Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/1e4760-c546-4bec-a635-ff3723e78bd3/1/JwD5lu0otqTMwfEAo1IGQBl5m2Q.roa
File: JwD5lu0otqTMwfEAo1IGQBl5m2Q.roa (raw, json)
Hash identifier: 3lo1vZFHg/0VBofJBP7YITQIAttbUpYpy/FL0alINSo=
Subject key identifier: 27:00:F9:96:ED:28:B6:A4:CC:C1:F1:00:A3:52:06:40:19:79:9B:64
Certificate issuer: /CN=522a22bccd3de8265afd55f9830ffc01c83af726
Certificate serial: 019F462B307436633830A8E7FEDFAA62DA1F
Authority key identifier: 52:2A:22:BC:CD:3D:E8:26:5A:FD:55:F9:83:0F:FC:01:C8:3A:F7:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UioivM096CZa_VX5gw_8Acg69yY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/1e4760-c546-4bec-a635-ff3723e78bd3/1/JwD5lu0otqTMwfEAo1IGQBl5m2Q.roa
Signing time: Thu 09 Jul 2026 09:17:43 +0000
ROA not before: Thu 09 Jul 2026 09:17:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 7289
IP address blocks: 2a05:64c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/1e4760-c546-4bec-a635-ff3723e78bd3/1/UioivM096CZa_VX5gw_8Acg69yY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/1e4760-c546-4bec-a635-ff3723e78bd3/1/UioivM096CZa_VX5gw_8Acg69yY.mft
rsync://rpki.ripe.net/repository/DEFAULT/UioivM096CZa_VX5gw_8Acg69yY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 09:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:46:2b:30:74:36:63:38:30:a8:e7:fe:df:aa:62:da:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=522a22bccd3de8265afd55f9830ffc01c83af726
Validity
Not Before: Jul 9 09:17:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2700f996ed28b6a4ccc1f100a352064019799b64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a8:f4:77:e8:6a:15:50:47:a2:28:af:6b:bb:
9b:23:eb:7d:ec:35:8d:e4:a8:ec:4a:25:cd:c1:c7:
94:36:8c:7a:8a:bd:ee:d2:50:75:b7:8d:93:be:e2:
95:67:66:08:0a:87:b9:45:fc:1a:fa:82:72:dd:2c:
7d:c3:23:8c:0f:71:52:8a:7a:35:56:e0:9c:72:fb:
7b:e4:25:a9:13:7e:c6:48:32:02:0b:35:b7:95:76:
79:2d:ef:51:0a:5f:1d:e4:7e:94:6d:80:2f:a0:e8:
36:db:01:06:51:db:93:8d:4b:d1:50:23:21:d7:3e:
c8:b2:fa:c7:7d:8a:bb:cb:0c:84:95:4b:eb:d1:d0:
1d:49:7d:23:84:b6:a7:6b:25:57:ed:ee:fa:65:46:
e1:71:70:64:1e:2f:00:11:51:a5:28:4a:9a:ce:d0:
22:88:12:78:87:13:f7:9e:a0:56:91:0b:36:e1:47:
74:66:a5:27:88:3e:17:6c:76:fd:d3:f3:89:4b:e3:
48:a3:2b:1a:93:a1:da:a4:78:7f:2c:3d:22:c3:05:
81:78:83:fb:9b:15:6d:db:f7:7c:8a:e1:d5:18:88:
40:d1:cd:bd:d3:02:48:b8:47:b8:ee:d7:a9:1c:3a:
2d:12:07:f1:72:53:27:97:a7:6a:89:28:6e:80:be:
75:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:00:F9:96:ED:28:B6:A4:CC:C1:F1:00:A3:52:06:40:19:79:9B:64
X509v3 Authority Key Identifier:
keyid:52:2A:22:BC:CD:3D:E8:26:5A:FD:55:F9:83:0F:FC:01:C8:3A:F7:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UioivM096CZa_VX5gw_8Acg69yY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1e4760-c546-4bec-a635-ff3723e78bd3/1/JwD5lu0otqTMwfEAo1IGQBl5m2Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1e4760-c546-4bec-a635-ff3723e78bd3/1/UioivM096CZa_VX5gw_8Acg69yY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:64c0::/29
Signature Algorithm: sha256WithRSAEncryption
b9:fe:55:e5:77:8d:57:8f:f7:89:6b:4d:d4:99:92:58:7e:78:
8b:2d:c1:33:b0:08:12:ca:55:e5:a9:e3:ac:28:2b:ac:af:1c:
9c:82:03:dd:93:ce:c2:c9:36:22:aa:b6:a8:26:c5:74:8e:f4:
4b:88:7a:08:d7:9a:43:d6:90:e5:95:49:47:f4:32:ac:62:0d:
5b:8d:50:c3:3f:ec:bb:42:d0:10:d5:4e:0a:a8:37:c5:7c:b6:
d9:ce:c0:24:20:01:3b:cb:0b:2d:f8:ac:a3:c5:06:c2:b7:2b:
f0:fe:f1:aa:96:96:81:1f:f8:e9:69:90:e3:fc:e1:3d:b4:ab:
b5:9c:6c:23:53:d3:a9:72:71:7f:f2:95:13:ef:0d:0e:7d:25:
bb:e0:11:e3:c0:53:d5:08:8e:74:e7:51:3e:28:f4:6f:32:21:
19:ac:43:cd:20:6d:a1:0e:20:97:d8:ad:75:c5:38:01:fe:b0:
ef:c5:27:8e:73:ea:88:b5:07:be:98:87:b7:a3:3f:db:1f:f2:
48:b4:bf:1f:d3:a5:85:e3:ee:b1:61:97:4c:07:0a:b3:f2:90:
17:57:32:89:c2:7f:c1:7b:01:92:6b:9a:75:f9:d2:c8:a9:fb:
4f:f1:e7:71:41:b3:ef:be:6b:6f:94:23:39:e5:2c:90:b0:61:
2d:b4:a9:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 16:51:42 2026 by rpki-client