Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/accc6e-e074-4d66-9f01-3b5280880280/1/sJCGnJbbwiHipYYa4eapbAphVl4.roa
File: sJCGnJbbwiHipYYa4eapbAphVl4.roa (raw, json)
Hash identifier: gOVJfMzsb34BL7a4VlTBtuSjTnSrfj6wI4+jDmiiAJE=
Subject key identifier: B0:90:86:9C:96:DB:C2:21:E2:A5:86:1A:E1:E6:A9:6C:0A:61:56:5E
Certificate issuer: /CN=ffbf47e97e98a575e94e9eca50839403d0864b48
Certificate serial: 01A0F1ABC081FE997EA7D714DDD40603F37D
Authority key identifier: FF:BF:47:E9:7E:98:A5:75:E9:4E:9E:CA:50:83:94:03:D0:86:4B:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_79H6X6YpXXpTp7KUIOUA9CGS0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/accc6e-e074-4d66-9f01-3b5280880280/1/sJCGnJbbwiHipYYa4eapbAphVl4.roa
Signing time: Wed 30 Sep 2026 09:36:00 +0000
ROA not before: Wed 30 Sep 2026 09:36:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218560
IP address blocks: 2001:678:11d8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/accc6e-e074-4d66-9f01-3b5280880280/1/_79H6X6YpXXpTp7KUIOUA9CGS0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/accc6e-e074-4d66-9f01-3b5280880280/1/_79H6X6YpXXpTp7KUIOUA9CGS0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/_79H6X6YpXXpTp7KUIOUA9CGS0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 19:43:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f1:ab:c0:81:fe:99:7e:a7:d7:14:dd:d4:06:03:f3:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffbf47e97e98a575e94e9eca50839403d0864b48
Validity
Not Before: Sep 30 09:36:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b090869c96dbc221e2a5861ae1e6a96c0a61565e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e8:d5:f3:ae:18:2a:cc:5e:bc:4d:57:4e:8a:
7f:e5:89:35:5f:df:b9:85:89:5b:ff:f3:06:6d:fa:
80:91:fe:58:f0:51:b2:b8:05:6c:b9:08:70:d9:ae:
25:1d:60:e5:66:31:bb:f0:af:c5:fb:62:c1:ab:42:
bb:a6:25:6e:23:55:c8:d5:88:9f:25:a8:5f:7d:94:
81:ad:1c:3d:6e:e5:cc:53:84:47:38:4b:64:3c:8c:
77:04:86:93:d0:77:59:e8:f1:dd:38:37:b7:e2:e8:
17:5b:08:c7:35:7e:5c:c7:7c:21:c7:e9:37:28:53:
27:2d:7d:4b:b9:5c:bc:87:e8:4a:35:60:3d:f0:99:
8c:66:6f:ab:5b:df:4d:1f:52:7c:e3:19:4a:7d:33:
80:95:21:49:9f:97:5e:18:ce:16:c5:35:ae:a0:3c:
e9:7e:12:75:4a:a4:7b:fd:a1:e5:e6:20:24:49:f7:
3a:fd:e7:6c:db:73:90:62:76:d7:73:c5:10:bc:87:
1f:d4:ed:47:1d:52:dd:c8:a4:89:c6:83:39:a2:1c:
8a:4b:57:c7:02:73:b1:81:91:94:d0:00:6c:b3:32:
c4:38:7b:33:d5:06:22:48:f4:c6:26:8d:ef:e4:22:
b1:8d:db:e0:e1:21:0b:80:51:b4:7a:8a:9e:0f:82:
0c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:90:86:9C:96:DB:C2:21:E2:A5:86:1A:E1:E6:A9:6C:0A:61:56:5E
X509v3 Authority Key Identifier:
keyid:FF:BF:47:E9:7E:98:A5:75:E9:4E:9E:CA:50:83:94:03:D0:86:4B:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_79H6X6YpXXpTp7KUIOUA9CGS0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/accc6e-e074-4d66-9f01-3b5280880280/1/sJCGnJbbwiHipYYa4eapbAphVl4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/accc6e-e074-4d66-9f01-3b5280880280/1/_79H6X6YpXXpTp7KUIOUA9CGS0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:11d8::/48
Signature Algorithm: sha256WithRSAEncryption
0e:fa:37:f6:a3:35:3f:e8:78:3d:1f:f5:77:d8:78:13:e5:23:
d9:f3:12:cd:3d:23:76:01:4b:ce:88:ab:6a:ae:52:b4:db:10:
8a:b4:e1:3f:c5:fd:43:a8:76:72:92:33:c3:d8:22:cd:8c:6f:
dd:b9:38:cd:87:b3:74:1c:3a:a8:c5:b7:bc:fd:f0:88:e3:3a:
93:ea:db:bc:30:ad:23:fd:57:39:39:2d:a0:dc:32:14:c9:56:
17:3a:9d:d7:01:83:5e:09:4a:74:f1:81:3e:99:d8:ca:8b:5d:
2b:90:e4:c4:b1:7a:53:c1:8b:26:77:78:e2:74:e3:10:d3:e9:
22:55:cf:b8:57:e6:f8:2b:76:fe:f0:72:0f:f9:9a:40:39:3e:
e2:c5:c1:35:34:c2:b1:b6:7f:6a:8f:fd:3a:93:40:58:4d:75:
c3:02:43:42:f0:db:1f:ec:c4:6c:af:c5:5f:45:be:6e:aa:75:
80:47:2e:f0:c9:a9:6b:34:7d:5c:6b:7d:3b:e2:56:89:7d:b3:
dc:27:c8:3a:5f:19:b4:c2:1c:49:04:30:bf:88:3e:6c:aa:8d:
27:8f:93:03:01:2f:85:e8:3c:cf:1e:6f:4e:65:a7:4a:4a:82:
11:e4:bf:6e:aa:e9:c4:94:fb:9d:3f:de:32:61:87:61:b5:50:
4d:fb:d8:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 06:01:56 2026 by rpki-client