Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/jfXX0eo0M7zNsO6r_2HVIrPH0rY.roa
File: jfXX0eo0M7zNsO6r_2HVIrPH0rY.roa (raw, json)
Hash identifier: 6bziKwp41lGL+kLLxDDaUZq4wouJ11UmkiZ0aPML4Pc=
Subject key identifier: 8D:F5:D7:D1:EA:34:33:BC:CD:B0:EE:AB:FF:61:D5:22:B3:C7:D2:B6
Certificate issuer: /CN=256065b6166aef96fcff3a2ea56fdffd390f3166
Certificate serial: 01A14068E7D850142BA5BA927F608FBED328
Authority key identifier: 25:60:65:B6:16:6A:EF:96:FC:FF:3A:2E:A5:6F:DF:FD:39:0F:31:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JWBlthZq75b8_zoupW_f_TkPMWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/jfXX0eo0M7zNsO6r_2HVIrPH0rY.roa
Signing time: Thu 15 Oct 2026 16:32:59 +0000
ROA not before: Thu 15 Oct 2026 16:32:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218388
IP address blocks: 2a14:f705:c879::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/JWBlthZq75b8_zoupW_f_TkPMWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/JWBlthZq75b8_zoupW_f_TkPMWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/JWBlthZq75b8_zoupW_f_TkPMWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:68:e7:d8:50:14:2b:a5:ba:92:7f:60:8f:be:d3:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=256065b6166aef96fcff3a2ea56fdffd390f3166
Validity
Not Before: Oct 15 16:32:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8df5d7d1ea3433bccdb0eeabff61d522b3c7d2b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:d5:1b:06:c0:1e:d0:22:15:5f:bc:8f:02:34:
5c:2a:7d:d0:6f:ec:c9:17:67:ce:8f:2b:e8:47:88:
a8:38:a4:67:15:2b:05:31:d3:64:3f:bf:1d:dc:3d:
ec:de:d9:03:e7:52:ae:dd:ee:b9:de:12:88:f5:9d:
ba:ca:18:2d:d9:ff:ce:81:1b:80:b3:d2:c5:c1:90:
e1:28:ba:3d:6e:80:ca:0e:72:04:3d:9c:4b:8c:1d:
57:43:35:3b:25:95:3e:92:b3:07:c2:2b:80:7c:2c:
7f:a7:65:a1:30:c0:d8:47:98:b0:b4:b4:7f:53:71:
20:06:a2:99:63:c1:31:13:b5:bb:2e:ca:c2:01:63:
0c:46:36:ee:ad:d6:4b:f1:06:5b:12:32:1c:75:38:
4c:0b:6c:b1:ea:a7:a6:0d:d1:b8:44:ec:c3:21:25:
06:e0:75:fd:93:4c:18:83:ee:32:18:4b:a6:5c:cb:
4b:0f:b0:ec:23:d7:43:60:97:f0:01:cc:d9:7b:d3:
6e:68:05:06:e9:71:f9:d1:75:d2:e6:d3:3b:88:57:
4e:20:a6:0e:b4:f6:b0:ba:46:33:2a:f4:98:a6:ab:
fc:12:81:01:8e:10:2f:5e:4f:64:82:c5:17:61:c5:
79:45:30:12:f7:1c:cc:0e:ac:f9:ec:56:4c:b9:5a:
23:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:F5:D7:D1:EA:34:33:BC:CD:B0:EE:AB:FF:61:D5:22:B3:C7:D2:B6
X509v3 Authority Key Identifier:
keyid:25:60:65:B6:16:6A:EF:96:FC:FF:3A:2E:A5:6F:DF:FD:39:0F:31:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JWBlthZq75b8_zoupW_f_TkPMWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/jfXX0eo0M7zNsO6r_2HVIrPH0rY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/JWBlthZq75b8_zoupW_f_TkPMWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:f705:c879::/48
Signature Algorithm: sha256WithRSAEncryption
6e:26:16:e8:1c:5f:c1:7c:a3:c7:24:60:de:6d:8c:bd:5a:62:
db:f2:9b:00:01:27:ce:22:46:18:36:37:dd:cb:59:10:9e:25:
0d:54:45:f0:cf:60:79:fd:d2:ae:cc:9a:2e:83:24:31:2b:bc:
a3:b8:1b:65:0f:63:f3:62:52:52:c1:e2:b4:1f:18:b5:16:72:
99:be:b9:99:36:a4:69:7e:37:99:35:fa:c0:0c:5f:e3:a4:a2:
4b:75:fe:79:01:bc:4f:ce:01:93:47:3f:e1:ea:1f:17:01:54:
07:a0:ed:5e:c8:ea:c7:92:f9:4e:88:39:87:2b:47:cd:d7:8c:
ea:f0:15:34:1e:df:20:9a:c6:8a:23:ba:e4:20:a8:d4:dc:38:
56:e3:1b:45:17:9e:ae:23:35:c3:2d:b6:76:f8:e0:df:99:73:
61:e6:17:e8:41:d1:96:36:7c:ff:0b:02:eb:85:b0:ee:26:82:
b5:65:35:be:c5:f3:26:00:71:d9:a6:a4:d6:98:88:a6:24:ca:
37:aa:1a:38:ab:47:f9:a1:aa:8f:fa:0c:95:5d:51:29:e3:ec:
30:c3:c8:72:2b:5c:bd:f5:8b:cd:20:f6:0c:8c:04:64:86:2b:
6b:c5:02:3d:41:1c:fc:dc:72:46:ed:e3:4a:a3:49:b4:da:f7:
61:10:e0:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 00:13:58 2026 by rpki-client