Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d5/b60e15-16b7-466a-bc99-a04c7413dc83/1/iJTx14YVCd4rwVwaxUeywBf18lI.roa
File: iJTx14YVCd4rwVwaxUeywBf18lI.roa (raw, json)
Hash identifier: xQ7tSwmLx2KH0J0v4ZVAraiurkhkyKXt/qozzxQ0gmI=
Subject key identifier: 88:94:F1:D7:86:15:09:DE:2B:C1:5C:1A:C5:47:B2:C0:17:F5:F2:52
Certificate issuer: /CN=8e73c6bbafa01265026ad7474acbb951632f9dd8
Certificate serial: 01A120E4E9318A28050A8B7CF6BB5A8B8411
Authority key identifier: 8E:73:C6:BB:AF:A0:12:65:02:6A:D7:47:4A:CB:B9:51:63:2F:9D:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jnPGu6-gEmUCatdHSsu5UWMvndg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/b60e15-16b7-466a-bc99-a04c7413dc83/1/iJTx14YVCd4rwVwaxUeywBf18lI.roa
Signing time: Fri 09 Oct 2026 13:40:35 +0000
ROA not before: Fri 09 Oct 2026 13:40:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208723
IP address blocks: 2001:678:1370::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/b60e15-16b7-466a-bc99-a04c7413dc83/1/jnPGu6-gEmUCatdHSsu5UWMvndg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/b60e15-16b7-466a-bc99-a04c7413dc83/1/jnPGu6-gEmUCatdHSsu5UWMvndg.mft
rsync://rpki.ripe.net/repository/DEFAULT/jnPGu6-gEmUCatdHSsu5UWMvndg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 01:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:20:e4:e9:31:8a:28:05:0a:8b:7c:f6:bb:5a:8b:84:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e73c6bbafa01265026ad7474acbb951632f9dd8
Validity
Not Before: Oct 9 13:40:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8894f1d7861509de2bc15c1ac547b2c017f5f252
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:be:97:c3:68:e5:88:70:05:37:c1:90:1e:92:
1a:af:78:36:8f:8b:6b:bb:1f:da:0b:d3:3e:47:46:
b5:e0:c1:4c:41:3e:cf:d2:a4:7f:f3:9d:1f:09:fc:
02:c6:43:b6:e5:32:48:21:dd:02:42:ed:12:ac:82:
ac:29:49:b1:6e:0f:2c:24:bc:01:42:9d:26:c0:22:
68:e6:68:d0:20:5b:bc:12:c6:48:3e:99:64:80:91:
b8:4e:9c:db:33:a7:eb:58:3a:78:84:99:94:37:a2:
64:01:d7:f6:c1:5c:c8:6e:23:4c:5f:a4:34:44:7f:
00:62:9b:65:2c:f4:43:7c:f6:96:35:da:93:e4:2d:
c0:fc:6e:62:a2:33:4e:35:f3:16:9b:cb:e1:c7:1f:
66:65:80:2d:eb:8f:a9:7e:0b:21:ab:c6:6a:56:5e:
f4:df:af:cd:a7:3e:1c:d0:d3:8b:cb:49:4a:3c:94:
74:09:f1:e6:c1:ab:01:e6:fe:c3:3e:63:03:08:90:
8f:0b:9b:44:9e:04:db:0f:d9:43:5f:f0:23:d2:37:
2f:fe:56:6b:06:05:d2:29:7b:0c:e4:4f:5c:d6:1b:
5d:5a:25:48:d4:52:14:3d:02:e2:94:72:85:3b:d6:
a9:6a:8f:79:00:62:07:05:8e:c5:29:db:57:0b:e5:
03:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:94:F1:D7:86:15:09:DE:2B:C1:5C:1A:C5:47:B2:C0:17:F5:F2:52
X509v3 Authority Key Identifier:
keyid:8E:73:C6:BB:AF:A0:12:65:02:6A:D7:47:4A:CB:B9:51:63:2F:9D:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnPGu6-gEmUCatdHSsu5UWMvndg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b60e15-16b7-466a-bc99-a04c7413dc83/1/iJTx14YVCd4rwVwaxUeywBf18lI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b60e15-16b7-466a-bc99-a04c7413dc83/1/jnPGu6-gEmUCatdHSsu5UWMvndg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:1370::/48
Signature Algorithm: sha256WithRSAEncryption
1b:49:d6:97:01:a3:11:d7:41:59:9a:2e:a1:61:cb:70:19:fb:
55:4b:ca:62:f5:d8:d8:cf:cb:14:6f:65:66:b8:dc:d5:84:07:
d0:1f:eb:51:f3:58:bb:c1:46:8c:5e:80:2f:62:13:9b:fd:44:
e3:d9:70:5c:25:00:45:f3:17:de:f9:fd:62:7e:f0:9b:ad:13:
d9:94:4b:be:b5:4b:d7:ae:1d:76:3d:ae:02:63:9c:54:61:3c:
b0:51:71:d8:60:ed:9f:57:a3:28:45:57:7e:13:fd:80:e2:34:
23:46:b0:bb:ff:3b:e1:dd:61:4d:da:ba:a4:01:cd:b4:d8:43:
ab:99:da:fc:02:8f:91:29:1a:a1:bf:e0:bc:cb:7d:ec:8c:66:
f9:58:49:f3:ea:2c:4d:e9:72:08:cb:f2:28:76:e8:cb:6d:d0:
ec:25:92:c7:5e:6e:85:52:64:3b:29:5d:ee:cc:1b:af:6d:df:
0f:da:59:8f:56:a8:e8:5b:50:f2:c2:a4:82:1a:b4:c9:59:04:
60:44:8b:20:1d:34:7e:50:8e:ea:21:9d:0d:2d:c7:d4:ba:c7:
87:1b:e1:f5:f2:c3:f6:0a:92:8b:b5:0a:96:c4:15:98:70:ac:
6e:2c:b9:f1:fd:c7:d5:c5:c9:58:5b:a9:93:77:d6:1a:cb:11:
65:a2:e1:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 11:42:00 2026 by rpki-client