Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/JsY1MyZsHL5ANMbfpG-T7jMw_y8.roa
File: JsY1MyZsHL5ANMbfpG-T7jMw_y8.roa (raw, json)
Hash identifier: pQyN/5D9ZvxBU6uwZJK5W/iJTHv6a0dHP0ytT676nXk=
Subject key identifier: 26:C6:35:33:26:6C:1C:BE:40:34:C6:DF:A4:6F:93:EE:33:30:FF:2F
Certificate issuer: /CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8
Certificate serial: 019ECA9A395CE39142832ED39F83BF8B11EF
Authority key identifier: 49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/JsY1MyZsHL5ANMbfpG-T7jMw_y8.roa
Signing time: Mon 15 Jun 2026 09:26:05 +0000
ROA not before: Mon 15 Jun 2026 09:26:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 132337
IP address blocks: 2a0a:ca40::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ca:9a:39:5c:e3:91:42:83:2e:d3:9f:83:bf:8b:11:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8
Validity
Not Before: Jun 15 09:26:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=26c63533266c1cbe4034c6dfa46f93ee3330ff2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9f:f2:a6:ff:b5:5d:25:ca:09:13:97:82:b5:
b1:8f:f3:7e:1e:70:4f:c0:0b:13:fc:c3:f4:0b:08:
47:e9:ec:e3:fa:69:25:b2:66:d4:03:fa:86:96:e3:
83:c7:03:3d:be:0b:8b:9c:25:5b:5a:bb:51:f5:82:
74:22:b5:fc:35:b3:f0:6e:71:9d:42:3b:14:e2:ba:
b7:10:99:e1:4b:f7:b9:3b:bf:86:9e:6b:1d:3d:74:
39:23:c2:e2:b7:9d:60:88:c6:fd:a7:5d:9d:b3:cf:
42:c6:99:68:16:47:ca:4e:ce:02:f7:d7:18:fd:56:
4c:06:d6:56:27:b3:59:6d:1c:da:de:73:24:9e:d3:
ac:4d:d4:22:7c:7d:c1:05:4d:98:b4:78:84:43:95:
ec:47:44:6c:dc:96:e7:05:de:71:87:06:dd:fa:aa:
dd:e4:87:e0:ad:81:a5:f3:36:75:b1:44:70:75:5f:
90:71:ae:3c:d9:7c:04:c0:c6:e8:28:56:c0:f3:33:
90:35:96:7b:4d:23:c0:1d:29:a2:7e:61:57:8d:6f:
99:86:46:97:7c:cb:75:0f:3f:b9:7f:50:97:a4:cb:
7a:81:33:77:38:5b:e5:5b:10:31:f4:e3:fa:c7:22:
c8:a9:a3:66:d8:41:90:26:b2:24:87:ae:85:25:f7:
c1:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:C6:35:33:26:6C:1C:BE:40:34:C6:DF:A4:6F:93:EE:33:30:FF:2F
X509v3 Authority Key Identifier:
keyid:49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/JsY1MyZsHL5ANMbfpG-T7jMw_y8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:ca40::/29
Signature Algorithm: sha256WithRSAEncryption
55:af:d1:6e:7b:fb:38:cf:f8:77:d5:01:ab:e7:4a:09:1a:8b:
15:c8:2b:97:60:3d:60:b6:16:ba:a6:5c:45:5f:f8:5d:86:f0:
73:3b:5d:7e:5c:4b:7e:31:70:2e:67:d8:12:85:c6:0b:c5:ff:
10:c4:0f:70:05:d9:9f:e6:05:45:7c:be:70:f6:1e:1e:af:73:
2b:3d:e6:48:e9:81:37:a3:90:38:f5:ac:ec:f9:51:7d:a3:23:
37:a9:08:97:7a:3c:60:6d:31:0d:f2:e9:09:70:01:67:a8:61:
81:3c:76:15:f0:6f:53:d1:71:af:89:e9:e5:db:6d:3e:11:d6:
99:f9:18:f1:bd:a2:3b:4b:d1:dc:2d:da:b5:99:e2:05:f4:99:
e8:d6:ff:b5:3b:e3:6f:20:b7:78:6f:b5:5f:4d:ea:ad:32:eb:
fe:ae:b8:ac:34:ca:9d:2e:71:e0:e0:b7:9f:1b:fc:9f:df:82:
a0:99:7b:0c:98:2e:4c:ed:6b:22:36:f7:2f:13:d2:1a:96:f4:
85:25:fa:21:c8:41:8d:88:9d:69:d4:ae:08:57:f6:a0:4d:be:
04:92:71:de:2e:24:0c:97:a0:7d:3e:32:f5:1f:af:e2:1c:7d:
cb:9e:54:e1:06:52:0d:0b:72:54:c6:42:65:ab:ac:aa:85:88:
1d:81:b1:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 19:39:32 2026 by rpki-client