Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/j-PFBiL03S6WRSrBU8S47xwyndA.roa
File: j-PFBiL03S6WRSrBU8S47xwyndA.roa (raw, json)
Hash identifier: K7P+QUsdp4yG+ErvjouO0SB+AUJcFrNu/1BLrwwoCmk=
Subject key identifier: 8F:E3:C5:06:22:F4:DD:2E:96:45:2A:C1:53:C4:B8:EF:1C:32:9D:D0
Certificate issuer: /CN=df895a3ee2211b6ee2df7202f09a426680d66269
Certificate serial: 019F22F14042ED7F72C3374C5175F5A727F0
Authority key identifier: DF:89:5A:3E:E2:21:1B:6E:E2:DF:72:02:F0:9A:42:66:80:D6:62:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/j-PFBiL03S6WRSrBU8S47xwyndA.roa
Signing time: Thu 02 Jul 2026 13:07:43 +0000
ROA not before: Thu 02 Jul 2026 13:07:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216246
IP address blocks: 2a12:5940:d000::/36 maxlen: 36
2a12:5940:e000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 10:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:22:f1:40:42:ed:7f:72:c3:37:4c:51:75:f5:a7:27:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df895a3ee2211b6ee2df7202f09a426680d66269
Validity
Not Before: Jul 2 13:07:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8fe3c50622f4dd2e96452ac153c4b8ef1c329dd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:bc:7d:12:4f:10:0c:06:0c:be:b7:23:0d:65:
40:ed:e9:7c:a0:eb:f3:1f:bc:8a:62:ee:ce:5e:77:
9d:0c:fb:b3:6b:05:64:8b:08:8c:46:84:18:cd:41:
04:f2:81:87:3b:a2:0c:e2:34:aa:58:09:3a:3e:18:
9e:de:b7:43:76:ec:43:17:04:80:8a:19:62:d2:0c:
c7:ca:4d:92:16:29:39:61:69:a7:90:60:d8:53:a0:
3d:1b:9c:dc:d6:51:25:0f:d6:f6:c2:30:34:20:a5:
27:a8:60:34:07:d6:35:47:cf:3f:08:37:b3:0e:23:
05:f9:c4:6a:b4:a3:c4:61:f4:2a:92:0b:07:d2:e4:
1a:ec:b0:09:04:98:4e:97:1c:26:bd:2d:dd:e2:69:
dc:4b:5f:32:20:c9:61:82:76:18:1c:86:4e:34:66:
17:69:b6:d5:bc:f5:e5:ff:2f:d7:b8:bf:41:5b:53:
b1:97:0d:58:4b:a3:43:dd:e7:4b:91:4f:93:8c:bf:
1a:f2:07:3d:d4:99:7d:7e:2b:51:11:c1:dc:72:1f:
34:27:12:ba:89:7d:75:09:01:11:fa:cf:33:53:f5:
a7:64:49:ef:0f:52:36:32:03:70:41:9b:58:ed:03:
36:9b:ff:59:9f:de:51:9a:da:2a:2c:8c:6d:27:46:
a0:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:E3:C5:06:22:F4:DD:2E:96:45:2A:C1:53:C4:B8:EF:1C:32:9D:D0
X509v3 Authority Key Identifier:
keyid:DF:89:5A:3E:E2:21:1B:6E:E2:DF:72:02:F0:9A:42:66:80:D6:62:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/j-PFBiL03S6WRSrBU8S47xwyndA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:5940:d000::-2a12:5940:efff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
9b:1e:ac:c3:49:3f:48:6b:1e:63:e1:6c:82:73:55:37:c8:74:
95:bd:97:72:30:4d:cd:3a:ae:18:d1:76:ad:44:7e:e0:62:a3:
8b:78:14:bb:46:f2:70:3a:87:38:38:3c:ad:cd:bd:80:cc:a1:
e2:e9:84:e0:7d:ad:e1:f8:01:4f:8c:80:e0:05:26:a8:7b:a1:
fd:95:b5:0d:f7:00:0d:8a:07:ac:ed:a2:df:91:3a:7a:af:0a:
8e:40:3d:44:72:5a:69:02:c7:59:44:d5:1d:e5:84:68:aa:1a:
c3:d1:1f:89:28:1d:22:7b:eb:19:59:05:d6:18:1d:04:14:41:
c0:28:7e:20:2b:9c:f8:0a:60:68:0c:0c:4b:c3:36:ad:26:a3:
94:c2:02:00:5b:55:d1:a5:52:0b:5c:be:ba:af:7f:d8:41:d3:
97:e1:8b:bf:e9:fb:71:33:63:ae:4f:e0:7e:42:d3:f5:93:c0:
19:c5:06:3e:77:d5:35:61:2f:cd:6f:f3:53:7c:b7:67:c1:56:
c3:29:4a:40:b9:42:47:07:cd:f8:d3:5b:70:8a:09:e6:5c:d6:
51:36:da:e1:31:a0:3a:9b:2b:83:72:4a:a6:7a:04:cb:00:d6:
22:b3:89:49:b0:5d:46:1e:7e:40:ec:ba:ee:db:8d:a8:48:69:
89:b5:fd:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 17:33:42 2026 by rpki-client