Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/0JzBQvukW_Y7xEcBQ9ah-JPcgJc.roa
File: 0JzBQvukW_Y7xEcBQ9ah-JPcgJc.roa (raw, json)
Hash identifier: zo02YWtgId+O1OACAfrwANKmVWUalQAhRhyXxinP0KA=
Subject key identifier: D0:9C:C1:42:FB:A4:5B:F6:3B:C4:47:01:43:D6:A1:F8:93:DC:80:97
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 019E97B9172CE52AC557719F8D99EAB992F6
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/0JzBQvukW_Y7xEcBQ9ah-JPcgJc.roa
Signing time: Fri 05 Jun 2026 12:19:10 +0000
ROA not before: Fri 05 Jun 2026 12:19:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 132359
IP address blocks: 46.29.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 04:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:97:b9:17:2c:e5:2a:c5:57:71:9f:8d:99:ea:b9:92:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Jun 5 12:19:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d09cc142fba45bf63bc4470143d6a1f893dc8097
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2a:90:15:57:e8:27:7a:41:55:e4:63:73:40:
c6:4f:7d:3d:11:ad:37:9c:c4:6c:73:cd:f5:ef:ca:
9c:99:71:20:65:a6:49:65:c3:b1:f3:bc:20:c5:de:
a1:9c:2f:65:29:31:a3:e6:59:35:85:61:b0:82:4a:
40:53:53:3a:83:f2:4c:c9:17:24:c6:10:fc:dc:46:
6a:2f:c5:2d:ed:22:8e:d0:6d:89:e0:0f:e0:22:69:
e5:57:82:ff:32:20:27:44:83:e3:2d:79:d9:3c:42:
9b:2a:29:be:07:98:09:25:de:dc:e7:7b:51:da:8c:
4d:9c:6a:f4:97:9c:5a:dc:3d:bc:30:16:56:57:84:
2e:12:f9:07:a8:6c:b1:2a:fd:3b:c7:7c:ce:a7:43:
43:01:63:68:f1:da:4d:3e:49:96:f3:81:5c:70:2d:
b1:b4:24:74:80:65:e7:3a:75:8f:1d:59:d1:8e:05:
a8:fb:fc:c0:72:07:1e:ea:07:58:5c:ee:46:2c:cc:
b1:1a:ae:e9:e5:e6:19:f1:d3:78:68:02:be:ff:de:
62:ae:cf:ac:04:8e:29:15:21:b8:8b:4d:d6:8b:d2:
c8:01:3a:81:4f:eb:c6:4e:91:84:06:2e:a4:51:a0:
a0:e7:66:5f:72:4a:b2:f4:41:ed:c7:d8:06:5f:5f:
9d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:9C:C1:42:FB:A4:5B:F6:3B:C4:47:01:43:D6:A1:F8:93:DC:80:97
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/0JzBQvukW_Y7xEcBQ9ah-JPcgJc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.29.26.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:56:fc:da:d9:3f:ab:f6:a7:bd:36:0e:5c:7e:e4:00:b7:11:
18:6f:d9:5c:cf:4a:48:a6:7c:ce:4f:99:2f:4c:05:d1:a6:ec:
2f:7d:59:28:8a:32:27:af:24:35:31:0c:15:b7:5f:a4:81:ac:
e9:2f:94:34:c2:15:c8:9f:b5:f8:d8:ba:0d:2e:01:47:ed:ac:
48:3d:f3:91:e2:9c:6c:9e:c3:0b:7e:54:25:51:92:3c:0f:d4:
e8:4a:e6:fd:a5:26:4c:3b:29:87:8c:e7:2f:ce:12:20:64:10:
ba:2e:59:fa:51:48:f2:dd:45:9a:59:da:84:be:b7:b1:c7:74:
d6:4b:30:ab:41:37:54:2a:6c:fb:a1:ec:49:17:05:70:f8:7b:
df:8a:9e:b1:e2:e7:73:45:25:aa:93:92:15:ad:df:1f:78:aa:
13:80:50:85:60:d0:1f:d1:df:88:bc:48:70:4c:1f:64:b4:f0:
30:0d:94:c7:fe:60:f0:52:3b:e6:ea:48:2b:1f:88:76:18:96:
31:85:f8:35:5a:4f:d3:f0:ce:66:4e:14:22:9e:ea:46:14:7e:
e2:c6:e3:a2:a1:ef:1a:41:dc:40:31:11:f6:fc:b3:c5:b8:43:
51:01:ef:9f:c2:2e:ac:b9:ec:f7:db:a7:46:ff:85:2a:a4:b7:
10:f4:f6:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 14:39:48 2026 by rpki-client