Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/Jj4at4zHeBwwNmGkDLH-Mp9huMk.roa
File: Jj4at4zHeBwwNmGkDLH-Mp9huMk.roa (raw, json)
Hash identifier: QZpy1OnnLHSLHXiQE2iYW3CLy6/t5uEpr8+8UATusHs=
Subject key identifier: 26:3E:1A:B7:8C:C7:78:1C:30:36:61:A4:0C:B1:FE:32:9F:61:B8:C9
Certificate issuer: /CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Certificate serial: 019CCA27B9B0F2D8F168D7976E4B61E0D55D
Authority key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/Jj4at4zHeBwwNmGkDLH-Mp9huMk.roa
Signing time: Sat 07 Mar 2026 21:15:26 +0000
ROA not before: Sat 07 Mar 2026 21:15:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206604
IP address blocks: 2a0d:d940:d0::/44 maxlen: 44
2a0d:d940:2005::/48 maxlen: 48
2a0d:d940:2007::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 20:09:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ca:27:b9:b0:f2:d8:f1:68:d7:97:6e:4b:61:e0:d5:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Validity
Not Before: Mar 7 21:15:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=263e1ab78cc7781c303661a40cb1fe329f61b8c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e2:a1:0a:19:70:0f:63:f2:27:d2:6c:56:a6:
88:85:8b:88:c3:4d:15:91:7a:4d:97:91:36:2b:6d:
67:e6:cf:c6:9e:7e:93:c3:1d:55:f7:c4:09:db:ae:
e4:20:06:d3:fb:fe:88:ac:2c:42:4a:c4:97:8d:f6:
dd:54:fb:32:9e:f2:ed:f2:e9:95:0d:a8:27:70:ed:
0e:bf:7d:51:06:70:d6:c6:e5:2c:31:5e:e3:d7:76:
ec:f2:52:15:1d:b9:56:31:f3:b8:66:0e:56:d3:18:
4c:4a:15:87:bb:34:39:db:e0:48:cc:37:57:77:3f:
02:49:56:4a:86:d2:f3:e9:10:5a:71:43:5a:81:76:
6a:ce:21:e0:e9:1c:79:07:2b:d3:ad:c1:8a:aa:ec:
47:7d:8e:eb:83:29:6a:8b:ee:5d:7c:27:b9:59:c3:
50:bb:4e:cb:d1:f1:c0:52:4d:97:27:88:64:f7:25:
21:59:52:81:9a:b0:ca:51:2b:0b:55:13:a1:c0:59:
23:87:1c:07:67:fc:06:ab:ad:8d:55:58:b2:54:45:
fb:4b:fc:86:f7:97:5a:66:88:1f:1c:a1:c4:d9:95:
92:f4:39:c3:bb:fe:85:c6:e6:89:45:e2:d0:be:f6:
44:2d:48:d0:3a:a2:24:24:7b:8f:f6:52:3c:ed:9d:
10:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:3E:1A:B7:8C:C7:78:1C:30:36:61:A4:0C:B1:FE:32:9F:61:B8:C9
X509v3 Authority Key Identifier:
keyid:0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/Jj4at4zHeBwwNmGkDLH-Mp9huMk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:d940:d0::/44
2a0d:d940:2005::/48
2a0d:d940:2007::/48
Signature Algorithm: sha256WithRSAEncryption
7c:56:ca:9a:81:05:ce:b0:53:d8:c7:99:93:b0:0e:f9:15:51:
bb:a0:de:c5:80:e9:86:24:63:85:6a:f2:b1:fe:17:bf:3f:5b:
86:05:3c:7d:d4:c3:1b:96:03:3b:9e:76:d6:78:5d:54:fe:be:
ad:2a:1a:62:ab:be:f8:bf:8f:cf:a5:a4:d4:9f:cc:35:bc:2c:
93:8b:2e:7e:2d:7a:df:d6:56:58:47:89:0a:e6:b8:ef:a9:6d:
1d:1f:31:be:e7:f5:4d:13:ef:fa:81:34:f7:a0:0e:ab:cc:e3:
49:24:92:ad:a3:ba:1e:94:27:03:94:87:76:8d:68:1e:cc:2a:
9d:b7:15:22:60:20:dd:93:1e:ab:5d:07:94:b7:d0:7a:d5:f8:
d5:c1:22:7d:63:74:49:15:a0:89:29:ef:bf:22:e7:d4:e6:21:
32:32:df:70:57:85:c9:33:e0:92:0b:af:cc:6a:7c:39:08:d5:
d7:7a:15:21:16:28:41:3b:11:a4:3a:36:50:59:ad:70:ca:52:
f8:9f:c6:bb:00:ee:2a:68:8d:3d:b0:0b:f4:91:88:3a:50:4f:
27:ce:eb:4e:48:80:68:6f:81:2a:84:b5:7e:66:4d:d6:19:09:
42:6e:73:34:c2:60:0a:14:c3:ad:f9:19:18:6d:d9:d9:8a:5d:
ea:df:d4:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 8 03:28:00 2026 by rpki-client