Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/j_pQ567PxtEFN0NFhh0BqXvpHaM.roa
File: j_pQ567PxtEFN0NFhh0BqXvpHaM.roa (raw, json)
Hash identifier: 94tW2x3JP1sHJ7Q9G+UErg+1Oio7bKK68lX1BPcYyXQ=
Subject key identifier: 8F:FA:50:E7:AE:CF:C6:D1:05:37:43:45:86:1D:01:A9:7B:E9:1D:A3
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 01A05C6CA5450E76CC52FB543A4BE1B77E38
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/j_pQ567PxtEFN0NFhh0BqXvpHaM.roa
Signing time: Tue 01 Sep 2026 10:03:39 +0000
ROA not before: Tue 01 Sep 2026 10:03:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218811
IP address blocks: 2a0c:9a40:e030::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5c:6c:a5:45:0e:76:cc:52:fb:54:3a:4b:e1:b7:7e:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Sep 1 10:03:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8ffa50e7aecfc6d105374345861d01a97be91da3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8f:84:43:76:ea:89:ec:56:a8:33:92:d8:cd:
a9:55:06:e6:9b:c3:38:40:44:99:13:ff:cb:18:53:
66:a4:65:0d:a3:31:7b:49:e5:54:8a:3a:6f:26:78:
50:ce:c7:82:e4:fc:06:91:9f:4f:57:64:ea:15:84:
d2:04:7e:e7:a2:23:5e:34:07:e6:e1:ad:a6:88:ab:
4b:29:f6:ef:e4:1d:ad:69:9a:c3:c7:e0:5d:3d:c5:
e1:6e:39:70:17:48:00:52:96:85:14:30:33:87:94:
ac:c8:8a:96:67:27:79:19:99:78:7e:eb:2a:ec:7f:
38:1f:ae:80:c7:77:ee:92:8e:a7:58:c6:83:15:83:
d3:ec:56:55:be:19:fc:d5:c3:9a:f4:75:c8:bd:fa:
14:1f:19:56:a6:82:cc:f6:73:30:0f:b7:f6:18:eb:
8d:8a:24:1b:dc:fd:56:76:fc:2d:38:e4:a0:45:68:
47:31:86:be:3e:90:38:ed:e7:0e:7f:77:b2:ba:58:
d2:c3:36:aa:9e:18:67:d6:c9:5b:ea:c4:42:3f:ea:
55:b5:2d:71:00:d0:ee:bb:1f:8b:f4:84:34:cb:cd:
73:5c:79:2f:01:00:dd:45:d0:67:9b:59:c0:c8:08:
ce:d3:45:41:58:9b:f2:0d:32:f4:b8:ae:51:74:6e:
3d:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:FA:50:E7:AE:CF:C6:D1:05:37:43:45:86:1D:01:A9:7B:E9:1D:A3
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/j_pQ567PxtEFN0NFhh0BqXvpHaM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:e030::/48
Signature Algorithm: sha256WithRSAEncryption
c3:60:7d:5e:e2:80:5e:c4:9d:bd:d8:3a:a0:aa:f2:53:49:9a:
d5:86:26:ac:52:8f:27:61:41:da:06:03:87:a2:31:53:a7:a4:
2a:9a:f7:cd:67:60:e8:4a:ad:94:d7:c1:26:06:c9:9f:ae:e2:
fe:07:7c:97:54:bc:cd:ac:89:6f:2b:58:fa:48:27:42:60:47:
8c:40:65:25:00:a4:b0:99:f6:f6:17:ee:51:97:90:c7:84:df:
c1:59:1b:93:18:9f:2f:bc:dd:97:e5:ef:5a:87:33:d4:be:a8:
4a:17:50:42:32:cc:1a:6d:22:1a:9e:d3:c3:5e:6b:fc:53:8c:
d7:37:8d:0d:fb:36:e9:34:41:50:48:2e:3d:e1:16:f7:e1:44:
ab:0b:38:1e:90:de:70:68:d2:e5:41:c6:b0:ce:1d:42:c6:e8:
ab:12:01:bb:9e:60:d8:22:65:37:84:34:06:6e:77:65:a3:da:
73:d5:b9:74:d1:d3:e4:52:5e:78:72:51:aa:e5:14:a8:c9:b7:
9f:4a:d6:4d:e2:05:28:f7:3a:65:bd:3b:c7:87:af:96:b9:92:
9d:17:d0:1a:c7:86:61:f8:f7:bb:f6:96:59:d5:59:67:4b:62:
b6:34:ae:e4:aa:56:ef:07:bf:be:35:57:a6:21:08:92:4e:19:
41:c7:40:9c
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAaBcbKVFDnbMUvtUOkvht344MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl
NDgwMDgwHhcNMjYwOTAxMTAwMzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZmZhNTBlN2FlY2ZjNmQxMDUzNzQzNDU4NjFkMDFhOTdiZTkxZGEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4+EQ3bqiexWqDOS2M2pVQbmm8M4
QESZE//LGFNmpGUNozF7SeVUijpvJnhQzseC5PwGkZ9PV2TqFYTSBH7noiNeNAfm
4a2miKtLKfbv5B2taZrDx+BdPcXhbjlwF0gAUpaFFDAzh5SsyIqWZyd5GZl4fusq
7H84H66Ax3fuko6nWMaDFYPT7FZVvhn81cOa9HXIvfoUHxlWpoLM9nMwD7f2GOuN
iiQb3P1WdvwtOOSgRWhHMYa+PpA47ecOf3eyuljSwzaqnhhn1slb6sRCP+pVtS1x
ANDuux+L9IQ0y81zXHkvAQDdRdBnm1nAyAjO00VBWJvyDTL0uK5RdG49ywIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFI/6UOeuz8bRBTdDRYYdAal76R2jMB8GA1UdIwQY
MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt
YmY0ZTUyN2I5ZmE4LzEval9wUTU2N1B4dEVGTjBORmhoMEJxWHZwSGFNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4
LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgyaQOAw
MA0GCSqGSIb3DQEBCwUAA4IBAQDDYH1e4oBexJ292DqgqvJTSZrVhiasUo8nYUHa
BgOHojFTp6QqmvfNZ2DoSq2U18EmBsmfruL+B3yXVLzNrIlvK1j6SCdCYEeMQGUl
AKSwmfb2F+5Rl5DHhN/BWRuTGJ8vvN2X5e9ahzPUvqhKF1BCMswabSIantPDXmv8
U4zXN40N+zbpNEFQSC494Rb34USrCzgekN5waNLlQcawzh1CxuirEgG7nmDYImU3
hDQGbndlo9pz1bl00dPkUl54clGq5RSoybefStZN4gUo9zplvTvHh6+WuZKdF9Aa
x4Zh+Pe79pZZ1VlnS2K2NK7kqlbvB7++NVemIQiSThlBx0Cc
-----END CERTIFICATE-----
Generated at Fri Sep 4 22:48:23 2026 by rpki-client