Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/JtD5a29Sn62HQ4vkoAYqpUFAJYA.roa
File: JtD5a29Sn62HQ4vkoAYqpUFAJYA.roa (raw, json)
Hash identifier: J9iCJAQDkzluABbDk3bojWle9Ew1ZfErsVwjtD18BOQ=
Subject key identifier: 26:D0:F9:6B:6F:52:9F:AD:87:43:8B:E4:A0:06:2A:A5:41:40:25:80
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01A09ECE86809CCC92CF377D5FE5E2BB3992
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/JtD5a29Sn62HQ4vkoAYqpUFAJYA.roa
Signing time: Mon 14 Sep 2026 07:25:29 +0000
ROA not before: Mon 14 Sep 2026 07:25:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206569
IP address blocks: 2a0e:b107:19b1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Sep 2026 20:52:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9e:ce:86:80:9c:cc:92:cf:37:7d:5f:e5:e2:bb:39:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Sep 14 07:25:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=26d0f96b6f529fad87438be4a0062aa541402580
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:50:ee:72:2b:06:9f:ff:0f:4c:df:ac:1e:28:
39:7b:7a:8b:d4:5c:5c:8a:3c:f3:64:56:a1:58:b4:
8a:a4:60:50:68:28:32:c1:03:a0:9a:cc:73:e4:39:
da:56:92:18:6d:ba:47:3b:cb:7e:93:e2:7b:97:a6:
5d:a2:cf:ef:8b:2d:97:57:d0:d1:59:dd:f6:0c:96:
ca:1d:ff:f6:f4:3d:3c:51:7f:52:00:da:bf:17:ec:
48:34:1c:6f:7d:75:c7:df:e3:1a:c2:13:ec:cc:21:
d9:b1:92:fe:ba:a9:19:ec:5f:36:24:d2:d7:b2:4d:
64:b8:63:ca:bd:59:93:15:68:3f:11:8f:e7:f5:61:
c4:e8:16:a6:3d:96:dc:57:f2:1b:b9:c5:49:39:78:
17:b2:f7:61:6f:b9:41:1a:92:be:72:cc:42:a6:fb:
e2:b8:ef:40:2a:c8:9d:b3:4b:ff:8b:a5:41:f0:f0:
a5:05:47:9c:49:de:2e:8b:17:56:fb:e8:44:a1:69:
c5:c8:f5:f7:46:7c:37:a4:69:3c:32:39:21:ab:3d:
6d:00:22:46:aa:cc:a8:0f:09:7a:81:f3:4b:37:08:
74:88:82:f7:f9:9b:c9:18:f8:fc:b1:61:05:0b:c7:
a4:a4:8b:eb:df:d5:be:61:22:88:29:a6:20:e9:99:
79:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:D0:F9:6B:6F:52:9F:AD:87:43:8B:E4:A0:06:2A:A5:41:40:25:80
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/JtD5a29Sn62HQ4vkoAYqpUFAJYA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:19b1::/48
Signature Algorithm: sha256WithRSAEncryption
78:e0:73:37:41:50:c4:dc:c9:6b:94:a9:b5:23:71:5b:ff:cf:
15:a8:70:d8:67:20:49:eb:f3:d5:27:49:3d:df:1d:78:92:2e:
dd:e7:ab:f8:27:9b:cb:dc:69:3c:f6:74:88:e2:61:14:60:67:
82:26:49:f0:23:4b:26:e8:c8:f0:51:d1:76:62:e9:47:b4:de:
73:de:0f:f1:2f:80:bc:01:b5:89:84:ad:27:c1:1b:f0:85:5c:
45:2c:9b:7d:83:07:9e:c5:64:ee:6b:6b:89:56:ba:a6:39:ee:
d1:cf:56:91:e3:ad:aa:9b:ba:39:04:40:56:6a:f4:87:9d:1d:
3b:50:c4:ab:bf:34:c7:d6:63:cb:c5:99:7a:3a:6b:4a:e5:ca:
5d:e2:89:18:70:5f:ed:b7:12:57:24:e7:9e:08:ce:c3:cd:4d:
52:81:62:75:9e:bc:02:41:c1:eb:84:cd:dc:11:80:81:12:51:
a1:c0:e5:cd:d5:4e:c8:a9:76:47:03:af:97:6a:bc:a0:e4:c1:
34:66:e2:f2:d3:6f:58:db:fc:57:50:21:f8:51:69:26:9b:10:
48:02:fe:aa:4d:96:b9:a8:bb:ab:fa:a1:96:09:f7:b6:93:13:
18:e5:de:ec:69:c1:a8:c2:14:c5:d7:42:f1:9b:c1:c3:21:44:
6f:45:1f:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 01:23:55 2026 by rpki-client