Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/JVO9r5NOS---QFGoZFUcpr4D-3s.roa
File: JVO9r5NOS---QFGoZFUcpr4D-3s.roa (raw, json)
Hash identifier: qeBVNF598tkSPywJvbfG/Fa0maqzCAtARXWZRU0k3S8=
Subject key identifier: 25:53:BD:AF:93:4E:4B:EF:BE:40:51:A8:64:55:1C:A6:BE:03:FB:7B
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 019F5B621CFE862ACEADA60D80147798205F
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/JVO9r5NOS---QFGoZFUcpr4D-3s.roa
Signing time: Mon 13 Jul 2026 12:09:44 +0000
ROA not before: Mon 13 Jul 2026 12:09:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204916
IP address blocks: 2a12:644::/32 maxlen: 32
2a12:d806::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 05:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:5b:62:1c:fe:86:2a:ce:ad:a6:0d:80:14:77:98:20:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Jul 13 12:09:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2553bdaf934e4befbe4051a864551ca6be03fb7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:28:2f:a7:3c:21:68:f9:d8:10:a4:c4:34:39:
ea:f1:99:35:80:43:0d:62:6a:97:48:f0:3f:32:a7:
85:47:ba:e5:9c:78:30:45:d0:08:5f:40:0c:c0:d4:
4f:89:97:14:c3:c4:2e:8a:4f:a8:0e:13:4b:46:ad:
10:b7:97:81:13:f7:81:d1:c2:6c:45:59:bc:b8:e7:
e9:66:f2:7d:0f:31:e5:f4:57:57:28:47:a1:e8:9f:
53:73:82:8f:80:a6:3d:6d:a2:6a:b0:25:5a:c5:89:
9b:33:86:d2:79:ed:38:47:2a:c9:6b:be:98:3e:09:
84:f6:0d:72:7c:cb:68:b0:b4:20:a4:c1:56:d8:52:
25:88:cf:fd:d0:61:bc:59:bf:52:f7:2a:3a:05:43:
c5:be:f3:80:61:a2:9f:bc:ea:5d:fd:d8:99:93:f1:
1b:04:cc:c3:82:03:ed:ae:66:02:a4:b3:d3:02:bd:
4b:51:ae:7a:ab:48:c2:e5:4c:87:37:70:4f:04:ec:
f5:47:87:ab:f9:86:96:df:e6:ed:e7:0e:64:fc:78:
2a:4f:47:cf:89:38:c4:5f:49:7d:bc:97:86:af:ad:
ee:61:a0:fd:61:91:91:7f:39:10:d6:3b:42:af:ee:
64:5c:a5:a2:57:1a:2f:5e:61:32:39:c9:2f:14:a0:
9b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:53:BD:AF:93:4E:4B:EF:BE:40:51:A8:64:55:1C:A6:BE:03:FB:7B
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/JVO9r5NOS---QFGoZFUcpr4D-3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:644::/32
2a12:d806::/32
Signature Algorithm: sha256WithRSAEncryption
7e:38:1a:ec:9d:f9:8a:95:f8:9d:b6:7f:ba:d6:73:f2:b8:71:
95:4f:f9:da:41:5c:c7:d4:29:c4:c4:b3:f6:49:f7:1a:fd:0d:
6e:a0:e6:da:a4:e6:a7:f8:ac:7d:f5:59:e6:51:7d:5c:b3:eb:
c9:0b:8f:c2:ca:69:80:4a:06:d9:22:53:e2:43:1b:86:52:8e:
2f:60:3e:5c:6a:31:bf:b9:56:8e:c1:06:7d:df:80:2f:59:b9:
ec:ec:03:c6:9a:bf:a4:0a:2f:34:5f:09:bc:25:d3:59:78:e0:
4d:43:0f:a4:6c:02:b8:8f:59:68:b9:bd:e0:86:07:30:96:29:
ce:18:0f:82:58:35:6a:07:ba:1b:94:36:f2:f6:f2:24:8f:ae:
00:f9:cc:2c:f3:49:c7:8b:32:a1:3a:ed:ce:35:e5:4d:ce:b1:
63:95:1f:ed:44:c3:ba:7c:61:80:93:be:70:af:7f:a7:50:0c:
c8:f2:25:44:30:96:90:b8:e2:05:19:db:10:94:a9:0b:eb:83:
e4:f4:df:30:88:4d:51:4c:43:4e:f3:61:e3:53:1b:f6:4f:c1:
50:74:50:4f:28:b9:1e:1e:bd:87:ab:ea:ef:47:3f:fd:d3:e1:
82:fe:bb:3e:00:63:c8:8e:9e:05:e8:a5:34:c7:d6:1d:91:8b:
ed:00:0b:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:57:28 2026 by rpki-client