Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/c8d4bc-f2f1-4ee5-940e-9fc85d02e71a/1/JrAu5bZl0zRa9cJcCCAcpIqfIfs.roa
File: JrAu5bZl0zRa9cJcCCAcpIqfIfs.roa (raw, json)
Hash identifier: guqkk+K0DVg8iaY3I5TNq7CBhcLqz4LQwKS2ySxE6Yk=
Subject key identifier: 26:B0:2E:E5:B6:65:D3:34:5A:F5:C2:5C:08:20:1C:A4:8A:9F:21:FB
Certificate issuer: /CN=6279f0a59fc8c6fd785953701ae72b56de5011ac
Certificate serial: 01980ECEC59F116A950A89B0F520B72172CC
Authority key identifier: 62:79:F0:A5:9F:C8:C6:FD:78:59:53:70:1A:E7:2B:56:DE:50:11:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YnnwpZ_Ixv14WVNwGucrVt5QEaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/c8d4bc-f2f1-4ee5-940e-9fc85d02e71a/1/JrAu5bZl0zRa9cJcCCAcpIqfIfs.roa
Signing time: Tue 15 Jul 2025 15:58:08 +0000
ROA not before: Tue 15 Jul 2025 15:58:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206470
IP address blocks: 2a13:e340::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/c8d4bc-f2f1-4ee5-940e-9fc85d02e71a/1/YnnwpZ_Ixv14WVNwGucrVt5QEaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/c8d4bc-f2f1-4ee5-940e-9fc85d02e71a/1/YnnwpZ_Ixv14WVNwGucrVt5QEaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/YnnwpZ_Ixv14WVNwGucrVt5QEaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 21:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:0e:ce:c5:9f:11:6a:95:0a:89:b0:f5:20:b7:21:72:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6279f0a59fc8c6fd785953701ae72b56de5011ac
Validity
Not Before: Jul 15 15:58:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=26b02ee5b665d3345af5c25c08201ca48a9f21fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:35:5a:0e:e5:ae:31:67:0d:d9:26:08:22:42:
c7:5d:e1:94:8f:da:84:c9:4b:31:17:8e:5a:cf:f2:
c9:b8:2a:ba:28:8d:3a:87:0e:40:49:05:61:5b:54:
b5:29:bf:12:82:3b:ef:3a:cc:76:12:71:04:5f:bc:
c2:d6:72:ee:d0:75:6c:e2:44:bb:1c:8a:af:d9:bf:
ed:cc:d5:a9:82:e9:3a:6a:ea:38:39:89:2c:a2:23:
9c:15:f3:b8:12:7d:21:a8:20:8a:35:2a:85:8d:dc:
c0:83:ba:31:bc:6f:46:75:e4:3a:30:94:66:f0:ab:
fc:a6:af:85:bc:94:96:53:2d:c2:6a:1e:ba:29:f4:
b9:d8:4c:95:5d:cd:58:67:5e:33:a9:64:dd:2e:a3:
88:89:99:55:22:31:27:af:90:dd:6a:38:b4:5c:84:
ab:48:9b:76:6d:b8:dc:96:7f:a0:7a:71:49:76:d6:
fa:07:61:d0:2f:22:ff:e9:97:6e:94:40:b5:70:ab:
f6:19:9b:25:4f:84:45:c6:1a:7e:80:fa:7e:62:07:
9c:fd:0b:01:81:db:b8:86:94:56:3c:35:a0:2b:dc:
bc:3d:05:83:af:a2:18:d5:14:83:8d:6a:b1:f1:d2:
76:50:a7:3b:e9:54:a7:2e:20:2b:1c:d6:60:6d:a9:
8a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:B0:2E:E5:B6:65:D3:34:5A:F5:C2:5C:08:20:1C:A4:8A:9F:21:FB
X509v3 Authority Key Identifier:
keyid:62:79:F0:A5:9F:C8:C6:FD:78:59:53:70:1A:E7:2B:56:DE:50:11:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YnnwpZ_Ixv14WVNwGucrVt5QEaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c8d4bc-f2f1-4ee5-940e-9fc85d02e71a/1/JrAu5bZl0zRa9cJcCCAcpIqfIfs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c8d4bc-f2f1-4ee5-940e-9fc85d02e71a/1/YnnwpZ_Ixv14WVNwGucrVt5QEaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:e340::/29
Signature Algorithm: sha256WithRSAEncryption
8d:ce:f4:82:fe:39:74:91:89:ed:a8:90:99:98:06:65:90:55:
c7:3d:f7:29:40:29:f6:66:4e:92:24:86:97:02:d4:69:c4:d8:
2c:06:0a:96:b2:7c:da:1a:3a:f4:40:cb:69:ea:ae:4b:42:63:
b2:42:95:f4:3b:8a:8d:dc:0b:50:5d:cc:7b:7c:67:10:8e:06:
10:2a:12:50:06:15:31:97:d2:9e:65:11:69:5c:45:22:37:ec:
b1:a8:ae:23:9d:4c:14:f8:7c:24:07:13:4c:2f:12:8b:d1:ea:
cf:3b:7e:3c:d4:96:85:1b:27:a0:8d:89:08:79:55:1d:37:0e:
2d:d4:9e:36:7f:ab:7f:a3:61:4d:57:5f:eb:6e:48:3f:e9:78:
f1:0f:65:d4:5b:ce:f1:3f:f9:1e:97:2a:5f:3e:1c:29:97:38:
8f:f8:37:0e:a6:7a:90:52:96:6d:51:46:ad:1a:50:cb:fc:24:
9c:1c:72:16:30:aa:28:d8:cb:6b:53:98:47:99:e0:eb:02:0c:
39:fc:1f:66:1c:ce:3c:74:7e:cc:a4:a4:7a:ef:b3:1a:04:42:
16:96:31:00:13:16:94:18:e6:fe:0d:72:da:37:d9:3a:e3:41:
ca:43:4d:10:14:9d:9c:44:79:38:ec:7e:83:f7:f8:d2:7a:9f:
de:2e:e7:1d
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZgOzsWfEWqVComw9SC3IXLMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyNzlmMGE1OWZjOGM2ZmQ3ODU5NTM3MDFhZTcyYjU2ZGU1
MDExYWMwHhcNMjUwNzE1MTU1ODA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNmIwMmVlNWI2NjVkMzM0NWFmNWMyNWMwODIwMWNhNDhhOWYyMWZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTVaDuWuMWcN2SYIIkLHXeGUj9qE
yUsxF45az/LJuCq6KI06hw5ASQVhW1S1Kb8SgjvvOsx2EnEEX7zC1nLu0HVs4kS7
HIqv2b/tzNWpguk6auo4OYksoiOcFfO4En0hqCCKNSqFjdzAg7oxvG9GdeQ6MJRm
8Kv8pq+FvJSWUy3Cah66KfS52EyVXc1YZ14zqWTdLqOIiZlVIjEnr5Ddaji0XISr
SJt2bbjcln+genFJdtb6B2HQLyL/6ZdulEC1cKv2GZslT4RFxhp+gPp+Ygec/QsB
gdu4hpRWPDWgK9y8PQWDr6IY1RSDjWqx8dJ2UKc76VSnLiArHNZgbamK1QIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFCawLuW2ZdM0WvXCXAggHKSKnyH7MB8GA1UdIwQY
MBaAFGJ58KWfyMb9eFlTcBrnK1beUBGsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWW5ud3BaX0l4djE0V1ZOd0d1Y3JWdDVRRWF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9jOGQ0YmMtZjJmMS00ZWU1LTk0MGUt
OWZjODVkMDJlNzFhLzEvSnJBdTViWmwwelJhOWNKY0NDQWNwSXFmSWZzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC9jOGQ0YmMtZjJmMS00ZWU1LTk0MGUtOWZjODVkMDJlNzFh
LzEvWW5ud3BaX0l4djE0V1ZOd0d1Y3JWdDVRRWF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhPjQDAN
BgkqhkiG9w0BAQsFAAOCAQEAjc70gv45dJGJ7aiQmZgGZZBVxz33KUAp9mZOkiSG
lwLUacTYLAYKlrJ82ho69EDLaequS0JjskKV9DuKjdwLUF3Me3xnEI4GECoSUAYV
MZfSnmURaVxFIjfssaiuI51MFPh8JAcTTC8Si9Hqzzt+PNSWhRsnoI2JCHlVHTcO
LdSeNn+rf6NhTVdf625IP+l48Q9l1FvO8T/5HpcqXz4cKZc4j/g3DqZ6kFKWbVFG
rRpQy/wknBxyFjCqKNjLa1OYR5ng6wIMOfwfZhzOPHR+zKSkeu+zGgRCFpYxABMW
lBjm/g1y2jfZOuNBykNNEBSdnER5OOx+g/f40nqf3i7nHQ==
-----END CERTIFICATE-----
Generated at Mon Jul 21 05:24:41 2025 by rpki-client