Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3f/edbdc7-f7db-46a3-a8e3-e58000a93b21/1/jtGa7noi7yl8uSIk7BOMJ-3IaJE.roa
File: jtGa7noi7yl8uSIk7BOMJ-3IaJE.roa (raw, json)
Hash identifier: i3+EeBzN3LTd/HMyMnLMxd2fm4Q+3ctYcGMs82R4c+w=
Subject key identifier: 8E:D1:9A:EE:7A:22:EF:29:7C:B9:22:24:EC:13:8C:27:ED:C8:68:91
Certificate issuer: /CN=a908487a0d7f4c6228d0dcc129a2a8320db8dbf1
Certificate serial: 01A12FACD72F1B961006E4D6EA006AD75BE9
Authority key identifier: A9:08:48:7A:0D:7F:4C:62:28:D0:DC:C1:29:A2:A8:32:0D:B8:DB:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qQhIeg1_TGIo0NzBKaKoMg242_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/edbdc7-f7db-46a3-a8e3-e58000a93b21/1/jtGa7noi7yl8uSIk7BOMJ-3IaJE.roa
Signing time: Mon 12 Oct 2026 10:33:38 +0000
ROA not before: Mon 12 Oct 2026 10:33:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218479
IP address blocks: 2a0d:f906::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/edbdc7-f7db-46a3-a8e3-e58000a93b21/1/qQhIeg1_TGIo0NzBKaKoMg242_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/edbdc7-f7db-46a3-a8e3-e58000a93b21/1/qQhIeg1_TGIo0NzBKaKoMg242_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/qQhIeg1_TGIo0NzBKaKoMg242_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2f:ac:d7:2f:1b:96:10:06:e4:d6:ea:00:6a:d7:5b:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a908487a0d7f4c6228d0dcc129a2a8320db8dbf1
Validity
Not Before: Oct 12 10:33:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8ed19aee7a22ef297cb92224ec138c27edc86891
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:6f:d5:c1:fd:58:0a:ef:51:86:7f:dd:f2:95:
0e:68:66:65:3f:70:d9:20:73:8a:88:29:e0:cc:89:
fb:b6:b0:7f:64:2e:72:73:ad:5c:b3:d9:df:4a:df:
0d:79:2e:c6:59:6d:85:3f:3b:59:3d:f7:11:26:27:
53:d4:f6:c7:ea:44:4d:9e:4d:6c:f7:99:0c:49:eb:
03:54:8c:8c:92:bd:51:51:07:d2:9a:1a:48:6f:db:
de:37:5a:80:43:10:b4:02:88:26:8f:53:3a:70:2a:
0f:75:81:c4:6d:9f:18:07:12:d5:37:ae:ef:74:8b:
e5:57:a8:f7:af:db:ef:74:09:3c:58:a1:f8:10:ef:
8e:c8:85:39:93:7b:4d:1e:7c:91:84:04:7d:7a:41:
98:65:a9:73:e8:a4:07:03:94:6d:1a:c3:4c:4c:4c:
c6:c6:e2:42:52:3a:fe:8c:e2:a6:bc:74:6b:86:41:
df:1c:89:da:79:7b:a3:6a:1c:b7:ca:06:ab:a2:1a:
2a:9c:e1:89:2a:89:27:b1:59:fd:cc:1e:c0:60:70:
50:d3:09:6e:ec:65:e6:e4:d9:9b:e6:37:43:2e:ff:
c1:b1:1d:ea:dc:55:ce:fd:bd:87:1c:e2:f3:08:79:
df:de:28:37:56:eb:4e:06:ad:64:3c:d9:21:e6:9e:
c6:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:D1:9A:EE:7A:22:EF:29:7C:B9:22:24:EC:13:8C:27:ED:C8:68:91
X509v3 Authority Key Identifier:
keyid:A9:08:48:7A:0D:7F:4C:62:28:D0:DC:C1:29:A2:A8:32:0D:B8:DB:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qQhIeg1_TGIo0NzBKaKoMg242_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/edbdc7-f7db-46a3-a8e3-e58000a93b21/1/jtGa7noi7yl8uSIk7BOMJ-3IaJE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/edbdc7-f7db-46a3-a8e3-e58000a93b21/1/qQhIeg1_TGIo0NzBKaKoMg242_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:f906::/44
Signature Algorithm: sha256WithRSAEncryption
b6:14:a6:d7:50:b0:d3:cf:35:35:b3:51:bb:6f:ea:14:53:66:
14:a9:d3:3d:1a:36:ed:5a:00:10:cb:5e:27:04:b4:29:53:30:
82:18:ee:8e:7a:05:45:23:7e:60:2a:ef:ef:c8:e3:70:ba:a5:
86:8e:2b:d4:fd:4f:2d:84:90:c0:bf:b3:92:e5:ac:4c:b7:e7:
5a:b1:9d:0d:d4:4e:f3:73:57:70:1f:cc:e5:a2:2c:da:7f:3f:
da:2a:1d:3e:f0:3e:a5:da:d1:38:01:1a:cb:d4:34:d5:6a:c2:
a2:9d:dd:b4:80:cd:c3:8f:e8:d5:39:3d:30:9c:4b:33:90:d4:
0b:e9:02:53:7a:72:69:11:db:c9:c4:29:32:01:0e:09:4d:73:
c7:2a:00:c6:46:81:07:a7:60:58:be:3c:7b:e1:ab:dd:41:63:
5f:2c:82:d0:79:80:4a:4f:63:53:42:b2:22:21:9f:6f:d6:73:
7c:43:df:30:d6:0a:32:ac:6d:74:c6:91:0a:f3:14:5d:71:31:
63:81:e5:c5:56:4b:53:37:ee:f2:88:53:11:1b:35:e5:c6:71:
2f:3b:1d:fc:c4:03:62:43:a8:a5:4b:37:9e:3e:30:50:58:63:
6e:bb:3f:fa:ca:66:f2:20:b9:2c:52:7a:02:79:48:43:8d:2d:
b8:a8:28:4f
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAaEvrNcvG5YQBuTW6gBq11vpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5MDg0ODdhMGQ3ZjRjNjIyOGQwZGNjMTI5YTJhODMyMGRi
OGRiZjEwHhcNMjYxMDEyMTAzMzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZWQxOWFlZTdhMjJlZjI5N2NiOTIyMjRlYzEzOGMyN2VkYzg2ODkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlm/Vwf1YCu9Rhn/d8pUOaGZlP3DZ
IHOKiCngzIn7trB/ZC5yc61cs9nfSt8NeS7GWW2FPztZPfcRJidT1PbH6kRNnk1s
95kMSesDVIyMkr1RUQfSmhpIb9veN1qAQxC0Aogmj1M6cCoPdYHEbZ8YBxLVN67v
dIvlV6j3r9vvdAk8WKH4EO+OyIU5k3tNHnyRhAR9ekGYZalz6KQHA5RtGsNMTEzG
xuJCUjr+jOKmvHRrhkHfHInaeXujahy3ygarohoqnOGJKoknsVn9zB7AYHBQ0wlu
7GXm5Nmb5jdDLv/BsR3q3FXO/b2HHOLzCHnf3ig3VutOBq1kPNkh5p7GWwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFI7Rmu56Iu8pfLkiJOwTjCftyGiRMB8GA1UdIwQY
MBaAFKkISHoNf0xiKNDcwSmiqDINuNvxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVFoSWVnMV9UR0lvME56QkthS29NZzI0Ml9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9lZGJkYzctZjdkYi00NmEzLWE4ZTMt
ZTU4MDAwYTkzYjIxLzEvanRHYTdub2k3eWw4dVNJazdCT01KLTNJYUpFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi9lZGJkYzctZjdkYi00NmEzLWE4ZTMtZTU4MDAwYTkzYjIx
LzEvcVFoSWVnMV9UR0lvME56QkthS29NZzI0Ml9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg35BgAA
MA0GCSqGSIb3DQEBCwUAA4IBAQC2FKbXULDTzzU1s1G7b+oUU2YUqdM9GjbtWgAQ
y14nBLQpUzCCGO6OegVFI35gKu/vyONwuqWGjivU/U8thJDAv7OS5axMt+dasZ0N
1E7zc1dwH8zloizafz/aKh0+8D6l2tE4ARrL1DTVasKind20gM3Dj+jVOT0wnEsz
kNQL6QJTenJpEdvJxCkyAQ4JTXPHKgDGRoEHp2BYvjx74avdQWNfLILQeYBKT2NT
QrIiIZ9v1nN8Q98w1goyrG10xpEK8xRdcTFjgeXFVktTN+7yiFMRGzXlxnEvOx38
xANiQ6ilSzeePjBQWGNuuz/6ymbyILksUnoCeUhDjS24qChP
-----END CERTIFICATE-----
Generated at Sun Oct 18 18:27:50 2026 by rpki-client