Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/JwFxLsq0pfdHf3n1ciaoVx71vSc.roa
File: JwFxLsq0pfdHf3n1ciaoVx71vSc.roa (raw, json)
Hash identifier: JMr9fWyCHA2IZ5ICqlsBHWxIzmQQC8J8E9xuL+39wUU=
Subject key identifier: 27:01:71:2E:CA:B4:A5:F7:47:7F:79:F5:72:26:A8:57:1E:F5:BD:27
Certificate issuer: /CN=c45c683cb1eb9c0f49b967e3bd9b8b84cf099bb8
Certificate serial: 01A18CD64701C7E5F62F21572513253B9572
Authority key identifier: C4:5C:68:3C:B1:EB:9C:0F:49:B9:67:E3:BD:9B:8B:84:CF:09:9B:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/JwFxLsq0pfdHf3n1ciaoVx71vSc.roa
Signing time: Fri 30 Oct 2026 12:43:35 +0000
ROA not before: Fri 30 Oct 2026 12:43:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 196651
IP address blocks: 2a07:291c::/32 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8c:d6:47:01:c7:e5:f6:2f:21:57:25:13:25:3b:95:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c45c683cb1eb9c0f49b967e3bd9b8b84cf099bb8
Validity
Not Before: Oct 30 12:43:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2701712ecab4a5f7477f79f57226a8571ef5bd27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e7:7b:df:6a:86:c4:1b:ad:0b:a6:27:ec:f6:
e2:ea:29:a5:91:5b:94:ae:0e:90:2a:14:44:02:dd:
35:82:1a:8e:ce:1a:f0:c1:1d:f1:dd:82:1d:b0:c0:
4e:cd:c1:88:78:9f:d1:4e:eb:23:e2:d2:19:48:ac:
de:85:64:f6:ff:0d:ed:d3:e9:8f:e9:93:93:65:d6:
e2:e1:43:b5:1d:62:6d:d1:d1:21:96:10:4d:22:62:
06:e2:3a:8b:a3:09:0a:5b:49:f9:07:55:e8:a6:41:
32:b4:60:d6:1c:c7:c6:b7:00:28:49:de:c6:f8:55:
63:dc:f4:db:52:b3:61:6f:af:ab:c4:e9:2b:7e:a6:
fd:fd:bd:fa:b8:3b:46:00:a1:09:81:b9:65:bf:43:
aa:09:78:45:a9:ae:94:97:bd:45:e2:ac:e0:3d:f3:
e5:a9:41:35:f1:41:92:56:a4:d2:51:1a:ab:e1:9a:
8b:ec:58:76:c0:e7:98:fb:fd:31:57:da:24:b3:de:
b0:55:05:89:f2:31:dc:4d:ee:da:54:c2:58:13:e1:
fe:bf:6f:5b:e4:15:87:4c:43:e3:01:7b:c9:bf:97:
f1:45:f4:fb:3e:2d:4b:66:9f:07:af:c8:17:71:17:
0a:8a:02:04:7e:3c:ce:a8:65:92:1b:19:97:58:ea:
0d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:01:71:2E:CA:B4:A5:F7:47:7F:79:F5:72:26:A8:57:1E:F5:BD:27
X509v3 Authority Key Identifier:
keyid:C4:5C:68:3C:B1:EB:9C:0F:49:B9:67:E3:BD:9B:8B:84:CF:09:9B:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/JwFxLsq0pfdHf3n1ciaoVx71vSc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:291c::/32
Signature Algorithm: sha256WithRSAEncryption
38:99:c3:18:49:6b:60:c0:7f:0d:25:08:20:a3:2c:3c:2c:b1:
47:6c:d6:5e:58:4f:80:eb:cb:ff:4c:93:db:52:14:2b:b7:41:
4f:61:7d:8b:4c:b9:1c:c6:39:f2:4f:19:44:78:90:e2:bc:97:
f1:a5:10:ec:bb:6d:f0:b9:7a:3a:72:af:77:59:68:5b:56:57:
68:d5:c5:8e:32:c6:f8:db:bc:65:78:09:e3:e1:f7:fc:32:a1:
3a:c2:4e:22:1b:59:fa:2f:62:1f:f7:35:1e:8c:f3:ea:9b:a9:
ba:4a:2b:27:55:50:d5:89:6a:c8:76:13:a5:26:20:11:4a:40:
e9:5c:1e:47:a1:7b:c6:76:54:0e:ed:a1:39:b4:fd:4d:32:98:
d7:44:45:a9:b7:ff:c3:bf:a1:9b:92:bc:60:72:f2:18:89:f7:
2b:71:7a:64:fa:a3:ef:22:46:07:98:38:ae:3d:f7:f7:e9:b3:
6e:36:c5:d2:0e:b3:d0:40:43:38:53:f7:eb:b5:2a:80:68:01:
f7:2f:70:9a:b4:9d:9a:0a:9f:e7:38:bb:87:f8:69:8e:99:c2:
6f:a1:19:c3:fb:ce:f6:f3:f8:c0:5f:1c:a6:9e:68:e2:f0:a8:
10:9c:93:16:03:dd:2c:94:8e:81:c0:db:b8:96:c2:f1:38:c8:
36:a0:a4:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 11:15:52 2026 by rpki-client