Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/jpYN7TQskcyH7LETtRyfaOjCcWk.roa
File: jpYN7TQskcyH7LETtRyfaOjCcWk.roa (raw, json)
Hash identifier: Fa/6BNV8MUvaK8x7D3JcCiN8xGoK1lqUxA35e2kmgNk=
Subject key identifier: 8E:96:0D:ED:34:2C:91:CC:87:EC:B1:13:B5:1C:9F:68:E8:C2:71:69
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01A03B93614232911BE5D27855466230D5DE
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/jpYN7TQskcyH7LETtRyfaOjCcWk.roa
Signing time: Wed 26 Aug 2026 00:58:29 +0000
ROA not before: Wed 26 Aug 2026 00:58:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199340
IP address blocks: 2a06:de03:9c00::/38 maxlen: 48
2a06:de05:6000::/38 maxlen: 48
2a0e:b107:fa0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 13:21:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3b:93:61:42:32:91:1b:e5:d2:78:55:46:62:30:d5:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Aug 26 00:58:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8e960ded342c91cc87ecb113b51c9f68e8c27169
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9e:e4:cd:7f:7c:94:9d:2d:34:76:9c:73:50:
4a:d1:25:e7:64:20:6f:69:9c:22:07:23:a8:05:e4:
40:85:18:43:7d:ec:36:9e:38:00:f3:cc:01:a7:a7:
99:f3:17:54:17:bf:e1:3d:46:b3:d5:c3:fb:13:37:
fe:17:9b:f6:f8:02:e9:88:16:7d:34:39:71:9e:c0:
e1:72:50:08:86:0c:7e:45:d7:77:0b:f5:66:69:b5:
2c:f0:7d:67:4a:c5:ea:63:f6:15:e2:73:d2:19:63:
f5:af:71:c3:66:8a:85:8f:c7:10:96:38:bf:ec:5c:
80:fb:9c:5f:79:52:fa:ac:b5:11:98:e5:03:09:4d:
35:d1:8e:1e:ed:13:c5:42:43:f8:37:f4:15:71:22:
5c:ef:13:8f:98:fb:12:e1:5b:a8:83:6f:e1:26:c6:
a1:73:52:9a:87:25:fe:7a:c6:8e:41:67:de:5c:60:
58:bb:8e:9a:29:7e:0f:ce:95:34:fb:9e:6a:d5:17:
8c:e1:0a:75:9a:83:57:1e:74:06:12:36:85:f5:0e:
53:2f:67:a0:d1:02:22:e5:2e:df:53:2a:07:ef:3e:
e3:5a:ac:b2:9c:b8:a1:cb:65:d7:43:0a:21:68:cb:
17:79:c3:73:87:89:a5:40:bf:8d:d7:cd:90:05:c3:
5c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:96:0D:ED:34:2C:91:CC:87:EC:B1:13:B5:1C:9F:68:E8:C2:71:69
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/jpYN7TQskcyH7LETtRyfaOjCcWk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:de03:9c00::/38
2a06:de05:6000::/38
2a0e:b107:fa0::/44
Signature Algorithm: sha256WithRSAEncryption
88:9a:42:f0:e1:76:8c:ab:55:de:6f:81:d0:d8:d5:f3:81:60:
7e:a9:e0:8e:2c:06:0f:a3:ae:b5:61:55:34:91:f1:e6:bd:f8:
e4:3a:01:53:cf:44:80:62:06:72:2a:a1:4c:f6:09:16:ae:02:
69:07:35:af:e9:fa:70:f6:da:75:71:bd:3b:6c:ae:7b:62:91:
07:bf:83:2a:7d:80:82:35:4b:bb:c3:6d:70:14:a0:d2:d9:b2:
a6:f0:20:35:53:51:30:b4:c5:18:b2:9b:e3:5a:1f:14:a6:8c:
cd:35:03:60:26:61:16:7b:de:ba:61:32:89:6e:05:12:77:ba:
a9:20:09:c6:40:12:17:f6:c3:80:9c:63:1a:b2:a1:75:5c:ed:
94:4c:6b:2f:7b:41:6a:3c:0b:01:1e:0e:37:8a:5e:dc:65:ba:
80:89:31:a7:7a:f5:72:fe:6e:5a:cb:e8:b6:2d:e9:e8:af:16:
cd:fa:97:6d:20:36:fa:d6:b6:e4:84:e1:70:82:e6:e4:7a:5e:
b8:8c:86:62:c5:00:79:cf:0a:dc:d1:18:eb:65:2a:ee:0d:a3:
9b:05:f5:eb:65:c2:e8:65:d5:f2:fe:dc:dc:f0:cf:82:4c:8d:
03:0d:6f:a6:45:b6:7e:7f:a0:be:38:c1:cb:db:ad:e5:64:7c:
83:0b:8f:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 18:14:48 2026 by rpki-client