Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/jb5Ttt8o1LHXxpNDZirdrPhr2SU.roa
File: jb5Ttt8o1LHXxpNDZirdrPhr2SU.roa (raw, json)
Hash identifier: ttACpoxrucELWKqqdBLguLA4K1nFF0d6FXADpWtfXBI=
Subject key identifier: 8D:BE:53:B6:DF:28:D4:B1:D7:C6:93:43:66:2A:DD:AC:F8:6B:D9:25
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 019F4212034C360B2DD125551C4BCD63EFEC
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/jb5Ttt8o1LHXxpNDZirdrPhr2SU.roa
Signing time: Wed 08 Jul 2026 14:11:44 +0000
ROA not before: Wed 08 Jul 2026 14:11:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219370
IP address blocks: 2a0c:9a40:8bc0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:42:12:03:4c:36:0b:2d:d1:25:55:1c:4b:cd:63:ef:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jul 8 14:11:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8dbe53b6df28d4b1d7c69343662addacf86bd925
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:42:23:db:dc:e1:9f:3a:ff:13:3b:f7:80:b5:
5c:ac:bb:16:61:6a:2d:18:3d:64:1e:7d:75:e6:55:
9a:c1:14:b8:79:d4:3a:c7:bf:da:56:3d:89:9d:74:
03:7e:cf:89:04:fd:2e:3d:50:37:46:16:08:a4:03:
b3:fe:08:d5:5b:97:59:8c:9c:e9:96:40:91:06:68:
11:24:25:ce:5d:6e:88:cb:69:f6:6e:8d:c1:e2:a1:
e3:ad:32:b6:6d:bf:10:68:ac:46:9c:bc:39:18:8f:
9b:5e:e7:06:8d:0b:4f:55:85:0f:c6:37:bd:e9:b2:
3d:db:84:d8:24:fc:01:1d:86:58:ed:2b:2a:f3:96:
3d:2a:7c:42:88:d8:a7:81:f7:07:04:52:a7:9d:c6:
86:69:1a:39:7b:7f:f7:79:84:75:5d:bb:38:4b:e8:
52:1b:2d:8b:27:32:9c:3f:21:f7:57:66:3d:c0:c8:
c6:4a:c4:0e:0b:4b:d3:07:44:fb:90:2f:8c:50:9e:
ae:7a:95:24:67:e8:72:7f:9e:b0:22:69:6f:bc:87:
6c:28:d0:15:24:13:1c:e4:98:20:ba:2e:75:d4:39:
3f:7e:33:42:15:60:be:b1:5e:95:f1:33:47:bd:91:
ef:cd:4c:da:31:01:2e:e1:06:5b:ec:a5:0c:55:4d:
6c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:BE:53:B6:DF:28:D4:B1:D7:C6:93:43:66:2A:DD:AC:F8:6B:D9:25
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/jb5Ttt8o1LHXxpNDZirdrPhr2SU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8bc0::/44
Signature Algorithm: sha256WithRSAEncryption
24:65:e1:4e:61:a6:65:a1:c3:03:7b:81:94:0e:4a:e3:70:b7:
58:34:07:bd:b0:22:18:06:7d:63:2d:cb:79:3c:bb:3f:a0:33:
fd:fb:05:b7:79:bf:ae:db:f3:cd:72:31:98:41:b0:0d:1d:2c:
d9:54:fe:e4:c4:e6:8a:e8:ae:67:60:2d:8f:11:d7:84:e2:3c:
4f:16:b0:ac:22:c2:af:e7:b5:56:68:9a:6c:83:11:1e:34:77:
47:af:0e:dc:c2:cf:53:2c:c5:fa:01:d3:ae:d4:79:83:5d:f5:
6c:94:5c:4e:38:82:e7:74:f8:0e:96:21:7b:95:54:22:3a:cd:
45:67:34:28:26:48:15:71:63:1a:f0:44:0d:c8:c6:11:7e:47:
ad:03:06:68:07:9e:e0:8f:19:0c:28:93:0c:42:17:a6:38:23:
00:97:8b:e4:52:33:44:d7:0f:55:bd:e1:ca:35:e3:a2:ac:c0:
cf:94:4b:ae:6c:ed:9c:a7:ff:59:ef:99:66:80:e5:2c:e6:4e:
56:b6:a6:5c:ff:5e:53:47:20:cc:ac:39:c8:e2:66:44:b8:d0:
5f:e1:6c:da:4e:5a:83:b5:15:5c:29:72:df:8f:10:28:c4:75:
05:c9:3f:b3:ba:d4:e0:8d:17:83:74:75:60:17:d6:e3:44:d6:
da:68:89:dc
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZ9CEgNMNgst0SVVHEvNY+/sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl
NDgwMDgwHhcNMjYwNzA4MTQxMTQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZGJlNTNiNmRmMjhkNGIxZDdjNjkzNDM2NjJhZGRhY2Y4NmJkOTI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkIj29zhnzr/Ezv3gLVcrLsWYWot
GD1kHn115lWawRS4edQ6x7/aVj2JnXQDfs+JBP0uPVA3RhYIpAOz/gjVW5dZjJzp
lkCRBmgRJCXOXW6Iy2n2bo3B4qHjrTK2bb8QaKxGnLw5GI+bXucGjQtPVYUPxje9
6bI924TYJPwBHYZY7Ssq85Y9KnxCiNingfcHBFKnncaGaRo5e3/3eYR1Xbs4S+hS
Gy2LJzKcPyH3V2Y9wMjGSsQOC0vTB0T7kC+MUJ6uepUkZ+hyf56wImlvvIdsKNAV
JBMc5Jggui511Dk/fjNCFWC+sV6V8TNHvZHvzUzaMQEu4QZb7KUMVU1snQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFI2+U7bfKNSx18aTQ2Yq3az4a9klMB8GA1UdIwQY
MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt
YmY0ZTUyN2I5ZmE4LzEvamI1VHR0OG8xTEhYeHBORFppcmRyUGhyMlNVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4
LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgyaQIvA
MA0GCSqGSIb3DQEBCwUAA4IBAQAkZeFOYaZlocMDe4GUDkrjcLdYNAe9sCIYBn1j
Lct5PLs/oDP9+wW3eb+u2/PNcjGYQbANHSzZVP7kxOaK6K5nYC2PEdeE4jxPFrCs
IsKv57VWaJpsgxEeNHdHrw7cws9TLMX6AdOu1HmDXfVslFxOOILndPgOliF7lVQi
Os1FZzQoJkgVcWMa8EQNyMYRfketAwZoB57gjxkMKJMMQhemOCMAl4vkUjNE1w9V
veHKNeOirMDPlEuubO2cp/9Z75lmgOUs5k5WtqZc/15TRyDMrDnI4mZEuNBf4Wza
TlqDtRVcKXLfjxAoxHUFyT+zutTgjReDdHVgF9bjRNbaaInc
-----END CERTIFICATE-----
Generated at Tue Jul 21 14:44:20 2026 by rpki-client