Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/jovwp7LSiEObZQQnvklM8UZFa6A.roa
File: jovwp7LSiEObZQQnvklM8UZFa6A.roa (raw, json)
Hash identifier: SXhwnq8kTrFF6l0V91DA36wISCIW5h3an6fflmVlTTk=
Subject key identifier: 8E:8B:F0:A7:B2:D2:88:43:9B:65:04:27:BE:49:4C:F1:46:45:6B:A0
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 019EAD49C1D1DC8DCD25E680F25198CAC509
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/jovwp7LSiEObZQQnvklM8UZFa6A.roa
Signing time: Tue 09 Jun 2026 16:49:12 +0000
ROA not before: Tue 09 Jun 2026 16:49:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209641
IP address blocks: 2a12:2804::/32 maxlen: 32
2a12:8784::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 19:44:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ad:49:c1:d1:dc:8d:cd:25:e6:80:f2:51:98:ca:c5:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Jun 9 16:49:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8e8bf0a7b2d288439b650427be494cf146456ba0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c7:e9:ff:40:2d:58:70:ad:c1:e3:0b:af:1c:
38:95:5c:81:1b:77:b2:90:f0:28:15:81:f8:c6:48:
95:6d:46:d0:f3:33:78:4c:6d:e4:ff:86:2b:e2:2f:
7d:17:18:47:cf:b7:32:7f:8a:94:72:13:b8:21:36:
e5:22:e8:e4:ad:1d:d6:ce:1d:86:cc:d2:be:0f:81:
b0:71:3a:84:5e:7f:cd:ac:8f:cf:f4:49:57:b5:56:
1b:03:7d:1f:f8:64:b5:35:e9:c3:fc:49:45:f1:c3:
7f:78:be:18:6b:78:f3:b6:bd:77:9c:79:e6:93:6c:
d6:4b:d2:dc:62:0a:a7:af:a9:ac:27:35:79:01:9f:
2b:d5:e4:b3:cd:49:06:78:96:c0:3a:f8:00:53:0a:
ec:be:ba:62:a6:6e:f6:fc:81:dd:9d:6f:a0:b3:76:
13:5c:10:7d:c3:f8:5f:f3:72:ba:5f:b0:97:f6:29:
b7:58:ed:90:c5:80:9e:3a:f6:ed:60:67:a3:7f:ac:
17:ad:13:53:71:97:fa:21:9a:5d:68:52:7b:71:73:
25:1e:8f:b0:f2:85:35:13:29:41:ce:b3:35:4c:96:
13:81:41:30:36:7e:30:dd:29:4f:6b:33:13:d7:62:
b3:e1:97:1c:89:93:5b:c2:c8:d0:3c:22:6f:e4:6f:
87:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:8B:F0:A7:B2:D2:88:43:9B:65:04:27:BE:49:4C:F1:46:45:6B:A0
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/jovwp7LSiEObZQQnvklM8UZFa6A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:2804::/32
2a12:8784::/32
Signature Algorithm: sha256WithRSAEncryption
97:71:a7:bc:5d:29:5e:f2:0a:b4:9c:ca:2c:b3:7b:9f:67:3e:
12:32:76:5a:37:0d:17:9f:0a:96:c9:7d:21:14:da:e4:85:d2:
0b:e4:0d:53:84:4e:60:67:ac:a8:70:ca:8f:51:17:a7:06:30:
be:60:fb:cb:3e:b7:e8:7b:76:ff:d4:61:e7:3e:e9:9c:54:7a:
d2:1c:96:2f:bf:02:be:b9:a9:2a:6e:92:d3:56:35:c0:fd:c6:
2c:99:06:8d:8f:2e:df:36:6a:e5:cf:d9:b3:de:57:77:2b:f5:
e8:3c:94:5d:2c:22:08:97:a5:27:e7:22:02:70:0c:bf:b2:69:
36:17:20:dd:de:29:39:72:45:14:24:ec:f0:86:53:c6:e4:e1:
55:0b:8c:f9:e2:f5:c0:b7:f7:85:5f:65:18:38:a7:a7:f0:df:
48:cc:32:dc:15:e3:28:ed:18:5b:a3:03:0b:2e:a6:42:36:fa:
56:fc:7f:8f:b6:2b:c8:e3:6b:28:80:39:ec:72:cd:4b:ea:3b:
20:90:68:4e:d7:25:3e:1b:e0:e2:20:1f:25:61:11:28:b2:98:
3b:8f:e2:04:38:40:ff:33:07:eb:8c:31:f8:04:a6:95:31:9c:
4e:06:00:18:db:63:b6:2c:1b:f0:80:b0:e3:00:0d:af:c6:63:
6d:f9:2f:c6
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZ6tScHR3I3NJeaA8lGYysUJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5MzM1M2MxZmFiZTg5NmFmOGI4NWZlNzYwMGU0NjM0OTY4
ZmNjNGMwHhcNMjYwNjA5MTY0OTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZThiZjBhN2IyZDI4ODQzOWI2NTA0MjdiZTQ5NGNmMTQ2NDU2YmEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8fp/0AtWHCtweMLrxw4lVyBG3ey
kPAoFYH4xkiVbUbQ8zN4TG3k/4Yr4i99FxhHz7cyf4qUchO4ITblIujkrR3Wzh2G
zNK+D4GwcTqEXn/NrI/P9ElXtVYbA30f+GS1NenD/ElF8cN/eL4Ya3jztr13nHnm
k2zWS9LcYgqnr6msJzV5AZ8r1eSzzUkGeJbAOvgAUwrsvrpipm72/IHdnW+gs3YT
XBB9w/hf83K6X7CX9im3WO2QxYCeOvbtYGejf6wXrRNTcZf6IZpdaFJ7cXMlHo+w
8oU1EylBzrM1TJYTgUEwNn4w3SlPazMT12Kz4ZcciZNbwsjQPCJv5G+HlwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFI6L8Key0ohDm2UEJ75JTPFGRWugMB8GA1UdIwQY
MBaAFAkzU8H6volq+Lhf52AORjSWj8xMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGIt
MjM5ZDJmZTM5OGIxLzEvam92d3A3TFNpRU9iWlFRbnZrbE04VVpGYTZBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGItMjM5ZDJmZTM5OGIx
LzEvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAAjAOAwUAKhIoBAMF
ACoSh4QwDQYJKoZIhvcNAQELBQADggEBAJdxp7xdKV7yCrScyiyze59nPhIydlo3
DRefCpbJfSEU2uSF0gvkDVOETmBnrKhwyo9RF6cGML5g+8s+t+h7dv/UYec+6ZxU
etIcli+/Ar65qSpuktNWNcD9xiyZBo2PLt82auXP2bPeV3cr9eg8lF0sIgiXpSfn
IgJwDL+yaTYXIN3eKTlyRRQk7PCGU8bk4VULjPni9cC394VfZRg4p6fw30jMMtwV
4yjtGFujAwsupkI2+lb8f4+2K8jjayiAOexyzUvqOyCQaE7XJT4b4OIgHyVhESiy
mDuP4gQ4QP8zB+uMMfgEppUxnE4GABjbY7YsG/CAsOMADa/GY235L8Y=
-----END CERTIFICATE-----
Generated at Fri Jun 12 02:23:45 2026 by rpki-client