Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/fjse87W44P51UOVIGX0DCsEjxWY.roa
File: fjse87W44P51UOVIGX0DCsEjxWY.roa (raw, json)
Hash identifier: D/rrQpS+2FkVVqoE2nZZbtPj0yMnQI478zTpRsOTiWY=
Subject key identifier: 7E:3B:1E:F3:B5:B8:E0:FE:75:50:E5:48:19:7D:03:0A:C1:23:C5:66
Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial: 019E98B96FBD05294344E58B4AC4CDC4A200
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/fjse87W44P51UOVIGX0DCsEjxWY.roa
Signing time: Fri 05 Jun 2026 16:59:10 +0000
ROA not before: Fri 05 Jun 2026 16:59:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 2a10:2ec0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 00:11:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:98:b9:6f:bd:05:29:43:44:e5:8b:4a:c4:cd:c4:a2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
Validity
Not Before: Jun 5 16:59:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7e3b1ef3b5b8e0fe7550e548197d030ac123c566
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:98:70:9c:84:ee:f4:b6:cc:56:f4:d4:94:5e:
2b:c0:4f:7e:54:6e:6c:e8:56:4c:a1:00:0f:55:de:
b0:1c:03:58:53:f7:9c:d7:31:0a:b5:ad:42:8c:64:
ed:27:a5:84:5d:58:f5:5b:73:2e:6f:cc:8e:66:d9:
b9:30:8f:22:89:1b:f7:05:e5:7d:f7:aa:ae:fd:2e:
f0:f4:3f:0f:8f:b9:ec:4c:80:67:96:cf:8a:f9:f7:
b5:08:ee:7c:0b:99:78:62:b6:93:19:c4:cc:ea:c1:
b3:bd:cd:34:10:e9:63:28:83:6c:a8:1c:37:13:bf:
ff:f3:cc:f1:91:5a:17:35:f6:56:fb:6c:b4:41:71:
a3:71:62:40:cb:d2:08:ea:1c:ee:51:48:07:ca:34:
1d:0f:79:dd:ed:4b:af:9a:ae:e1:e1:9f:a8:a6:a7:
d5:6d:75:e6:8c:4f:9c:f6:73:c1:fd:a4:4c:ec:cf:
83:3c:4f:40:44:ee:ce:4f:8b:b8:2e:25:95:67:55:
3f:6d:26:5a:87:05:bc:09:5a:a7:36:9c:15:a3:75:
07:c0:0a:d6:f4:85:f5:9f:77:6e:d2:fd:87:f7:b8:
88:19:2a:38:47:f9:59:4a:15:c8:b9:47:86:6e:b7:
3c:16:9f:0c:cd:12:f5:c6:76:45:4b:db:9b:78:45:
4d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:3B:1E:F3:B5:B8:E0:FE:75:50:E5:48:19:7D:03:0A:C1:23:C5:66
X509v3 Authority Key Identifier:
keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/fjse87W44P51UOVIGX0DCsEjxWY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:2ec0::/29
Signature Algorithm: sha256WithRSAEncryption
3e:81:f8:9c:ff:50:d1:2d:ad:ed:f3:d4:8d:e0:1b:47:c7:98:
cb:58:2d:cf:97:8a:0f:93:0d:35:c1:d2:b1:79:e1:aa:e0:98:
aa:b5:b4:e3:c2:bd:f0:f0:26:26:f2:24:90:95:8c:fd:88:fb:
d0:64:25:6a:b9:f7:54:60:3a:7c:82:3e:fb:a6:e9:d5:e0:34:
76:0a:90:00:e9:8b:95:23:5e:41:81:d6:6a:cc:1b:03:e9:20:
49:9e:f0:78:d8:28:99:07:6d:4b:d1:b9:76:1f:cc:6a:7e:0f:
1b:98:4d:a0:29:84:f2:2b:85:3c:44:07:03:6d:38:4c:96:d9:
c4:39:78:a6:b5:65:f2:64:b9:48:2f:05:15:00:92:ec:97:c4:
30:c6:a7:bd:b7:a7:3c:bf:79:3c:49:5c:06:2a:1c:09:89:e0:
32:a9:3c:7b:50:74:01:a5:66:62:e2:75:bf:71:d3:72:03:9e:
7a:a8:2e:19:43:31:17:ff:69:c9:4f:bc:69:1d:47:3e:de:db:
b4:b2:c3:e9:37:6f:fd:a5:17:84:84:b1:32:32:3b:07:d8:73:
1f:0d:33:21:3c:e8:38:30:6f:71:54:47:6a:ce:75:aa:bd:99:
2e:9b:43:7c:d3:02:e6:43:db:6a:05:7f:b7:43:6e:1c:40:c4:
be:3d:c9:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:21:28 2026 by rpki-client