Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Jb5fhsHpDrmyLdjGRz0uFhEem98.roa
File: Jb5fhsHpDrmyLdjGRz0uFhEem98.roa (raw, json)
Hash identifier: UCI+d59xT/eDs0DShUfWDjWNMDQWAEcZTjIhSv7QN2k=
Subject key identifier: 25:BE:5F:86:C1:E9:0E:B9:B2:2D:D8:C6:47:3D:2E:16:11:1E:9B:DF
Certificate issuer: /CN=7dcc4952b6f3a8cc7c81630d3e83b2a9827163f6
Certificate serial: 019F2368538C2CB47FAAED2856F67636A74D
Authority key identifier: 7D:CC:49:52:B6:F3:A8:CC:7C:81:63:0D:3E:83:B2:A9:82:71:63:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Jb5fhsHpDrmyLdjGRz0uFhEem98.roa
Signing time: Thu 02 Jul 2026 15:17:47 +0000
ROA not before: Thu 02 Jul 2026 15:17:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215772
IP address blocks: 2a10:4646:3e0::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 Jul 2026 11:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:53:8c:2c:b4:7f:aa:ed:28:56:f6:76:36:a7:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dcc4952b6f3a8cc7c81630d3e83b2a9827163f6
Validity
Not Before: Jul 2 15:17:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=25be5f86c1e90eb9b22dd8c6473d2e16111e9bdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ae:55:8a:d6:5b:0c:67:0e:71:63:3c:c4:33:
ff:9b:99:23:e0:5b:a5:6a:b4:12:6a:10:93:ad:e1:
e6:b3:41:a7:09:57:7c:bb:96:73:81:19:ec:ca:93:
d7:46:7f:a2:d6:e0:94:08:31:7f:b7:ea:7a:97:a1:
d9:7d:b4:e3:6d:79:10:19:07:2a:16:d2:9a:7c:89:
e8:c2:32:95:a2:9b:05:cd:2a:68:d9:2a:fd:cd:1b:
d9:55:b0:34:c1:bc:18:a3:99:4f:92:7c:90:ae:c8:
d2:44:2c:09:02:09:3f:d1:61:3e:06:cb:a1:eb:6b:
15:15:58:27:3c:95:66:06:cf:32:a3:b5:92:b7:4c:
8a:bb:b7:f7:e0:9c:ee:52:cc:82:96:df:06:6d:18:
3b:e4:88:a5:25:50:21:8a:c3:69:94:0c:85:42:ce:
cf:7d:95:44:fc:cf:5a:77:06:59:56:9b:f9:22:3e:
5b:81:7d:ed:b3:e2:8e:54:bb:39:ca:dd:2c:58:99:
39:92:3b:9a:16:5f:d8:03:97:a1:fe:31:a0:d7:d7:
fe:8f:51:b4:e0:74:cf:dd:12:74:d0:cf:32:16:73:
5d:37:3e:6c:fb:0a:60:49:f6:ea:67:3f:17:0a:90:
be:1a:4f:93:1f:16:00:7d:1e:65:6e:7d:92:f1:ca:
da:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:BE:5F:86:C1:E9:0E:B9:B2:2D:D8:C6:47:3D:2E:16:11:1E:9B:DF
X509v3 Authority Key Identifier:
keyid:7D:CC:49:52:B6:F3:A8:CC:7C:81:63:0D:3E:83:B2:A9:82:71:63:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Jb5fhsHpDrmyLdjGRz0uFhEem98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:4646:3e0::/44
Signature Algorithm: sha256WithRSAEncryption
a9:d4:ee:5a:83:12:4d:00:16:68:95:3b:bb:a8:9c:88:12:62:
6c:25:63:10:46:91:1d:da:7a:19:aa:d4:4e:07:32:d9:fa:1f:
4e:23:15:5f:77:64:51:36:a0:4f:f7:f2:9e:7b:04:dd:ef:b9:
0e:cb:30:b7:29:d1:cc:e3:ff:b5:82:b8:54:e9:68:33:22:04:
8b:3b:a7:bd:9b:6f:7d:7f:10:a3:17:ed:67:d3:4f:04:17:7e:
da:6f:c0:fa:9c:9f:d1:3d:be:18:ae:97:8a:e4:ee:20:14:d8:
c9:21:aa:b6:f2:85:02:41:af:bf:9b:54:17:ad:51:5a:d8:60:
19:16:a4:27:8a:30:6d:1d:f8:81:4f:52:44:9d:f2:5b:86:94:
27:eb:32:4f:c3:2d:e0:76:ad:3d:f5:d0:a8:63:6e:b6:b4:37:
c7:e8:ff:e4:dd:be:68:db:d8:87:bb:ae:42:18:16:a8:e8:ed:
af:73:b1:01:3c:97:1a:2c:46:9b:78:cf:e6:66:70:14:de:b0:
e9:11:40:64:cd:b8:ac:0a:61:e0:fb:f1:91:1b:da:7b:35:de:
9b:16:2f:25:19:17:9f:bc:e9:10:f4:b0:36:a8:c8:fb:c3:43:
2a:8c:77:d0:f6:3f:e7:78:bc:32:e6:61:e6:17:05:60:ad:af:
53:2e:3f:2d
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZ8jaFOMLLR/qu0oVvZ2NqdNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkY2M0OTUyYjZmM2E4Y2M3YzgxNjMwZDNlODNiMmE5ODI3
MTYzZjYwHhcNMjYwNzAyMTUxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNWJlNWY4NmMxZTkwZWI5YjIyZGQ4YzY0NzNkMmUxNjExMWU5YmRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2K5VitZbDGcOcWM8xDP/m5kj4Ful
arQSahCTreHms0GnCVd8u5ZzgRnsypPXRn+i1uCUCDF/t+p6l6HZfbTjbXkQGQcq
FtKafInowjKVopsFzSpo2Sr9zRvZVbA0wbwYo5lPknyQrsjSRCwJAgk/0WE+Bsuh
62sVFVgnPJVmBs8yo7WSt0yKu7f34JzuUsyClt8GbRg75IilJVAhisNplAyFQs7P
fZVE/M9adwZZVpv5Ij5bgX3ts+KOVLs5yt0sWJk5kjuaFl/YA5eh/jGg19f+j1G0
4HTP3RJ00M8yFnNdNz5s+wpgSfbqZz8XCpC+Gk+THxYAfR5lbn2S8cravwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFCW+X4bB6Q65si3Yxkc9LhYRHpvfMB8GA1UdIwQY
MBaAFH3MSVK286jMfIFjDT6DsqmCcWP2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmN4SlVyYnpxTXg4Z1dNTlBvT3lxWUp4WV9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC85NDg4YzctODQ5Yy00ZmYxLWFiNGMt
YWU5MjgzZTc5NjRlLzEvSmI1ZmhzSHBEcm15TGRqR1J6MHVGaEVlbTk4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC85NDg4YzctODQ5Yy00ZmYxLWFiNGMtYWU5MjgzZTc5NjRl
LzEvZmN4SlVyYnpxTXg4Z1dNTlBvT3lxWUp4WV9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhBGRgPg
MA0GCSqGSIb3DQEBCwUAA4IBAQCp1O5agxJNABZolTu7qJyIEmJsJWMQRpEd2noZ
qtROBzLZ+h9OIxVfd2RRNqBP9/KeewTd77kOyzC3KdHM4/+1grhU6WgzIgSLO6e9
m299fxCjF+1n008EF37ab8D6nJ/RPb4YrpeK5O4gFNjJIaq28oUCQa+/m1QXrVFa
2GAZFqQnijBtHfiBT1JEnfJbhpQn6zJPwy3gdq099dCoY262tDfH6P/k3b5o29iH
u65CGBao6O2vc7EBPJcaLEabeM/mZnAU3rDpEUBkzbisCmHg+/GRG9p7Nd6bFi8l
GRefvOkQ9LA2qMj7w0MqjHfQ9j/neLwy5mHmFwVgra9TLj8t
-----END CERTIFICATE-----
Generated at Sat Jul 11 16:00:21 2026 by rpki-client