Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/nJJhMiV7MvIxFD735VvV4eXnysQ.roa
File: nJJhMiV7MvIxFD735VvV4eXnysQ.roa (raw, json)
Hash identifier: APccYaxjCkDXZ/LenGKAy6NWfX17eqM4pOa4PrayF6Y=
Subject key identifier: 9C:92:61:32:25:7B:32:F2:31:14:3E:F7:E5:5B:D5:E1:E5:E7:CA:C4
Certificate issuer: /CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Certificate serial: 019FFB4E69CA635447F5EB9CB2BD99649C21
Authority key identifier: FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/nJJhMiV7MvIxFD735VvV4eXnysQ.roa
Signing time: Thu 13 Aug 2026 13:27:27 +0000
ROA not before: Thu 13 Aug 2026 13:27:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6206
IP address blocks: 109.122.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fb:4e:69:ca:63:54:47:f5:eb:9c:b2:bd:99:64:9c:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Validity
Not Before: Aug 13 13:27:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9c926132257b32f231143ef7e55bd5e1e5e7cac4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c4:c4:2f:84:8b:26:35:c7:0f:a6:39:f3:49:
2f:3b:88:f2:19:1d:dd:65:0f:96:93:dc:97:b7:26:
d9:6f:53:00:7f:17:a4:73:70:88:29:59:4e:f2:a3:
f9:74:4c:6c:9f:8c:ed:80:9d:69:d6:c4:94:c3:9f:
31:04:32:58:bb:28:5d:47:1b:de:45:67:00:88:82:
e4:b0:d7:45:3f:d3:89:d3:28:96:2c:1d:e0:c8:6a:
8e:53:ab:a1:04:f2:e0:dc:e3:f5:b2:86:3a:0d:3a:
76:8b:5f:45:6a:35:44:d1:97:5e:88:67:72:a5:88:
17:d1:4e:12:66:ec:51:9a:5c:a0:1d:52:2e:18:36:
fa:59:1d:92:99:e7:99:42:38:af:ea:f2:50:33:68:
2f:bf:33:9b:2b:c8:b3:12:27:00:74:8e:0c:05:18:
2d:3f:fe:96:c1:c3:ce:e4:a2:6d:d1:f4:88:37:13:
31:4e:d2:cf:c2:03:a7:52:d8:62:7a:25:98:79:cd:
22:c8:8d:d0:f1:67:98:0e:f0:59:5d:c0:de:25:01:
75:3a:10:9e:c8:52:31:e6:97:3c:4f:7c:60:3a:ed:
6d:8b:58:f0:92:97:c0:1c:ee:be:d3:f7:a7:b0:42:
8e:8c:a2:eb:51:a6:6d:2e:3e:09:42:0d:a7:7b:a7:
f9:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:92:61:32:25:7B:32:F2:31:14:3E:F7:E5:5B:D5:E1:E5:E7:CA:C4
X509v3 Authority Key Identifier:
keyid:FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/nJJhMiV7MvIxFD735VvV4eXnysQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.10.0/24
Signature Algorithm: sha256WithRSAEncryption
32:b3:f5:23:b4:e1:c4:ea:ff:bb:75:b2:c2:99:4c:dd:86:bb:
a4:f5:d4:f2:c0:8a:6b:5c:71:9e:9f:3a:d2:f5:e5:a0:b1:c1:
d6:3d:43:6d:49:5b:5b:91:99:29:20:36:a2:18:7d:a2:26:6b:
1a:88:dc:e2:fb:f4:76:6f:13:96:36:db:8f:56:97:61:e7:92:
e5:bb:37:7d:2d:0c:8c:2b:ed:a0:8d:19:4d:a3:a4:ee:2d:f8:
d7:90:e3:5e:a9:ae:9e:33:b3:a5:7b:c0:e7:91:e6:69:42:b6:
d5:e9:81:c7:05:f0:25:dd:20:f6:27:41:eb:e0:93:e5:b4:f6:
84:63:4d:e1:e6:9b:4d:17:54:23:0a:35:ec:6a:e6:28:88:79:
ff:4d:4b:9e:bb:2b:00:d0:cd:46:c2:ad:54:46:5f:07:e7:4f:
22:f5:a1:b6:69:46:06:c7:b7:b2:5a:b4:22:bf:e7:47:e7:a9:
8b:c2:f7:00:a3:45:a9:56:26:52:07:a0:08:7e:82:ec:99:1b:
99:7d:6e:22:7f:6c:6f:0d:a7:97:b0:eb:6b:1e:08:72:41:c7:
f4:b0:fc:8e:a4:f5:1b:f6:72:35:ec:f3:1d:84:17:41:e6:58:
ef:73:8f:d9:4c:4b:ec:a3:fa:d7:ea:98:10:b1:53:13:89:ac:
16:c6:3b:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:02:56 2026 by rpki-client