Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/2b26af-e754-4080-9ec9-59f0f10b1d29/1/jcSJaCjNOwHwhbFpyE4uWdCrhi4.roa
File: jcSJaCjNOwHwhbFpyE4uWdCrhi4.roa (raw, json)
Hash identifier: 0TxSTCi/XS0O1qfQUziR/iAsNnnvd41KQSzNVhpvgcY=
Subject key identifier: 8D:C4:89:68:28:CD:3B:01:F0:85:B1:69:C8:4E:2E:59:D0:AB:86:2E
Certificate issuer: /CN=1ebab40d608133cddf76c3b5a6f815df81fbc7dd
Certificate serial: 019FCC5CE6FC0E40764B2E278121BD502ACB
Authority key identifier: 1E:BA:B4:0D:60:81:33:CD:DF:76:C3:B5:A6:F8:15:DF:81:FB:C7:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hrq0DWCBM83fdsO1pvgV34H7x90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/2b26af-e754-4080-9ec9-59f0f10b1d29/1/jcSJaCjNOwHwhbFpyE4uWdCrhi4.roa
Signing time: Tue 04 Aug 2026 10:41:08 +0000
ROA not before: Tue 04 Aug 2026 10:41:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31477
IP address blocks: 2001:678:2b4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/2b26af-e754-4080-9ec9-59f0f10b1d29/1/Hrq0DWCBM83fdsO1pvgV34H7x90.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/2b26af-e754-4080-9ec9-59f0f10b1d29/1/Hrq0DWCBM83fdsO1pvgV34H7x90.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hrq0DWCBM83fdsO1pvgV34H7x90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Aug 2026 13:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cc:5c:e6:fc:0e:40:76:4b:2e:27:81:21:bd:50:2a:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ebab40d608133cddf76c3b5a6f815df81fbc7dd
Validity
Not Before: Aug 4 10:41:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8dc4896828cd3b01f085b169c84e2e59d0ab862e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9d:aa:e8:40:bc:53:1d:73:34:5b:b0:e9:7e:
5d:fb:7d:d5:8c:fe:42:33:4f:6c:a6:87:7e:92:a4:
fe:8f:b0:64:40:98:08:41:b8:fe:dd:40:e3:2c:5a:
d9:77:b9:04:fa:62:06:99:65:a1:87:65:f5:82:54:
63:61:5d:d1:98:35:5e:96:00:a0:26:09:6e:34:61:
d3:7b:91:73:20:0e:10:0a:c3:fe:67:04:9b:25:83:
fa:7e:6a:31:d1:fa:7c:2a:8f:5c:ba:33:d3:f3:ce:
b6:44:f9:01:39:10:08:54:fc:08:10:80:3e:99:d0:
15:33:78:c6:a2:d8:bd:51:53:39:3f:17:a1:9e:1b:
eb:ff:f3:be:b7:84:9f:79:8e:98:85:97:b1:7c:30:
2f:b9:18:33:21:9b:81:55:a8:b3:66:d6:f9:c6:70:
af:b2:5b:fa:71:e3:dd:cf:8a:1b:d9:6d:4f:e5:75:
8e:af:e0:87:49:cd:c0:23:f4:14:6b:20:f3:7c:49:
42:f1:f1:58:01:63:4e:a1:91:2c:a5:fb:14:49:33:
9e:9a:c5:5f:2f:3f:87:c7:72:fb:dc:0a:ef:96:e6:
b9:7e:86:25:a2:04:3c:d3:b2:a4:76:63:3a:cb:5d:
7d:62:30:fd:01:d5:a4:9c:6f:e0:2a:4d:1d:5c:a4:
9c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:C4:89:68:28:CD:3B:01:F0:85:B1:69:C8:4E:2E:59:D0:AB:86:2E
X509v3 Authority Key Identifier:
keyid:1E:BA:B4:0D:60:81:33:CD:DF:76:C3:B5:A6:F8:15:DF:81:FB:C7:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hrq0DWCBM83fdsO1pvgV34H7x90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/2b26af-e754-4080-9ec9-59f0f10b1d29/1/jcSJaCjNOwHwhbFpyE4uWdCrhi4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/2b26af-e754-4080-9ec9-59f0f10b1d29/1/Hrq0DWCBM83fdsO1pvgV34H7x90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:2b4::/48
Signature Algorithm: sha256WithRSAEncryption
5a:de:7d:4f:56:92:4f:6e:e7:9a:73:26:bb:f8:20:a9:52:f6:
17:dd:c1:83:2e:27:c3:b1:95:c6:b3:4e:0f:c2:18:93:c0:60:
61:66:3a:81:63:51:63:74:c2:03:0f:3f:98:30:d6:a6:01:d7:
4b:f7:b5:bc:27:c4:8b:9e:5a:c9:23:5f:d0:39:74:d0:bd:71:
24:c9:38:72:f4:26:84:5c:cc:7e:8a:45:3b:37:26:e3:72:6f:
b9:f4:f2:72:53:be:bc:16:cf:dd:d7:7e:69:d0:7d:81:57:11:
fb:99:c2:6f:2f:10:62:54:c2:8c:03:4a:e9:90:c5:8a:32:e0:
97:04:4f:60:0c:83:58:eb:74:70:29:9e:9d:cc:a8:2c:9d:61:
ff:05:79:7f:c9:e7:63:b9:2b:57:76:4e:ee:f1:cf:69:e4:2d:
aa:f7:ef:a4:fe:32:dc:44:0b:0b:b0:1b:e7:b8:a5:e0:46:c3:
62:25:0c:7f:56:89:b6:e7:c1:13:02:6b:26:a1:95:df:b2:b1:
3f:d4:b8:94:cc:66:1e:68:8c:5b:69:53:a3:12:93:08:da:7e:
6c:a2:42:51:3f:b1:10:46:d0:fb:c7:95:f4:ee:84:91:2e:5b:
c4:84:a2:91:8b:cd:06:88:95:2b:15:cf:cf:03:da:e5:13:22:
27:44:41:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 5 18:06:08 2026 by rpki-client