Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/jBO-jXvQb25kicCKq7f1EY7gqaE.roa
File: jBO-jXvQb25kicCKq7f1EY7gqaE.roa (raw, json)
Hash identifier: ZdvKKa9KpOV5dwMw7ZUq1soTwqWKMJVI/ky5uvZJbRs=
Subject key identifier: 8C:13:BE:8D:7B:D0:6F:6E:64:89:C0:8A:AB:B7:F5:11:8E:E0:A9:A1
Certificate issuer: /CN=427a2670508b945123beecbf13145ffbd7bfcde4
Certificate serial: 01A0493E439461A2C28762B51599EBFDCBD1
Authority key identifier: 42:7A:26:70:50:8B:94:51:23:BE:EC:BF:13:14:5F:FB:D7:BF:CD:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QnomcFCLlFEjvuy_ExRf-9e_zeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/jBO-jXvQb25kicCKq7f1EY7gqaE.roa
Signing time: Fri 28 Aug 2026 16:40:12 +0000
ROA not before: Fri 28 Aug 2026 16:40:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12314
IP address blocks: 2a0d:9481::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/QnomcFCLlFEjvuy_ExRf-9e_zeQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/QnomcFCLlFEjvuy_ExRf-9e_zeQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/QnomcFCLlFEjvuy_ExRf-9e_zeQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Sep 2026 02:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:49:3e:43:94:61:a2:c2:87:62:b5:15:99:eb:fd:cb:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=427a2670508b945123beecbf13145ffbd7bfcde4
Validity
Not Before: Aug 28 16:40:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8c13be8d7bd06f6e6489c08aabb7f5118ee0a9a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:41:3d:01:63:9a:23:7e:d5:74:7b:16:4a:5b:
80:b5:b1:e1:75:4b:06:26:82:6b:f1:d8:6e:ff:13:
b0:0b:a4:05:9e:ad:23:7c:bc:88:fa:63:77:9b:7a:
c6:d2:6c:10:e3:34:41:21:16:b1:8d:f2:7f:a6:ad:
df:74:ae:7a:31:80:08:82:ce:88:af:62:bb:ef:33:
bd:82:b1:d5:13:c7:86:06:c3:c1:11:c7:2a:38:34:
f3:8e:4e:de:57:d2:50:ee:a3:76:09:a9:8e:fb:87:
15:04:a1:ea:a2:2f:33:ab:2f:c1:54:97:03:fe:3c:
18:ea:58:09:6d:0f:06:f0:57:c8:19:87:0e:da:8a:
f0:82:f4:2f:0c:21:a7:a3:6c:41:9d:d2:7d:b2:de:
ca:41:7b:ed:b6:ce:06:52:10:11:4f:40:b2:4a:1f:
d2:18:07:cd:86:78:c1:19:0b:de:97:85:d8:32:01:
e9:9a:a9:58:d0:cc:bf:5d:bf:fd:e4:ca:2f:31:d3:
f1:3f:cf:7f:75:92:0a:5e:44:a5:b5:f2:9c:3d:1d:
f2:26:47:7b:52:57:7e:8c:71:a7:d7:be:77:c1:d4:
c6:73:89:fa:b8:9c:72:37:46:a5:91:0a:48:63:35:
3e:87:72:3f:bd:f8:ac:c8:85:8a:eb:67:d0:af:eb:
0a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:13:BE:8D:7B:D0:6F:6E:64:89:C0:8A:AB:B7:F5:11:8E:E0:A9:A1
X509v3 Authority Key Identifier:
keyid:42:7A:26:70:50:8B:94:51:23:BE:EC:BF:13:14:5F:FB:D7:BF:CD:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QnomcFCLlFEjvuy_ExRf-9e_zeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/jBO-jXvQb25kicCKq7f1EY7gqaE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/QnomcFCLlFEjvuy_ExRf-9e_zeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:9481::/32
Signature Algorithm: sha256WithRSAEncryption
29:e3:2f:19:ef:e6:ee:9d:43:95:7c:54:f7:51:0f:54:95:3e:
95:10:b6:b0:9e:e3:12:f9:41:63:56:96:25:6f:ad:5d:fe:f2:
c6:88:a7:64:9a:80:a9:f9:69:9a:89:20:e5:cc:06:66:ac:05:
9c:11:7d:b5:b2:d9:32:ff:5b:d7:18:2a:fe:50:28:0e:96:4d:
fc:7b:81:58:f9:ed:ff:cb:16:84:fa:97:61:a1:0d:7d:df:02:
e6:6d:a8:51:de:13:82:e8:f9:f2:98:6b:68:d6:1a:98:b8:41:
a0:4f:a0:d6:7a:da:27:ea:4c:90:f3:f9:c0:f7:5c:4d:70:88:
aa:05:60:72:29:f7:91:4f:79:be:12:47:2d:f3:e0:50:ae:a7:
a7:f5:59:75:82:7c:44:6f:81:8d:ef:db:ab:2b:9f:d5:b0:2c:
8b:e5:02:bb:61:be:5c:6b:36:af:80:e8:16:24:30:23:8f:9e:
d3:e8:22:58:56:3f:04:eb:86:76:36:c9:69:96:80:cc:d8:1c:
f9:aa:b0:25:07:c2:03:6a:06:f1:2f:b9:f9:b9:21:cd:b0:42:
aa:34:0d:20:09:55:8b:74:47:a7:58:9e:19:79:4e:79:62:54:
c3:e2:70:f1:5e:3c:fa:61:d6:7e:43:03:64:ef:93:07:91:72:
76:dc:d7:bf
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAaBJPkOUYaLCh2K1FZnr/cvRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyN2EyNjcwNTA4Yjk0NTEyM2JlZWNiZjEzMTQ1ZmZiZDdi
ZmNkZTQwHhcNMjYwODI4MTY0MDEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YzEzYmU4ZDdiZDA2ZjZlNjQ4OWMwOGFhYmI3ZjUxMThlZTBhOWExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0E9AWOaI37VdHsWSluAtbHhdUsG
JoJr8dhu/xOwC6QFnq0jfLyI+mN3m3rG0mwQ4zRBIRaxjfJ/pq3fdK56MYAIgs6I
r2K77zO9grHVE8eGBsPBEccqODTzjk7eV9JQ7qN2CamO+4cVBKHqoi8zqy/BVJcD
/jwY6lgJbQ8G8FfIGYcO2orwgvQvDCGno2xBndJ9st7KQXvtts4GUhART0CySh/S
GAfNhnjBGQvel4XYMgHpmqlY0My/Xb/95MovMdPxP89/dZIKXkSltfKcPR3yJkd7
Uld+jHGn1753wdTGc4n6uJxyN0alkQpIYzU+h3I/vfisyIWK62fQr+sKwwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFIwTvo170G9uZInAiqu39RGO4KmhMB8GA1UdIwQY
MBaAFEJ6JnBQi5RRI77svxMUX/vXv83kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUW5vbWNGQ0xsRkVqdnV5X0V4UmYtOWVfemVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9lYzJlMDgtZjYzYS00YmQ3LWI4NjQt
MDZiM2NlYTQ5MmVlLzEvakJPLWpYdlFiMjVraWNDS3E3ZjFFWTdncWFFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9lYzJlMDgtZjYzYS00YmQ3LWI4NjQtMDZiM2NlYTQ5MmVl
LzEvUW5vbWNGQ0xsRkVqdnV5X0V4UmYtOWVfemVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKg2UgTAN
BgkqhkiG9w0BAQsFAAOCAQEAKeMvGe/m7p1DlXxU91EPVJU+lRC2sJ7jEvlBY1aW
JW+tXf7yxoinZJqAqflpmokg5cwGZqwFnBF9tbLZMv9b1xgq/lAoDpZN/HuBWPnt
/8sWhPqXYaENfd8C5m2oUd4Tguj58phraNYamLhBoE+g1nraJ+pMkPP5wPdcTXCI
qgVgcin3kU95vhJHLfPgUK6np/VZdYJ8RG+Bje/bqyuf1bAsi+UCu2G+XGs2r4Do
FiQwI4+e0+giWFY/BOuGdjbJaZaAzNgc+aqwJQfCA2oG8S+5+bkhzbBCqjQNIAlV
i3RHp1ieGXlOeWJUw+Jw8V48+mHWfkMDZO+TB5FydtzXvw==
-----END CERTIFICATE-----
Generated at Sat Sep 19 11:44:15 2026 by rpki-client