:f1:27:58:ae:f6:6e:fe:03:64:b1:
5f:2c:2e:c0:29:61:40:a1:f6:92:a3:6f:8b:f6:19:a8:dd:1b:
15:8d:5e:8e:7f:2f:e2:c4:83:3d:f7:57:43:f4:eb:fd:31:95:
a5:1a:16:5a:e4:57:9e:6e:84:22:d1:ff:94:02:74:a4:fc:51:
74:32:5b:61:bb:b2:76:11:e0:bd:96:04:ee:b4:d9:86:6a:51:
7d:ef:a6:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 20:38:04 2026 by rpki-client