Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/3e7488-0623-4c67-89c7-cca5a5385f72/1/Jszha3pRavrqhLYF9llULjRDVPA.roa
File: Jszha3pRavrqhLYF9llULjRDVPA.roa (raw, json)
Hash identifier: sdO9tDDPhGXLEWym/ewpstRJHKQA4MEXZOgnSWY5UnA=
Subject key identifier: 26:CC:E1:6B:7A:51:6A:FA:EA:84:B6:05:F6:59:54:2E:34:43:54:F0
Certificate issuer: /CN=f9acf02c1ce2067cfa4aca4d7fd1cb0037fde2f2
Certificate serial: 019FA881EBA3E3D118C82AC367FE8E9D810F
Authority key identifier: F9:AC:F0:2C:1C:E2:06:7C:FA:4A:CA:4D:7F:D1:CB:00:37:FD:E2:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-azwLBziBnz6SspNf9HLADf94vI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/3e7488-0623-4c67-89c7-cca5a5385f72/1/Jszha3pRavrqhLYF9llULjRDVPA.roa
Signing time: Tue 28 Jul 2026 11:35:14 +0000
ROA not before: Tue 28 Jul 2026 11:35:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198719
IP address blocks: 2001:678:125c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/3e7488-0623-4c67-89c7-cca5a5385f72/1/1-azwLBziBnz6SspNf9HLADf94vI.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/3e7488-0623-4c67-89c7-cca5a5385f72/1/1-azwLBziBnz6SspNf9HLADf94vI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-azwLBziBnz6SspNf9HLADf94vI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:81:eb:a3:e3:d1:18:c8:2a:c3:67:fe:8e:9d:81:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9acf02c1ce2067cfa4aca4d7fd1cb0037fde2f2
Validity
Not Before: Jul 28 11:35:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=26cce16b7a516afaea84b605f659542e344354f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:52:6f:d3:0d:0f:24:6f:56:05:49:f7:1c:05:
02:d1:55:ce:ad:40:bb:35:b5:16:e6:b6:6e:47:20:
e1:60:a9:8e:b0:c4:cf:c6:fc:80:3e:bb:40:f9:f2:
78:1f:e4:cc:2d:6d:42:7a:00:6b:42:46:ce:be:3d:
25:0b:02:88:86:e9:9e:89:cd:5b:33:fe:ef:49:7a:
f2:46:0f:37:45:8a:91:a7:6e:1b:23:82:c7:e5:ec:
9d:b1:e1:a0:65:f1:4d:c7:60:5c:03:d6:d2:2e:e2:
f1:02:f5:39:2f:de:35:ab:75:d1:50:13:0c:8a:9b:
be:78:1e:3f:28:90:5c:0e:f2:b1:bd:50:b8:42:19:
61:9a:3c:66:a2:bb:79:72:0e:8a:aa:37:3c:bc:49:
e1:67:98:47:55:1d:e7:d0:5d:1d:c9:e4:22:a7:50:
7b:56:da:b4:83:9a:ca:1d:63:b1:df:24:42:a6:29:
1c:69:c4:7e:66:92:05:dc:3d:1c:5e:7d:80:b7:36:
69:e4:a0:b0:43:ca:b1:b6:67:57:fd:68:9c:36:69:
0b:49:69:b3:ce:13:b2:8f:45:c5:7e:67:74:85:6b:
0b:d2:3b:13:6d:41:e5:37:b0:5a:05:45:86:61:89:
6d:f0:09:fc:c0:ac:e6:34:cb:e3:85:88:0d:6e:cf:
f9:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:CC:E1:6B:7A:51:6A:FA:EA:84:B6:05:F6:59:54:2E:34:43:54:F0
X509v3 Authority Key Identifier:
keyid:F9:AC:F0:2C:1C:E2:06:7C:FA:4A:CA:4D:7F:D1:CB:00:37:FD:E2:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-azwLBziBnz6SspNf9HLADf94vI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/3e7488-0623-4c67-89c7-cca5a5385f72/1/Jszha3pRavrqhLYF9llULjRDVPA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/3e7488-0623-4c67-89c7-cca5a5385f72/1/1-azwLBziBnz6SspNf9HLADf94vI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:125c::/48
Signature Algorithm: sha256WithRSAEncryption
17:16:a2:af:71:ff:ec:cd:0e:c4:8b:0e:87:d4:5c:c7:33:cf:
6b:81:43:03:a3:86:9f:d2:dd:11:61:35:40:91:04:28:76:23:
a2:53:8b:9e:b3:8b:43:8c:0e:b5:89:6c:c9:b1:ad:85:53:4d:
8d:9b:a6:61:37:37:66:3c:02:c2:52:18:f0:1f:83:f1:ac:dd:
4b:2a:d1:7e:92:df:58:88:cf:da:55:e0:61:9c:76:27:66:98:
6d:b5:8d:a1:5c:7a:73:a7:26:90:30:a9:14:db:0d:64:c2:19:
88:52:18:25:e5:db:09:18:63:ef:9f:77:1b:bf:bb:bf:25:92:
99:c9:41:2a:12:ab:4a:fd:fa:7a:d1:ce:b3:5c:98:2f:38:b5:
5c:36:ac:39:80:e5:23:58:cf:fd:e0:bf:c2:03:f2:5d:fd:8c:
a3:a9:b1:9d:4b:47:34:73:7d:c0:d9:37:60:f1:2c:ad:f0:4e:
c7:49:91:01:cd:8f:d1:88:9e:a3:d9:cb:d9:8e:e3:3c:c6:8d:
0b:22:e7:f1:f8:af:94:ef:14:bc:8c:69:0c:a5:71:f8:08:7b:
24:77:fa:11:5a:25:55:58:22:53:7f:55:50:0e:7c:74:17:f3:
3f:f7:75:82:f4:4c:d9:76:11:66:26:ad:96:f5:4b:6c:89:f9:
5b:92:36:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 08:34:32 2026 by rpki-client