Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/J9nB5Bk6XSKjWe_kC_4Fsb96MLM.roa
File: J9nB5Bk6XSKjWe_kC_4Fsb96MLM.roa (raw, json)
Hash identifier: WWFjE+lIB3z6WE11pSejgMWzVwphSyxuCF61My1RNok=
Subject key identifier: 27:D9:C1:E4:19:3A:5D:22:A3:59:EF:E4:0B:FE:05:B1:BF:7A:30:B3
Certificate issuer: /CN=25c0fa78b69ad2f55eaa5fe75501dc45c9e91395
Certificate serial: 019F2368B288D9D65AF1A48E40291405015D
Authority key identifier: 25:C0:FA:78:B6:9A:D2:F5:5E:AA:5F:E7:55:01:DC:45:C9:E9:13:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JcD6eLaa0vVeql_nVQHcRcnpE5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/J9nB5Bk6XSKjWe_kC_4Fsb96MLM.roa
Signing time: Thu 02 Jul 2026 15:18:11 +0000
ROA not before: Thu 02 Jul 2026 15:18:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214706
IP address blocks: 217.65.129.0/24 maxlen: 24
2a12:6c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/JcD6eLaa0vVeql_nVQHcRcnpE5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/JcD6eLaa0vVeql_nVQHcRcnpE5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/JcD6eLaa0vVeql_nVQHcRcnpE5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 Jul 2026 09:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:b2:88:d9:d6:5a:f1:a4:8e:40:29:14:05:01:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25c0fa78b69ad2f55eaa5fe75501dc45c9e91395
Validity
Not Before: Jul 2 15:18:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=27d9c1e4193a5d22a359efe40bfe05b1bf7a30b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:54:8c:14:64:22:e5:f0:a4:c1:c7:02:5d:0f:
d8:be:b7:aa:46:c8:38:13:a3:cc:c3:f5:d2:d9:0f:
61:77:d8:82:c5:0d:4d:a8:8f:a1:86:3f:98:8d:bf:
1f:73:a9:87:32:6e:c3:b2:75:9b:1b:37:9d:5d:e5:
7a:15:bc:2a:30:f2:09:7e:0c:80:f8:c7:5a:32:48:
53:08:16:1c:8d:01:2b:fc:f0:79:74:b9:75:d4:7c:
bb:c4:16:56:2a:6b:91:16:3e:05:d9:64:70:98:22:
e9:60:1e:40:66:9b:62:b6:1d:94:2d:25:67:ea:04:
a0:2d:99:0d:7c:18:3e:37:00:f5:c2:62:e0:25:38:
bb:06:bc:ae:b0:7c:02:c6:78:fe:1e:4f:2a:d7:6a:
bd:5b:9d:e3:e5:f8:b3:a0:f6:41:8b:e1:5a:e8:22:
1c:1d:35:eb:80:fa:2a:aa:f9:c4:22:bb:b9:50:76:
08:bf:74:e9:5c:06:ce:60:15:b7:9d:c3:2e:c1:e6:
dd:c1:d9:8a:12:89:a5:4b:03:cb:8c:68:d8:4d:39:
54:f6:4e:f3:7d:b0:80:d3:98:cd:0a:d6:0c:e5:54:
b6:57:14:31:8e:db:f1:89:48:cf:03:e1:89:60:49:
5f:43:08:be:eb:3f:4b:ba:c5:a8:1b:a9:be:0d:28:
09:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:D9:C1:E4:19:3A:5D:22:A3:59:EF:E4:0B:FE:05:B1:BF:7A:30:B3
X509v3 Authority Key Identifier:
keyid:25:C0:FA:78:B6:9A:D2:F5:5E:AA:5F:E7:55:01:DC:45:C9:E9:13:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JcD6eLaa0vVeql_nVQHcRcnpE5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/J9nB5Bk6XSKjWe_kC_4Fsb96MLM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/JcD6eLaa0vVeql_nVQHcRcnpE5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.65.129.0/24
IPv6:
2a12:6c0::/29
Signature Algorithm: sha256WithRSAEncryption
38:b5:8b:4f:4b:de:90:c6:d4:9b:ea:b9:2e:d3:23:f6:a1:ce:
1a:5b:ed:11:9a:27:10:0d:20:76:94:6b:9c:ef:42:05:51:1d:
47:55:b0:45:a6:01:02:37:53:de:81:74:12:d5:de:c2:7b:a1:
72:33:9a:01:be:d4:25:d5:3e:e0:e1:5c:c2:30:2e:e2:af:7f:
0a:ea:23:78:de:e1:19:eb:9b:d9:9a:55:20:e6:a4:c0:fe:ae:
4d:51:b8:c8:5f:89:89:d5:1b:a1:8a:a9:18:52:ac:7e:f1:b0:
8d:d2:4f:e0:b8:db:df:71:78:cb:ae:7c:95:0d:06:3a:8c:f8:
41:e6:7e:e1:5f:8a:7a:60:30:c9:fb:45:6a:2b:fa:b6:07:ae:
89:a5:c6:d5:bd:02:03:da:5e:d6:1c:a5:08:e2:8f:70:3a:47:
87:ed:ff:91:00:86:1e:c5:7c:79:17:0a:21:21:88:8e:c3:5a:
ee:b4:31:0d:7d:7d:d5:f8:df:5b:54:b7:e8:e8:12:6b:69:19:
cf:f3:04:9c:33:cd:a2:0c:f6:1a:5f:67:bc:c9:ed:e2:4b:76:
dc:47:69:82:ac:92:cc:2b:21:aa:8d:25:12:c0:fe:21:32:76:
6d:76:3b:6f:72:bd:79:d7:ab:54:57:5c:b8:c5:e0:67:bf:e1:
28:3f:ba:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 15 18:14:34 2026 by rpki-client