Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/jbgGL34jX5ODINDyFGQQpHJU_6o.roa
File: jbgGL34jX5ODINDyFGQQpHJU_6o.roa (raw, json)
Hash identifier: 0lBE2q+2tdoDEEYq5rIypZ03rXO5LeYyKmwthLAvJT0=
Subject key identifier: 8D:B8:06:2F:7E:23:5F:93:83:20:D0:F2:14:64:10:A4:72:54:FF:AA
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01A09EDB3E5EB8882174B6CECD1E7FDEAFBD
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/jbgGL34jX5ODINDyFGQQpHJU_6o.roa
Signing time: Mon 14 Sep 2026 07:39:23 +0000
ROA not before: Mon 14 Sep 2026 07:39:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212154
IP address blocks: 2a0e:b107:1c0f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Sep 2026 20:52:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9e:db:3e:5e:b8:88:21:74:b6:ce:cd:1e:7f:de:af:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Sep 14 07:39:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8db8062f7e235f938320d0f2146410a47254ffaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:76:56:7e:ea:f7:5f:bb:b0:e7:94:a7:4f:5e:
8c:e1:93:e2:22:56:67:51:41:ee:6c:0c:e5:a0:3d:
59:91:42:37:c9:f9:4a:48:dc:43:72:98:f1:31:9d:
12:d7:22:df:bc:02:be:e1:37:4d:ad:b0:ed:78:c9:
f1:b3:31:50:a2:81:59:34:55:3e:17:14:a3:ea:62:
60:c6:e7:3f:b4:15:1c:de:94:70:4a:62:c6:d5:13:
dc:9f:67:27:f2:48:80:c4:60:ec:d3:b6:08:bf:a4:
46:5c:03:64:31:0f:71:e4:f4:ca:4e:08:a5:21:1a:
81:21:c4:0d:78:ba:49:9b:a8:d0:d4:d7:f5:45:4c:
17:97:c1:24:27:44:ef:1f:a9:d1:7b:22:75:62:7b:
b6:7d:71:0d:60:f0:e7:0c:7c:60:a0:a7:59:39:54:
05:fe:44:2a:9a:e6:65:16:1f:7d:ef:a9:ef:e8:d0:
d7:e9:ca:e1:83:5b:be:bf:fe:17:7c:af:cf:f2:2e:
12:a2:ce:ee:83:f1:7c:28:2e:88:b0:93:10:2d:64:
d3:2a:03:b0:ba:f4:27:b8:11:51:c8:7b:e5:ef:26:
7b:dd:ee:7b:24:13:cf:c0:d3:dd:2b:b0:68:14:d4:
9b:15:0d:5f:63:d6:da:72:75:8f:8c:d4:4e:98:4c:
bb:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:B8:06:2F:7E:23:5F:93:83:20:D0:F2:14:64:10:A4:72:54:FF:AA
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/jbgGL34jX5ODINDyFGQQpHJU_6o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:1c0f::/48
Signature Algorithm: sha256WithRSAEncryption
ba:46:af:07:37:70:d9:d3:52:a2:13:26:48:9e:11:9b:8d:cc:
40:f7:5f:b4:63:b3:59:c9:08:d5:5c:e1:8c:c7:9a:54:60:bf:
59:29:b4:c9:a1:1b:5e:4d:7d:e3:e2:c6:54:ff:45:d0:48:b8:
b3:46:28:aa:8e:1a:d1:d8:05:43:be:81:16:75:a5:67:ab:87:
91:65:7e:7b:18:39:76:bf:68:7b:42:9d:f9:58:28:5a:31:4a:
82:28:a0:19:87:7b:0c:9d:1a:f1:18:3c:61:15:c2:d7:20:91:
1b:7b:a3:af:99:aa:7a:cc:20:20:69:5e:51:3d:d9:d5:6d:12:
81:c7:e2:e0:d6:9e:92:af:16:00:f6:4d:2d:da:e4:b2:49:e1:
2c:8f:57:f9:61:a2:05:60:2d:e6:54:f2:f3:c4:a9:2a:15:c1:
a3:a2:24:0b:ab:67:fb:ee:32:b5:e6:19:01:75:bf:bc:1b:c6:
dc:11:1f:a8:09:e2:47:84:5f:ab:d3:c6:bc:45:26:21:71:92:
57:65:74:98:fe:cf:ec:68:b0:5b:6f:a9:17:06:82:a4:71:86:
85:db:c2:06:52:2f:cc:db:9b:ad:bd:8a:0c:1a:e9:b9:50:c0:
91:0c:9c:eb:1c:85:cc:d1:85:36:f3:c1:a1:62:43:10:ab:9a:
1c:85:04:66
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAaCe2z5euIghdLbOzR5/3q+9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjYwOTE0MDczOTIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZGI4MDYyZjdlMjM1ZjkzODMyMGQwZjIxNDY0MTBhNDcyNTRmZmFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3ZWfur3X7uw55SnT16M4ZPiIlZn
UUHubAzloD1ZkUI3yflKSNxDcpjxMZ0S1yLfvAK+4TdNrbDteMnxszFQooFZNFU+
FxSj6mJgxuc/tBUc3pRwSmLG1RPcn2cn8kiAxGDs07YIv6RGXANkMQ9x5PTKTgil
IRqBIcQNeLpJm6jQ1Nf1RUwXl8EkJ0TvH6nReyJ1Ynu2fXENYPDnDHxgoKdZOVQF
/kQqmuZlFh9976nv6NDX6crhg1u+v/4XfK/P8i4Sos7ug/F8KC6IsJMQLWTTKgOw
uvQnuBFRyHvl7yZ73e57JBPPwNPdK7BoFNSbFQ1fY9bacnWPjNROmEy7bwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFI24Bi9+I1+TgyDQ8hRkEKRyVP+qMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvamJnR0wzNGpYNU9ESU5EeUZHUVFwSEpVXzZvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6xBxwP
MA0GCSqGSIb3DQEBCwUAA4IBAQC6Rq8HN3DZ01KiEyZInhGbjcxA91+0Y7NZyQjV
XOGMx5pUYL9ZKbTJoRteTX3j4sZU/0XQSLizRiiqjhrR2AVDvoEWdaVnq4eRZX57
GDl2v2h7Qp35WChaMUqCKKAZh3sMnRrxGDxhFcLXIJEbe6Ovmap6zCAgaV5RPdnV
bRKBx+Lg1p6SrxYA9k0t2uSySeEsj1f5YaIFYC3mVPLzxKkqFcGjoiQLq2f77jK1
5hkBdb+8G8bcER+oCeJHhF+r08a8RSYhcZJXZXSY/s/saLBbb6kXBoKkcYaF28IG
Ui/M25utvYoMGum5UMCRDJzrHIXM0YU288GhYkMQq5ochQRm
-----END CERTIFICATE-----
Generated at Tue Sep 15 01:23:38 2026 by rpki-client