Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/jk7rvqKfxbFj3u6ZcBW92do4Ajo.roa
File: jk7rvqKfxbFj3u6ZcBW92do4Ajo.roa (raw, json)
Hash identifier: unc1JnTIrNrVtIO7mDNhsgvE9aLZi2KU6HNkmh05rUY=
Subject key identifier: 8E:4E:EB:BE:A2:9F:C5:B1:63:DE:EE:99:70:15:BD:D9:DA:38:02:3A
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 019D9B3DF207F33415A6B54CD20574A0F572
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/jk7rvqKfxbFj3u6ZcBW92do4Ajo.roa
Signing time: Fri 17 Apr 2026 11:40:21 +0000
ROA not before: Fri 17 Apr 2026 11:40:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215290
IP address blocks: 2a0d:b846::/32 maxlen: 32
2a11:b4c1::/32 maxlen: 32
2a11:e2c1::/32 maxlen: 32
2a11:e2c6::/32 maxlen: 32
2a12:2805::/32 maxlen: 32
2a12:8786::/32 maxlen: 32
2a12:a502::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:3d:f2:07:f3:34:15:a6:b5:4c:d2:05:74:a0:f5:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Apr 17 11:40:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8e4eebbea29fc5b163deee997015bdd9da38023a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:c4:ba:85:bf:e1:df:e0:1f:f0:34:c6:96:d8:
b0:60:cf:9a:a4:5e:d8:58:e3:eb:a2:5f:f7:e2:33:
8b:ce:f4:e7:80:d3:58:5d:c8:a5:cc:8d:eb:09:ad:
da:dd:28:0d:5a:ea:c8:13:42:8c:f9:8d:5b:94:02:
04:54:c1:a8:77:cc:75:5f:bd:7b:61:51:19:fd:92:
89:db:22:f9:4c:6f:39:b3:ac:7f:1f:6e:46:50:99:
06:15:89:5a:e0:c1:58:dd:4b:aa:c1:1d:e4:2a:31:
c2:a4:43:2d:9b:03:19:a7:a6:e9:ca:bc:92:a0:2e:
cc:ef:8e:c3:cf:2a:6a:26:28:37:c4:5b:1c:19:e9:
55:57:d9:18:23:2c:76:06:e7:4d:69:5a:82:b4:b7:
83:a3:df:cf:e4:8b:0a:91:3d:c9:7e:33:0c:77:1b:
36:4f:5d:c1:d1:24:61:0a:e2:c7:c7:73:bb:9a:08:
6d:d4:f6:68:bf:a1:2b:2a:e0:d3:47:07:46:6a:74:
d4:94:ef:00:8f:06:23:83:0e:65:55:e7:56:1e:44:
97:b0:bb:b9:ec:05:65:93:54:01:e6:5a:e4:77:e0:
c1:88:2b:c7:3c:6f:70:e5:ac:32:29:da:f2:ba:92:
9a:4c:78:f5:0e:9d:b7:67:73:d5:c8:1e:1d:96:46:
58:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:4E:EB:BE:A2:9F:C5:B1:63:DE:EE:99:70:15:BD:D9:DA:38:02:3A
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/jk7rvqKfxbFj3u6ZcBW92do4Ajo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:b846::/32
2a11:b4c1::/32
2a11:e2c1::/32
2a11:e2c6::/32
2a12:2805::/32
2a12:8786::/32
2a12:a502::/32
Signature Algorithm: sha256WithRSAEncryption
04:32:a8:9e:40:71:c0:87:47:b0:d6:eb:41:b4:8a:3d:95:2a:
23:d9:b9:36:72:98:14:46:e2:c9:a1:40:06:ed:f3:b0:fd:f0:
cf:09:f9:2d:c9:fb:0c:11:fd:4b:32:18:8b:fd:e5:94:30:c1:
8d:d1:da:86:6c:2f:f6:89:a3:65:ed:3b:d8:20:38:00:28:43:
87:f6:04:da:fb:a6:cf:3f:a1:e2:1d:bf:b0:70:a9:2a:9f:ba:
b2:16:02:57:5f:10:c6:06:8b:e5:f1:1f:5a:cd:48:9f:87:a6:
85:bc:f8:a7:20:a3:b8:83:81:ac:ab:36:4a:06:61:ed:2e:07:
92:1d:93:90:1b:92:13:ce:8c:1e:78:f8:d3:43:75:ad:56:15:
87:b9:ad:3e:8f:10:4e:da:95:c5:24:38:42:09:85:17:1d:22:
11:fa:8b:41:35:2e:5d:df:df:7b:79:05:aa:9f:cd:c4:59:51:
1e:1b:fb:05:f2:61:f4:53:8e:9d:0b:8c:03:10:72:9d:01:9a:
c2:cb:a5:61:01:dc:1f:0a:d2:8b:f6:7a:1e:16:0f:0f:7b:af:
d5:b0:2d:2d:9d:02:fc:ba:f6:78:75:2d:3b:4a:3b:0f:2b:0c:
63:f7:8c:84:95:2e:9a:28:65:e0:d2:f5:12:ff:ae:3e:19:fa:
b1:bf:15:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 20 07:13:08 2026 by rpki-client