Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/f0ad4d-d1c2-4f15-a199-e34255f5006a/1/jgxF8uNjw0FJMTIpLdGbhnc20Y8.roa
File: jgxF8uNjw0FJMTIpLdGbhnc20Y8.roa (raw, json)
Hash identifier: W4/5mMOIFv+IOfMz9VsQjlSsNom5QdzMSpTVZZ7Z+5k=
Subject key identifier: 8E:0C:45:F2:E3:63:C3:41:49:31:32:29:2D:D1:9B:86:77:36:D1:8F
Certificate issuer: /CN=2ed9b0ee387c9afd15c7b7784005e86cc97e8818
Certificate serial: 019F22DE071BD6D8CECB301FD01E230B1A62
Authority key identifier: 2E:D9:B0:EE:38:7C:9A:FD:15:C7:B7:78:40:05:E8:6C:C9:7E:88:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ltmw7jh8mv0Vx7d4QAXobMl-iBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/f0ad4d-d1c2-4f15-a199-e34255f5006a/1/jgxF8uNjw0FJMTIpLdGbhnc20Y8.roa
Signing time: Thu 02 Jul 2026 12:46:43 +0000
ROA not before: Thu 02 Jul 2026 12:46:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210644
IP address blocks: 2a01:e5c0:2000::/36 maxlen: 36
2a01:e5c0:3000::/36 maxlen: 36
2a01:e5c0:4000::/36 maxlen: 36
2a01:e5c0:5000::/36 maxlen: 36
2a01:e5c0:6000::/36 maxlen: 36
2a01:e5c0:7000::/36 maxlen: 36
2a01:e5c0:8000::/48 maxlen: 48
2a01:e5c0:8003::/48 maxlen: 48
2a01:e5c0:8004::/48 maxlen: 48
2a01:e5c0:8004:ec3b::/64 maxlen: 64
2a01:e5c0:8008::/48 maxlen: 48
2a01:e5c0:9000::/36 maxlen: 36
2a01:e5c0:f000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/f0ad4d-d1c2-4f15-a199-e34255f5006a/1/Ltmw7jh8mv0Vx7d4QAXobMl-iBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/f0ad4d-d1c2-4f15-a199-e34255f5006a/1/Ltmw7jh8mv0Vx7d4QAXobMl-iBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ltmw7jh8mv0Vx7d4QAXobMl-iBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:22:de:07:1b:d6:d8:ce:cb:30:1f:d0:1e:23:0b:1a:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ed9b0ee387c9afd15c7b7784005e86cc97e8818
Validity
Not Before: Jul 2 12:46:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8e0c45f2e363c341493132292dd19b867736d18f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:77:17:86:74:0a:c3:51:f3:b6:05:05:4a:98:
c9:48:d4:0a:47:f7:4a:ab:7d:1b:37:08:86:dd:e7:
23:9c:9f:1b:fb:b6:08:d2:0c:d4:db:ba:4b:be:86:
7b:50:2b:6d:78:59:9f:35:1c:3c:67:9e:c1:d5:e7:
53:eb:98:c0:64:e5:6a:81:ac:21:ed:e3:db:f1:16:
10:65:e4:de:e5:5a:c4:f3:11:96:d5:b4:09:04:49:
0a:e8:c8:bb:45:c0:2e:54:ea:30:d7:9b:ac:be:9a:
11:e2:03:ac:64:43:61:7d:5f:32:e1:24:79:84:54:
c3:e9:69:c9:25:eb:d0:ce:16:53:a3:d1:10:14:41:
0c:07:4e:dd:5a:ab:5a:c0:8a:cd:f9:07:0a:50:4e:
05:2a:d1:e3:32:1a:24:53:60:d6:1c:98:df:74:d8:
f8:d8:bf:ac:c3:cd:86:c8:13:eb:26:1b:69:aa:ff:
c8:88:e2:1f:c2:dc:5c:13:8a:d1:ff:50:cc:96:64:
f8:8c:1c:21:a0:02:98:c9:91:41:b2:1f:5e:8a:98:
92:0a:8e:8e:3a:e1:bf:0b:3a:ad:36:08:8f:46:8e:
d5:d1:ba:cb:c9:29:3c:91:81:5e:d5:4d:4c:7d:63:
86:5d:e5:ff:03:40:4c:57:28:23:3a:5f:f7:a7:4d:
d6:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:0C:45:F2:E3:63:C3:41:49:31:32:29:2D:D1:9B:86:77:36:D1:8F
X509v3 Authority Key Identifier:
keyid:2E:D9:B0:EE:38:7C:9A:FD:15:C7:B7:78:40:05:E8:6C:C9:7E:88:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ltmw7jh8mv0Vx7d4QAXobMl-iBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/f0ad4d-d1c2-4f15-a199-e34255f5006a/1/jgxF8uNjw0FJMTIpLdGbhnc20Y8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/f0ad4d-d1c2-4f15-a199-e34255f5006a/1/Ltmw7jh8mv0Vx7d4QAXobMl-iBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:e5c0:2000::-2a01:e5c0:8000:ffff:ffff:ffff:ffff:ffff
2a01:e5c0:8003::-2a01:e5c0:8004:ffff:ffff:ffff:ffff:ffff
2a01:e5c0:8008::/48
2a01:e5c0:9000::/36
2a01:e5c0:f000::/36
Signature Algorithm: sha256WithRSAEncryption
19:7a:c9:6c:f7:02:88:d0:8c:92:be:17:bc:8f:92:28:63:34:
33:54:da:bd:0b:62:9f:c7:ca:fc:12:76:bb:d3:70:67:e6:60:
83:8f:8c:16:8f:c1:c3:da:e2:94:4a:9b:70:8f:25:e2:0d:2e:
a4:40:88:9e:79:2e:8c:f4:bf:06:7f:ca:de:41:1b:b0:ff:3e:
2c:09:ed:34:a0:82:a9:1c:53:35:c5:4b:80:89:3e:1c:8f:4f:
a6:6c:07:63:69:de:ef:29:30:32:40:62:bc:de:70:d4:fd:c1:
56:d6:52:0d:a9:ad:7f:8f:00:fb:a7:b7:7c:80:4e:42:3c:19:
e6:b7:e3:fc:9e:ff:7f:f3:3c:c2:4f:f0:9a:17:7d:49:50:ac:
50:82:07:09:b0:d7:8b:fe:9a:f6:6e:47:63:75:ac:5a:5b:6d:
ce:18:b0:3a:2f:c5:89:92:1c:34:6f:9d:78:bc:74:e4:a2:90:
ed:d9:4b:1c:98:38:68:41:63:77:2e:d6:eb:13:f8:6a:23:fe:
8e:b4:a2:7f:7f:9a:9f:5f:5c:f7:06:87:12:b6:9b:d6:9c:c4:
bf:49:bf:e6:86:4f:e8:dc:a2:03:5d:93:9e:01:9c:cd:e4:57:
aa:26:61:a9:9f:22:a2:be:53:4e:8e:a4:35:f9:a5:51:2a:72:
7a:b1:89:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 08:39:24 2026 by rpki-client