Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/Jp0cb6lmAjIofXK10GnisV8ZJq0.roa
File: Jp0cb6lmAjIofXK10GnisV8ZJq0.roa (raw, json)
Hash identifier: E8QA5JIxNVXPh+bj011j4mkyCxYWDlMzp8siE3PNiv8=
Subject key identifier: 26:9D:1C:6F:A9:66:02:32:28:7D:72:B5:D0:69:E2:B1:5F:19:26:AD
Certificate issuer: /CN=eef5314aeef51323194fd8629858ad20fb92dfe7
Certificate serial: 019F23689932A2E689E47D18C922032FA678
Authority key identifier: EE:F5:31:4A:EE:F5:13:23:19:4F:D8:62:98:58:AD:20:FB:92:DF:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7vUxSu71EyMZT9himFitIPuS3-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/Jp0cb6lmAjIofXK10GnisV8ZJq0.roa
Signing time: Thu 02 Jul 2026 15:18:05 +0000
ROA not before: Thu 02 Jul 2026 15:18:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208563
IP address blocks: 2a0d:1a40:7800::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7vUxSu71EyMZT9himFitIPuS3-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7vUxSu71EyMZT9himFitIPuS3-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/7vUxSu71EyMZT9himFitIPuS3-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Jul 2026 03:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:99:32:a2:e6:89:e4:7d:18:c9:22:03:2f:a6:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eef5314aeef51323194fd8629858ad20fb92dfe7
Validity
Not Before: Jul 2 15:18:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=269d1c6fa9660232287d72b5d069e2b15f1926ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:f3:14:9e:e7:32:78:50:8a:58:cd:0b:3f:46:
56:24:f8:18:39:34:01:40:85:b8:36:59:7e:95:7a:
f4:9f:e0:0d:6f:81:41:7b:f1:56:cd:e2:06:aa:fc:
60:c5:a8:bd:ee:54:14:a2:33:ef:65:7b:70:05:01:
10:4a:39:84:f3:a7:c6:0d:20:8a:ec:57:fc:98:83:
85:e3:a6:0d:0a:e2:d4:68:fa:d6:e9:e5:54:c5:28:
7e:ef:18:e3:3b:fc:73:be:38:b5:79:f5:47:9e:8e:
c0:85:92:84:67:de:af:8f:ca:ec:37:c9:99:f9:8b:
1b:68:47:a8:64:b5:04:21:b6:1c:af:67:55:5c:83:
a8:64:c9:cf:0b:1f:ce:40:cf:22:9f:0f:8c:bc:15:
43:11:dc:58:6f:0a:ea:a2:c7:ca:ca:51:b1:6d:72:
b2:94:47:3b:af:c9:c6:ff:7d:32:f3:50:22:cd:ff:
02:0f:9e:4d:a0:67:b8:5a:42:67:7b:cb:fa:29:c7:
c4:39:8c:b5:7b:d1:09:9b:03:c1:9c:6f:59:2b:99:
ad:bf:2f:ea:21:8c:fa:a5:6f:d7:99:77:67:54:00:
53:4f:68:48:8c:04:e9:b5:bb:73:bf:59:0c:ae:86:
92:9f:14:e8:c5:e3:94:5d:3c:9f:fa:fd:7a:b4:ab:
2c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:9D:1C:6F:A9:66:02:32:28:7D:72:B5:D0:69:E2:B1:5F:19:26:AD
X509v3 Authority Key Identifier:
keyid:EE:F5:31:4A:EE:F5:13:23:19:4F:D8:62:98:58:AD:20:FB:92:DF:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7vUxSu71EyMZT9himFitIPuS3-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/Jp0cb6lmAjIofXK10GnisV8ZJq0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7vUxSu71EyMZT9himFitIPuS3-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:1a40:7800::/40
Signature Algorithm: sha256WithRSAEncryption
2a:3d:27:52:03:ed:d5:cf:23:0e:75:bb:6d:df:df:cf:c1:05:
58:a7:59:8b:ec:17:2f:f7:4e:46:8b:55:98:11:a9:13:5c:b6:
bf:5c:46:60:a0:6d:ba:33:60:9a:3f:4f:7f:41:7b:cd:48:b8:
b1:d4:1f:a1:56:8c:f2:2b:56:6a:ff:c3:b0:9b:90:1e:f0:de:
2f:14:7b:81:ad:f4:79:2c:ab:23:df:54:50:d9:2c:c0:c0:3e:
d8:81:14:97:3a:ab:66:25:da:9d:76:e1:f4:db:08:3e:03:c2:
0c:cc:2c:9a:e2:76:59:74:44:c7:75:d9:e0:32:a9:e2:c2:1e:
7f:4f:4d:16:a2:f7:1a:29:14:a5:4c:3a:b4:c7:39:73:82:7a:
f6:79:56:78:93:33:25:11:89:57:f9:82:da:27:2a:b8:bf:f0:
43:b6:9d:2b:06:76:e6:7e:37:83:9e:97:ca:b5:83:9c:a0:73:
6e:1c:d7:19:95:4c:5d:51:96:7c:5c:f5:46:1b:ad:a3:92:ec:
a7:cd:7d:9a:0d:0c:fe:09:6c:02:d8:4a:27:4e:47:65:8d:f8:
62:62:15:4e:43:6b:cd:f1:d9:ff:68:3d:3c:04:e8:8d:38:39:
fc:9d:20:11:51:4b:0c:df:88:a7:aa:8a:38:60:f7:e5:3f:3e:
d0:e1:0e:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 11:43:28 2026 by rpki-client