Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/J3vzcKMRFcvugofD01F-WNUda7g.roa
File: J3vzcKMRFcvugofD01F-WNUda7g.roa (raw, json)
Hash identifier: tBjEDKKlNdNNr7PYENGOctFjWK7OCe+09gFHwhf+c+U=
Subject key identifier: 27:7B:F3:70:A3:11:15:CB:EE:82:87:C3:D3:51:7E:58:D5:1D:6B:B8
Certificate issuer: /CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Certificate serial: 019EDA5ADC2304319908C9FF96F84045B40D
Authority key identifier: 76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/J3vzcKMRFcvugofD01F-WNUda7g.roa
Signing time: Thu 18 Jun 2026 10:50:48 +0000
ROA not before: Thu 18 Jun 2026 10:50:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402402
IP address blocks: 2a11:1e80::/29 maxlen: 29
2a11:4300::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Jun 2026 19:57:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:da:5a:dc:23:04:31:99:08:c9:ff:96:f8:40:45:b4:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Validity
Not Before: Jun 18 10:50:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=277bf370a31115cbee8287c3d3517e58d51d6bb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:7a:92:72:db:1b:a5:f1:be:f7:34:3a:36:01:
02:a2:50:37:d7:0b:0b:a7:70:ac:02:09:d2:e6:d2:
b0:8a:44:a9:4b:0f:1b:45:8b:6a:d6:8f:c0:20:5e:
02:43:0d:6c:c2:0c:b7:20:43:a9:11:f7:0c:98:bc:
32:3e:cd:cb:47:98:88:89:99:31:de:1f:0b:87:15:
ed:9c:a2:ba:98:ac:d0:59:ff:17:a4:bc:da:28:f3:
2d:ed:e6:b3:a9:48:3e:fc:6a:c1:e6:1e:d2:e2:02:
c5:82:89:9a:7f:a5:36:0a:c7:98:39:ec:22:52:e9:
e6:28:be:ec:f0:72:fc:63:cc:ba:90:05:a4:14:38:
96:03:5d:6a:65:7a:24:18:dd:db:27:39:10:1a:b4:
66:5b:df:cd:33:0d:b7:f8:f4:6c:19:fa:18:cc:46:
74:d8:40:ca:5f:95:74:58:a0:f6:d4:cf:d2:b3:dd:
60:1e:56:c0:b6:3a:27:df:73:b6:b3:ac:b6:23:d6:
30:b4:51:3a:d3:6f:c6:4a:cd:d5:2d:3a:ba:c3:ab:
7f:a8:35:e2:44:e3:d9:b6:ba:b6:bb:49:5c:1e:ea:
25:9c:00:c9:b3:06:a2:26:aa:53:ea:78:ee:34:79:
52:ed:c5:10:a2:d5:e7:71:80:9d:06:62:9d:66:1c:
1a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:7B:F3:70:A3:11:15:CB:EE:82:87:C3:D3:51:7E:58:D5:1D:6B:B8
X509v3 Authority Key Identifier:
keyid:76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/J3vzcKMRFcvugofD01F-WNUda7g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:1e80::/29
2a11:4300::/29
Signature Algorithm: sha256WithRSAEncryption
54:ba:c6:fc:d7:20:bd:23:91:38:8a:42:f8:d3:0f:8d:fc:bb:
23:37:5c:11:b1:45:ee:95:f4:83:48:c9:64:c7:9a:d8:44:be:
ca:e4:ce:ee:c1:5f:4a:8d:98:23:e2:53:ff:03:0c:3d:1d:17:
a5:8a:74:17:7c:12:dd:f0:6a:57:d1:80:92:22:7e:df:83:02:
ca:f4:a1:26:c1:86:7c:48:91:12:ce:4e:53:55:86:17:63:97:
76:6e:b2:1e:59:8a:84:63:7c:80:04:15:ca:18:50:76:70:bf:
f0:53:9c:91:e6:e6:65:87:fd:41:e1:81:02:28:00:5b:f3:fa:
73:c1:92:33:34:8e:47:4f:90:ee:aa:4d:83:35:2b:b9:7e:66:
af:c0:c0:7b:7c:9b:3b:d4:d0:6a:20:88:4a:23:f5:e0:68:f4:
9e:ed:4b:07:0d:b1:c7:60:49:4f:1f:c0:7e:11:15:85:cf:5e:
cc:c6:ce:42:3b:0b:d3:b4:ae:e1:56:ef:de:44:5e:2b:2d:77:
c2:23:67:e9:91:3a:92:52:b3:9c:72:bd:63:41:b4:2a:53:49:
bb:49:7f:4f:b5:f0:81:d9:3d:0e:46:21:d0:9c:17:4f:04:e7:
97:41:70:14:dc:65:bd:37:ce:7d:0f:f5:93:14:50:72:2b:47:
67:53:4d:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 04:10:57 2026 by rpki-client