Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/jNv9clDVb4d2sC4AHgEzIW6vFc8.roa
File: jNv9clDVb4d2sC4AHgEzIW6vFc8.roa (raw, json)
Hash identifier: IpsEoid/M3kTU9lPE9X78L9iHjI2jmtbHy/lZOBDC/A=
Subject key identifier: 8C:DB:FD:72:50:D5:6F:87:76:B0:2E:00:1E:01:33:21:6E:AF:15:CF
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 01A155208F1B181235CAABCA9B361BFA510D
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/jNv9clDVb4d2sC4AHgEzIW6vFc8.roa
Signing time: Mon 19 Oct 2026 17:05:59 +0000
ROA not before: Mon 19 Oct 2026 17:05:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209641
IP address blocks: 2a11:9646::/32 maxlen: 32
2a11:eac1::/32 maxlen: 32
2a12:8784::/32 maxlen: 32
2a12:f985::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:55:20:8f:1b:18:12:35:ca:ab:ca:9b:36:1b:fa:51:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Oct 19 17:05:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8cdbfd7250d56f8776b02e001e0133216eaf15cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1b:93:09:49:67:9d:89:5b:e8:ab:27:56:b1:
b1:63:a0:6f:50:eb:be:e6:8e:b7:39:8e:5e:36:73:
95:1b:db:b6:6f:b0:3f:40:34:7b:b7:d7:6a:d3:dc:
64:e1:b1:92:e5:73:e1:f0:63:8f:50:1d:e1:d6:6e:
28:8b:96:cc:13:b6:19:7c:14:2c:23:45:c5:d3:6b:
9f:5c:dd:6f:ef:6d:1b:f7:84:1c:1f:02:f5:97:3d:
3c:ed:eb:bf:f9:5e:ec:55:14:cb:06:3e:72:a0:7c:
13:32:67:19:d6:ac:a6:c6:0e:b0:7b:eb:b8:e3:d9:
d7:46:33:16:52:66:ee:b3:55:28:6f:6e:ea:c0:d4:
54:f6:88:74:c3:9e:60:ce:a7:96:87:4f:62:84:d1:
9f:87:1d:8c:47:46:1d:25:12:bf:68:7e:95:5f:99:
72:51:10:e0:82:dd:b2:b0:69:c2:5d:98:b8:d3:24:
67:18:ba:8b:df:63:5e:92:47:74:73:2b:bb:79:bb:
89:ae:ed:7b:78:83:fb:7f:07:bb:b9:77:4e:6f:fc:
45:34:21:a7:dd:76:4a:9b:1a:6e:45:5b:4d:a3:7c:
42:2f:a3:03:64:e4:38:db:c9:3b:b3:7c:28:bc:0a:
6b:19:84:a9:da:c1:5c:52:bf:fc:cd:5e:33:49:07:
4a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:DB:FD:72:50:D5:6F:87:76:B0:2E:00:1E:01:33:21:6E:AF:15:CF
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/jNv9clDVb4d2sC4AHgEzIW6vFc8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:9646::/32
2a11:eac1::/32
2a12:8784::/32
2a12:f985::/32
Signature Algorithm: sha256WithRSAEncryption
0c:7c:01:b8:6b:c7:d6:7b:57:99:b3:12:f9:f3:b3:ab:54:7d:
a9:af:ea:a7:83:27:7b:32:d5:f3:77:16:83:b9:e3:e1:5f:12:
32:eb:d5:88:db:12:29:67:d6:a6:a6:51:79:8f:43:36:2b:1b:
0e:60:8f:a9:d4:07:2a:fe:1a:51:e0:b7:f5:9a:78:22:ea:32:
6c:18:3a:dc:ed:e9:3c:9e:1b:8c:6c:f3:9d:ce:44:57:1c:0c:
85:e2:c8:1b:7a:15:65:a2:8a:dc:b4:bd:3f:87:c7:93:0c:7b:
c9:1b:a6:31:f7:d1:d8:83:79:7b:77:00:1c:96:08:26:0c:ae:
4d:33:28:4d:15:13:98:b5:9f:c3:2e:46:c1:41:a5:ad:d4:35:
47:7c:ba:e1:ae:2f:c7:a0:b6:68:0b:f4:08:58:aa:12:5d:de:
4b:04:3e:8d:3c:3a:b1:0e:d8:e1:35:04:46:4b:c5:9e:7b:dd:
18:b0:12:1c:06:22:a2:c0:ea:e9:5a:10:8c:6b:41:cf:fd:c6:
46:bd:a9:9c:89:64:bb:e1:ff:3b:e9:21:e4:6d:62:2d:f2:2a:
bf:b4:be:4f:79:95:65:7e:5e:3f:54:19:c7:c8:ed:d2:f7:2a:
7c:49:df:d9:04:70:c0:93:a4:de:5e:5a:2b:d5:ba:69:b0:7c:
47:d5:50:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 05:22:53 2026 by rpki-client