Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/JEPoCf-EYUOkMKYdpYPicxh4Dto.roa
File: JEPoCf-EYUOkMKYdpYPicxh4Dto.roa (raw, json)
Hash identifier: ygYIdbMxssBoNBZfckySgOF/8KlrqlmkcHPl37fUQhU=
Subject key identifier: 24:43:E8:09:FF:84:61:43:A4:30:A6:1D:A5:83:E2:73:18:78:0E:DA
Certificate issuer: /CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Certificate serial: 019F2D1D02EF47772A885E7046C2E87CE8E5
Authority key identifier: 56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/JEPoCf-EYUOkMKYdpYPicxh4Dto.roa
Signing time: Sat 04 Jul 2026 12:31:43 +0000
ROA not before: Sat 04 Jul 2026 12:31:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 19318
IP address blocks: 2a10:fa86:1000::/36 maxlen: 48
2a10:fa86:1000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:2d:1d:02:ef:47:77:2a:88:5e:70:46:c2:e8:7c:e8:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Validity
Not Before: Jul 4 12:31:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2443e809ff846143a430a61da583e27318780eda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2a:c0:ae:04:2e:3d:cb:cf:23:ad:11:71:c7:
3c:85:dd:64:83:9e:3a:af:5c:63:44:df:40:50:e1:
01:36:6d:fd:6e:6d:d5:6c:1f:8c:f2:50:64:bf:40:
66:2c:59:d4:e9:ec:85:34:63:81:b4:16:32:66:39:
a3:62:8a:37:4a:ec:2a:8f:97:da:66:e7:3d:62:5b:
2b:ac:9a:45:26:0c:13:92:25:57:19:df:a7:06:5b:
61:2e:76:1e:1e:d2:eb:63:31:fb:2f:c5:58:9a:3e:
17:78:7d:3a:dc:79:d5:36:30:56:da:3a:84:f9:06:
55:a1:99:d9:77:71:bb:67:3e:70:a0:26:99:b5:cd:
36:50:9e:fb:27:62:a4:fd:08:51:27:77:85:ca:bf:
ae:b3:7a:7e:d4:d6:48:84:a3:a3:8a:cd:d1:d3:88:
b0:51:97:5f:f4:0c:7d:78:ae:05:0e:0c:1b:28:a0:
af:c9:68:31:35:b5:5d:23:6b:2f:49:13:c0:56:24:
b1:74:6c:a6:25:0a:20:81:d5:d3:45:57:10:b3:42:
0d:68:82:e1:5b:39:21:f2:a0:85:b5:58:01:b6:99:
e8:4e:d1:82:98:29:ef:61:4a:54:69:31:68:a2:2a:
f9:9a:20:03:38:31:ca:01:de:49:ee:8b:8c:43:b3:
81:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:43:E8:09:FF:84:61:43:A4:30:A6:1D:A5:83:E2:73:18:78:0E:DA
X509v3 Authority Key Identifier:
keyid:56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/JEPoCf-EYUOkMKYdpYPicxh4Dto.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:fa86:1000::/36
Signature Algorithm: sha256WithRSAEncryption
0c:31:42:d7:dc:1a:0a:15:9e:86:7a:4c:ae:98:50:f1:72:b5:
c7:dc:45:81:41:a1:1a:33:78:12:4d:b3:91:90:23:d1:1c:fe:
02:ff:63:5d:4a:fb:9b:6f:85:1d:32:0c:5f:ea:00:35:df:8e:
96:8a:f5:44:90:15:98:5e:59:c2:32:b0:17:85:a2:f1:19:b5:
f0:30:0b:e7:a3:35:e1:6e:d2:dd:04:e2:30:7a:fb:31:24:28:
f4:c0:c3:91:17:7a:00:45:20:fe:dc:b8:77:9c:88:d4:4b:b4:
98:5f:b9:ad:36:0c:e5:ab:39:b0:52:22:96:c4:1e:c6:24:c6:
78:de:f5:c2:1a:e6:c3:dc:28:20:d7:6c:78:4e:16:4a:8b:29:
c8:7a:dc:fa:da:cb:a4:49:ec:9d:50:95:dc:b3:04:8b:37:87:
b4:2c:ef:98:1a:e2:93:9c:89:8d:30:3d:5c:2f:07:56:08:2d:
3e:61:fb:d7:19:76:f6:8a:46:39:09:cf:9e:6c:f8:db:76:33:
44:e4:72:e0:f9:14:4e:00:3c:3c:75:21:ea:f3:51:28:77:b9:
ba:a9:11:6d:ba:4c:9d:ef:57:f6:43:dc:9c:96:41:bd:d4:d9:
28:49:f5:3c:d6:b4:d5:eb:5f:92:ad:4d:44:1d:17:77:b3:b7:
ca:88:a8:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:59:38 2026 by rpki-client