Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/jQx0HH6qkVcTuYTzcbWF4pgxPRQ.roa
File: jQx0HH6qkVcTuYTzcbWF4pgxPRQ.roa (raw, json)
Hash identifier: YfI/sMVyQiOpLP2csHCTy4hMW+8Ra26g5BWvuQFljZw=
Subject key identifier: 8D:0C:74:1C:7E:AA:91:57:13:B9:84:F3:71:B5:85:E2:98:31:3D:14
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 019E2C59B64AD52CB6F190DBB3188F7B2363
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/jQx0HH6qkVcTuYTzcbWF4pgxPRQ.roa
Signing time: Fri 15 May 2026 15:55:37 +0000
ROA not before: Fri 15 May 2026 15:55:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205828
IP address blocks: 2a0d:b844::/32 maxlen: 32
2a0d:e245::/32 maxlen: 32
2a11:ec4::/32 maxlen: 32
2a11:9042::/32 maxlen: 32
2a11:b4c3::/32 maxlen: 32
2a11:b4c6::/32 maxlen: 32
2a12:647::/32 maxlen: 32
2a12:cf85::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 03:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2c:59:b6:4a:d5:2c:b6:f1:90:db:b3:18:8f:7b:23:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: May 15 15:55:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8d0c741c7eaa915713b984f371b585e298313d14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:46:45:91:84:da:db:6a:1b:f1:11:ec:47:eb:
42:b7:1c:f0:59:74:1b:d0:bd:7e:f8:49:b1:ae:d8:
7c:66:b0:54:75:76:ee:f8:7a:b9:67:65:ae:73:4a:
11:49:23:b4:be:90:6d:ef:ab:6d:6a:46:2d:f3:35:
c5:39:b7:5c:c2:9f:33:2c:d8:03:5a:b4:9a:f0:8e:
69:d7:5f:03:60:cb:04:9e:a7:38:8a:8a:26:02:b6:
a7:65:a0:24:b0:05:de:d0:5a:27:1e:52:c4:fd:1c:
49:f8:54:ec:b7:de:87:d0:d8:b7:a9:d1:f7:ed:77:
39:9a:fa:dc:81:9a:53:fe:df:98:b0:64:03:33:ba:
2c:04:d0:6a:f8:67:45:36:10:ae:7a:a9:dd:92:18:
56:40:7d:48:23:37:82:d6:84:5e:19:b7:ba:d6:f9:
68:fc:3e:b6:c4:fb:62:c1:fc:ed:88:31:6e:ca:64:
e7:55:5a:b5:a8:61:b7:ca:f8:d8:4e:cd:21:f8:be:
23:d6:70:19:ed:d7:1c:dd:92:d6:8d:2a:ce:72:81:
ec:cc:ed:3f:01:59:7b:19:96:3e:8b:c9:ae:59:69:
fa:37:86:13:fe:53:28:33:40:24:fe:be:1a:56:eb:
94:8b:18:bf:a5:bf:89:db:f0:cb:ab:98:03:79:33:
3f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:0C:74:1C:7E:AA:91:57:13:B9:84:F3:71:B5:85:E2:98:31:3D:14
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/jQx0HH6qkVcTuYTzcbWF4pgxPRQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:b844::/32
2a0d:e245::/32
2a11:ec4::/32
2a11:9042::/32
2a11:b4c3::/32
2a11:b4c6::/32
2a12:647::/32
2a12:cf85::/32
Signature Algorithm: sha256WithRSAEncryption
88:06:17:89:12:3f:b0:93:4f:89:05:29:d8:e7:4d:a8:7f:0d:
ab:01:fa:b5:aa:18:70:0f:69:bb:58:bd:4d:29:e6:4d:24:2e:
13:0c:c6:f6:cb:c4:2d:45:2f:1d:22:0c:38:6d:24:91:74:6d:
84:65:25:b6:3e:b3:07:0b:37:1e:87:27:70:12:2b:91:46:8c:
96:a1:c1:97:a0:94:4b:3d:27:f6:7a:48:4b:ad:0d:f5:80:b2:
e5:b5:f7:5a:ff:8e:7a:57:d4:e8:17:20:40:89:14:ba:2e:a6:
7a:3f:59:d8:f4:8e:da:ef:fb:3f:af:07:ff:a7:1e:3c:c7:e3:
da:d0:24:ac:06:5c:cf:43:62:6d:59:fe:79:ab:81:e2:5b:e0:
46:70:98:04:cb:5c:b1:6d:98:1d:d5:d8:f7:7c:98:c9:cb:62:
25:c4:43:2e:a3:7f:2a:dd:ff:34:43:89:e1:11:5d:d7:e5:ac:
90:66:8d:2c:80:7a:bf:b9:f9:17:60:6e:61:f5:85:cb:a1:02:
34:72:fd:8e:8b:63:6b:b6:db:3a:1f:bb:71:e5:02:75:dc:f3:
5b:07:f4:ee:ed:e0:da:0f:e0:bf:a7:df:00:9f:f3:f5:2f:57:
ab:67:ae:f0:b3:1d:76:14:4e:ad:51:fc:b8:0c:08:25:5e:db:
95:67:b1:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:59:29 2026 by rpki-client