Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/j7L1ostSvElAwTMB1uojEg_dQ7w.roa
File: j7L1ostSvElAwTMB1uojEg_dQ7w.roa (raw, json)
Hash identifier: JQYdvzJNJrmmLe3yn0kVwTjbXr/+QZt9rLJ/NpUV64o=
Subject key identifier: 8F:B2:F5:A2:CB:52:BC:49:40:C1:33:01:D6:EA:23:12:0F:DD:43:BC
Certificate issuer: /CN=1232303d1638e0735240491aaa9e42b1887adaca
Certificate serial: 01A03267F1A1DC471E485C7CDD8E06ABC939
Authority key identifier: 12:32:30:3D:16:38:E0:73:52:40:49:1A:AA:9E:42:B1:88:7A:DA:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EjIwPRY44HNSQEkaqp5CsYh62so.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/j7L1ostSvElAwTMB1uojEg_dQ7w.roa
Signing time: Mon 24 Aug 2026 06:14:27 +0000
ROA not before: Mon 24 Aug 2026 06:14:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51440
IP address blocks: 2a03:2940::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.mft
rsync://rpki.ripe.net/repository/DEFAULT/EjIwPRY44HNSQEkaqp5CsYh62so.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 12:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:32:67:f1:a1:dc:47:1e:48:5c:7c:dd:8e:06:ab:c9:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1232303d1638e0735240491aaa9e42b1887adaca
Validity
Not Before: Aug 24 06:14:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8fb2f5a2cb52bc4940c13301d6ea23120fdd43bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:14:e1:d0:3e:ae:71:93:e6:ec:cb:ca:06:bc:
d3:c9:d5:29:5c:14:ee:fd:67:93:a9:0c:0f:4c:1f:
33:45:dd:79:26:1b:6a:ac:ac:59:ae:c1:a0:9b:80:
c2:c4:cf:a0:ee:28:a1:5e:b5:0a:82:eb:e1:d3:6e:
8d:0e:f6:86:46:f3:ed:f5:04:41:62:b4:11:96:a2:
bc:a8:ae:69:38:89:18:22:f9:84:0d:cf:5c:82:2c:
34:cf:a3:24:28:b0:60:50:73:05:bd:32:e5:16:2e:
92:c1:82:fb:95:a8:1a:69:8d:d6:4e:98:56:95:41:
ce:bb:04:16:08:e8:4b:98:e8:19:2c:a1:02:5d:c5:
81:6c:5d:2c:0a:2d:7f:01:96:e9:fa:3b:ab:57:c1:
4b:fe:98:15:2d:70:ff:52:58:70:81:4b:34:b0:52:
b8:e1:10:a0:66:5f:80:c6:1c:e8:82:3a:8c:55:49:
20:2a:24:08:79:f2:22:f0:47:ff:97:d6:bf:93:d2:
a2:78:33:5c:0e:11:c1:49:e6:b4:51:74:59:87:f0:
63:82:96:8f:4b:89:a2:73:cb:9f:04:34:8f:c0:23:
7b:38:84:54:e5:b3:15:d6:67:56:ba:ca:62:ff:f2:
06:66:db:4c:53:51:00:94:d0:96:f2:00:65:7c:cd:
cc:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:B2:F5:A2:CB:52:BC:49:40:C1:33:01:D6:EA:23:12:0F:DD:43:BC
X509v3 Authority Key Identifier:
keyid:12:32:30:3D:16:38:E0:73:52:40:49:1A:AA:9E:42:B1:88:7A:DA:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EjIwPRY44HNSQEkaqp5CsYh62so.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/j7L1ostSvElAwTMB1uojEg_dQ7w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:2940::/32
Signature Algorithm: sha256WithRSAEncryption
37:3f:5e:cd:06:ad:e3:18:23:f6:08:66:3c:6a:51:72:1f:b5:
e0:9e:6c:81:85:96:50:79:c3:b7:63:b9:e2:ed:6e:28:21:ae:
d5:55:c1:7b:3d:8c:16:ac:40:5f:6b:dc:0a:aa:19:1e:55:06:
60:8c:65:0d:2f:75:0d:c4:e2:f3:e7:a7:f9:39:59:35:07:f9:
ff:f2:28:55:97:87:f9:fe:d6:26:a2:64:a9:12:14:a1:f9:39:
24:9e:5b:be:b3:e8:87:6e:c6:8a:8e:b9:79:85:24:4e:2d:1c:
0c:f9:eb:00:79:bc:f8:0b:14:b2:8b:97:15:47:57:c9:d5:81:
41:f0:45:ff:22:96:9b:91:b7:15:03:25:9f:42:c1:66:c8:75:
77:df:a6:47:09:47:d4:94:cd:b6:cc:ce:2b:3a:43:1d:00:2d:
30:06:c4:6a:48:63:bb:46:d3:7e:fe:65:50:0d:9d:bb:75:4a:
ca:d5:41:a3:57:f1:f0:48:1e:5b:7f:f0:3f:e9:29:97:f9:c5:
de:29:48:96:c1:34:2e:1e:04:f2:02:04:ce:c2:dc:f7:27:22:
de:65:8a:c8:ee:fc:56:b4:a4:6a:fd:fd:48:3e:0e:de:ee:37:
39:c0:2e:56:c6:ad:64:83:b8:50:2a:92:08:a7:e4:db:89:0c:
4c:fc:81:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 22:39:00 2026 by rpki-client