Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/j1Upirs2MNzHMgU0rSOBfcV3T5w.roa
File: j1Upirs2MNzHMgU0rSOBfcV3T5w.roa (raw, json)
Hash identifier: c56K883yJST4y/mdsdrULKCfe6KxnqP3AYA6irUfMKc=
Subject key identifier: 8F:55:29:8A:BB:36:30:DC:C7:32:05:34:AD:23:81:7D:C5:77:4F:9C
Certificate issuer: /CN=e760126dce78bc16e66c2e6e7635848ac46846af
Certificate serial: 01A0D99FA88C73B4B35E15ED26617B7A99F5
Authority key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/j1Upirs2MNzHMgU0rSOBfcV3T5w.roa
Signing time: Fri 25 Sep 2026 17:31:54 +0000
ROA not before: Fri 25 Sep 2026 17:31:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207821
IP address blocks: 146.247.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:9f:a8:8c:73:b4:b3:5e:15:ed:26:61:7b:7a:99:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e760126dce78bc16e66c2e6e7635848ac46846af
Validity
Not Before: Sep 25 17:31:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8f55298abb3630dcc7320534ad23817dc5774f9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:bd:ce:5e:6d:6a:1c:43:9c:f0:f2:17:88:22:
ab:34:15:ff:f0:4c:34:52:36:b5:22:9f:d6:7b:50:
62:6e:fb:bd:09:60:52:67:e5:51:44:49:01:39:ea:
e9:6f:8c:3d:8c:f9:02:82:a7:36:5d:62:f0:5b:c1:
80:b4:60:7e:87:6d:67:83:22:cd:a0:63:55:60:fb:
66:a4:b4:b7:16:9f:ff:fe:c1:87:70:62:d8:eb:6d:
a5:4e:19:3c:85:9c:22:a4:0a:1b:57:78:87:fc:8f:
10:a9:df:df:23:6e:d3:2f:ae:d1:c1:b3:d4:92:54:
3f:1a:56:fd:51:51:56:d7:c2:06:67:a9:f3:57:f0:
35:bd:e6:d9:8e:48:64:89:4b:de:0d:2a:74:9b:ed:
a1:97:eb:20:49:7a:c7:99:b5:26:8d:31:7e:8b:51:
9f:58:4e:3b:bf:f2:40:ec:77:e7:d0:cb:ee:18:9c:
72:bc:86:d1:1c:27:98:8a:67:9f:1b:0a:df:fd:25:
26:04:c3:99:d3:19:13:e2:35:7a:fb:13:3a:a5:5a:
d3:a0:ea:21:b6:c1:00:ea:ea:97:5c:21:5b:c8:72:
2d:61:2b:9f:18:c3:e9:ad:b1:cf:37:d2:d8:14:4a:
82:e3:63:dd:e9:80:ee:8d:1d:86:b5:6c:46:2b:57:
2c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:55:29:8A:BB:36:30:DC:C7:32:05:34:AD:23:81:7D:C5:77:4F:9C
X509v3 Authority Key Identifier:
keyid:E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/j1Upirs2MNzHMgU0rSOBfcV3T5w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.247.118.0/24
Signature Algorithm: sha256WithRSAEncryption
54:55:fd:1e:c6:88:7b:7c:a3:79:35:18:7a:74:2b:23:1c:4f:
2a:26:7c:f6:6d:d6:bc:23:28:b8:4d:2e:c2:f0:a4:16:57:a6:
ae:c0:18:d4:c6:52:2d:9f:0b:d7:ff:4e:51:6c:f6:10:bd:fb:
08:0f:ba:0d:09:76:6a:cd:c9:db:25:93:40:c2:4a:e5:3e:6b:
78:32:91:3b:7d:80:a7:c6:ea:d7:85:d3:4b:a1:06:66:12:7a:
5f:93:43:55:53:e7:76:e0:77:c5:12:a5:22:ce:f4:da:f9:52:
34:a4:2e:d4:a4:6b:69:86:b0:80:e3:e2:b8:12:6c:a3:10:36:
ed:b1:04:9a:c8:a1:02:b1:39:b5:f6:41:31:25:19:85:19:b7:
66:bd:74:4b:9e:5a:25:97:df:8e:32:a6:61:2c:18:9f:90:36:
19:a4:56:01:45:43:93:58:4d:07:29:6b:50:e1:ec:e0:af:17:
3b:52:f1:aa:b5:60:48:69:62:54:6a:20:f4:ec:b6:2e:c5:26:
56:3e:10:dc:0f:58:15:50:9d:73:84:4f:fb:45:ab:08:c5:0a:
26:d6:40:fb:f4:a8:3e:02:50:6c:b9:88:39:8e:a5:c2:3f:ce:
bd:9a:2d:c0:3e:72:17:28:8c:d6:8a:ed:40:98:56:57:dd:7a:
e5:a6:98:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 17:32:28 2026 by rpki-client