Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/jlEiFX_wyRdO1f-giRgoTohEBks.roa
File: jlEiFX_wyRdO1f-giRgoTohEBks.roa (raw, json)
Hash identifier: WygL2x3ENDsYbsxAyrNSYu0iLwbX2a9wJTadgTZm0AM=
Subject key identifier: 8E:51:22:15:7F:F0:C9:17:4E:D5:FF:A0:89:18:28:4E:88:44:06:4B
Certificate issuer: /CN=b93d4908d9c43a85f85be19334a26f5d51350bcb
Certificate serial: 01A13BBC86A97A255236BFAF3B700E4A5AD0
Authority key identifier: B9:3D:49:08:D9:C4:3A:85:F8:5B:E1:93:34:A2:6F:5D:51:35:0B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uT1JCNnEOoX4W-GTNKJvXVE1C8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/jlEiFX_wyRdO1f-giRgoTohEBks.roa
Signing time: Wed 14 Oct 2026 18:46:13 +0000
ROA not before: Wed 14 Oct 2026 18:46:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401163
IP address blocks: 2a14:1d40::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/uT1JCNnEOoX4W-GTNKJvXVE1C8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 18:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3b:bc:86:a9:7a:25:52:36:bf:af:3b:70:0e:4a:5a:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b93d4908d9c43a85f85be19334a26f5d51350bcb
Validity
Not Before: Oct 14 18:46:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8e5122157ff0c9174ed5ffa08918284e8844064b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ee:30:a0:de:89:c4:cf:4a:d6:44:a2:40:f6:
7c:ab:16:2d:b1:c7:33:49:63:95:04:ba:23:ea:06:
61:05:c4:e1:4c:62:4e:0b:f9:76:b7:31:c8:14:14:
41:80:fb:72:4b:e0:e8:b0:ac:a5:bf:20:e7:9e:25:
c4:cf:ae:31:29:02:eb:3c:90:2f:4b:99:00:87:5a:
e0:a2:c5:a3:ea:04:52:eb:32:d4:20:fe:a1:d4:da:
2a:a7:4a:d2:6a:31:4b:ce:aa:01:f0:0e:87:3c:d0:
37:a6:0d:d0:95:df:c0:a1:1e:4f:eb:e0:ad:57:59:
e0:c6:49:49:70:3e:86:29:65:d8:d2:9f:6d:f4:8d:
53:88:e2:93:9c:0a:83:e2:dc:4d:e6:de:c1:c6:cb:
fd:24:37:e8:18:1d:b4:0c:1f:c9:05:70:4e:a4:ff:
f7:6e:12:15:6f:ff:07:e5:c8:e4:bb:ba:c6:bf:7b:
f7:cb:4f:c2:e9:5e:21:2d:bc:c0:4c:2e:31:7f:a7:
5a:dc:7d:3a:ca:9d:27:99:dd:af:1e:fc:65:7b:fd:
54:bd:ae:5f:b0:1a:1a:2c:e4:a9:92:51:a3:7a:cd:
e7:94:c2:f7:38:df:69:2b:56:e5:3c:0c:28:93:a8:
fd:18:c1:0c:76:d0:02:d2:2e:f6:73:7a:29:a8:1e:
68:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:51:22:15:7F:F0:C9:17:4E:D5:FF:A0:89:18:28:4E:88:44:06:4B
X509v3 Authority Key Identifier:
keyid:B9:3D:49:08:D9:C4:3A:85:F8:5B:E1:93:34:A2:6F:5D:51:35:0B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uT1JCNnEOoX4W-GTNKJvXVE1C8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/jlEiFX_wyRdO1f-giRgoTohEBks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:1d40::/29
Signature Algorithm: sha256WithRSAEncryption
15:7f:f1:2e:7e:2f:e0:7f:fa:5f:60:5c:bb:98:49:11:88:e8:
cc:af:3c:1d:84:3d:85:83:63:f9:ab:c4:85:eb:31:58:75:c8:
e4:2a:8f:55:5d:e1:9f:37:40:fa:43:f1:df:f6:cb:26:ff:18:
2f:72:a6:9d:3a:9c:8c:8c:36:b3:d8:e9:aa:e6:fe:4e:c3:b6:
ff:61:32:90:4a:9a:ac:92:84:ce:b7:8f:c5:4f:64:48:27:c3:
30:bc:e0:8b:38:3d:5c:83:0e:2e:21:5d:2d:8a:4a:4c:8f:bf:
1f:eb:88:2d:35:bd:ca:cb:66:7a:e8:80:d9:a7:5e:67:d2:61:
f5:79:10:7e:10:de:e4:83:0c:23:bd:ed:68:58:d0:18:cb:f2:
6a:bc:02:31:dd:90:83:a3:a5:7e:23:44:ef:dd:29:bf:dc:32:
f7:db:93:32:92:33:62:71:30:b4:36:18:50:04:60:c7:cf:9c:
15:66:6b:7f:1d:81:94:6f:98:35:9a:51:8a:44:1a:6a:c7:19:
93:62:98:76:aa:b4:5f:df:38:b9:a9:79:40:e7:ed:49:96:e1:
7d:88:50:2e:ff:11:90:36:fe:44:9f:2e:7e:bb:ec:c0:0e:3d:
2c:9c:8f:be:d0:6f:c6:e2:2d:e5:47:60:9e:03:76:9f:74:e4:
38:63:21:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 00:04:59 2026 by rpki-client