Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/pjurahkrysbjfkCQQuKT-wBT92o.roa
File: pjurahkrysbjfkCQQuKT-wBT92o.roa (raw, json)
Hash identifier: U3mVnS92e/0C17vE+leJ/DIpbDACEzUzODZBBN8ipyM=
Subject key identifier: A6:3B:AB:6A:19:2B:CA:C6:E3:7E:40:90:42:E2:93:FB:00:53:F7:6A
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 019FD1621E20C7777B491E78464252B82870
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/pjurahkrysbjfkCQQuKT-wBT92o.roa
Signing time: Wed 05 Aug 2026 10:04:56 +0000
ROA not before: Wed 05 Aug 2026 10:04:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211009
IP address blocks: 2a12:2806::/32 maxlen: 32
2a12:6480::/32 maxlen: 32
2a12:6481::/32 maxlen: 32
2a12:6486::/32 maxlen: 32
2a12:bc82::/32 maxlen: 32
2a12:bc85::/32 maxlen: 32
2a12:cf84::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 10:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d1:62:1e:20:c7:77:7b:49:1e:78:46:42:52:b8:28:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Aug 5 10:04:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a63bab6a192bcac6e37e409042e293fb0053f76a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:38:bd:a2:4d:f2:cf:08:1e:c9:61:f5:83:a5:
86:ec:9a:f5:6c:dd:a1:67:25:3c:e3:b0:d4:1a:fe:
95:1f:3e:54:ad:5d:f5:70:23:f5:3a:19:e7:28:2c:
56:ed:08:70:55:aa:b7:86:90:53:cb:1c:34:28:e5:
f1:70:59:d6:6b:58:70:c9:86:89:7a:26:b0:04:50:
0c:0c:54:f3:85:81:c9:71:cd:91:5e:f7:1f:c3:05:
bc:8c:c4:67:c5:bd:64:bb:53:c5:0e:bf:20:6b:31:
3a:18:86:0f:3a:ed:12:01:e2:7d:85:1b:33:86:41:
93:6b:10:e3:fc:6b:f1:76:70:9d:2d:03:36:91:7b:
df:46:0d:af:eb:2b:be:e3:fd:56:10:90:f5:64:bc:
91:ab:ad:68:27:68:90:de:af:cc:4d:0c:c2:87:ff:
3b:97:e3:85:97:18:81:bc:63:bc:21:bf:1b:ae:29:
e5:02:5c:96:c1:74:f4:1f:7d:18:e6:94:50:0a:20:
d8:5d:f3:6e:cb:54:8b:c3:a1:6f:a2:7f:44:f0:4f:
cb:91:2d:32:c1:53:22:0e:5a:da:64:fe:86:c4:96:
c6:d5:ac:34:99:d6:88:2e:98:cc:c6:33:87:90:51:
90:c1:9c:b7:87:46:2d:29:37:d6:6b:bd:e8:61:e5:
7d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:3B:AB:6A:19:2B:CA:C6:E3:7E:40:90:42:E2:93:FB:00:53:F7:6A
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/pjurahkrysbjfkCQQuKT-wBT92o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:2806::/32
2a12:6480::/31
2a12:6486::/32
2a12:bc82::/32
2a12:bc85::/32
2a12:cf84::/32
Signature Algorithm: sha256WithRSAEncryption
82:12:5d:86:6c:44:ec:31:2c:b6:c1:93:fa:12:c4:b5:fd:14:
bd:7f:04:76:c0:26:9e:95:cd:66:bb:4d:f1:73:21:8d:b3:ad:
cd:2f:0e:b5:55:b6:50:b0:3e:85:40:78:54:e9:2f:44:2c:02:
b5:97:12:4f:26:e2:10:11:96:a5:47:2d:fd:09:8a:28:fe:8f:
ef:7a:90:0a:7b:6d:9f:69:90:de:b8:cb:47:88:21:92:b8:84:
ce:10:bf:92:c2:da:6a:c2:b8:07:52:8b:fe:d2:8c:de:a9:4a:
c1:25:0e:5d:56:ea:a9:9a:eb:45:1e:14:73:3a:5d:49:ab:59:
77:f9:24:2d:e8:96:e9:5d:b2:62:24:20:08:09:d9:85:87:67:
79:68:fe:04:a4:f3:36:05:36:b0:f9:0e:ec:24:ba:6b:6f:94:
af:ca:94:9c:0b:ea:eb:4e:4b:10:89:59:2f:c9:2a:57:05:59:
f8:b0:df:b9:f4:cc:3a:fa:1c:f3:d5:b8:2c:36:bd:9a:30:83:
5b:5d:ad:9b:86:07:39:59:c8:60:91:15:43:8e:1b:a2:b0:15:
ac:cd:e0:d4:21:86:a2:d6:6b:4a:1a:54:76:a2:2b:c5:54:1b:
4e:fd:df:ee:af:69:04:48:36:6b:dc:2a:07:fe:4f:83:36:c8:
41:7b:85:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:17:00 2026 by rpki-client