Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/e41999-c0c9-49db-bdfa-792f29eb13f8/1/cjj-j23xq1RyQ_bUrNGmu-cXcwc.roa
File: cjj-j23xq1RyQ_bUrNGmu-cXcwc.roa (raw, json)
Hash identifier: HfAl0A5AiNIVARTp9kRpB/+bCfiAhWqWqe+w3HwHAKM=
Subject key identifier: 72:38:FE:8F:6D:F1:AB:54:72:43:F6:D4:AC:D1:A6:BB:E7:17:73:07
Certificate issuer: /CN=dbe47e559d2a82cf50b4151965e36937e3ff767a
Certificate serial: 01A055452EF734CDFFF689349A603755F58E
Authority key identifier: DB:E4:7E:55:9D:2A:82:CF:50:B4:15:19:65:E3:69:37:E3:FF:76:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-R-VZ0qgs9QtBUZZeNpN-P_dno.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/e41999-c0c9-49db-bdfa-792f29eb13f8/1/cjj-j23xq1RyQ_bUrNGmu-cXcwc.roa
Signing time: Mon 31 Aug 2026 00:43:12 +0000
ROA not before: Mon 31 Aug 2026 00:43:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8075
IP address blocks: 2a05:6340:400::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/e41999-c0c9-49db-bdfa-792f29eb13f8/1/2-R-VZ0qgs9QtBUZZeNpN-P_dno.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/e41999-c0c9-49db-bdfa-792f29eb13f8/1/2-R-VZ0qgs9QtBUZZeNpN-P_dno.mft
rsync://rpki.ripe.net/repository/DEFAULT/2-R-VZ0qgs9QtBUZZeNpN-P_dno.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 12:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:55:45:2e:f7:34:cd:ff:f6:89:34:9a:60:37:55:f5:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbe47e559d2a82cf50b4151965e36937e3ff767a
Validity
Not Before: Aug 31 00:43:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7238fe8f6df1ab547243f6d4acd1a6bbe7177307
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9f:e1:a9:8c:93:46:c2:ca:a5:85:3c:9c:ba:
65:fd:46:0c:ea:ca:aa:c2:bb:ee:a6:2d:cf:59:e5:
44:06:51:d2:f4:7e:b4:a5:32:1a:47:b3:2a:2b:7d:
10:98:83:e5:21:ad:d0:2a:cd:40:8e:f2:20:19:7b:
6f:81:90:21:72:17:24:ad:5e:a5:45:80:ab:17:1d:
3f:47:52:c6:73:16:a4:67:50:12:a3:2b:89:ec:0b:
1f:37:ce:6c:cb:51:30:2d:84:8b:d3:47:cf:1b:b8:
85:43:c9:02:a1:7d:a0:eb:60:bd:78:9e:8b:d4:35:
ac:cb:23:ac:42:db:6a:db:d0:fa:a2:31:cd:2d:04:
e2:70:55:2e:7e:65:d6:d1:72:00:da:f5:99:0c:19:
12:77:b5:c4:59:96:bf:2a:b0:87:e6:1c:0c:68:3a:
a3:4a:98:f1:04:ac:d4:9e:7f:a8:e7:a1:38:a0:bc:
e7:6c:44:80:a0:05:d2:21:1e:36:22:bf:aa:74:78:
59:92:34:8d:ca:3a:86:2b:42:10:00:81:fd:4d:fc:
cf:73:e2:23:40:6c:35:66:75:8c:c3:5b:6e:ee:9b:
ad:4e:55:b2:20:d7:5f:e4:ef:05:a5:49:9e:b9:c9:
52:c0:54:25:0b:5c:c3:1d:05:dd:a5:e0:dc:b7:10:
7f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:38:FE:8F:6D:F1:AB:54:72:43:F6:D4:AC:D1:A6:BB:E7:17:73:07
X509v3 Authority Key Identifier:
keyid:DB:E4:7E:55:9D:2A:82:CF:50:B4:15:19:65:E3:69:37:E3:FF:76:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-R-VZ0qgs9QtBUZZeNpN-P_dno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/e41999-c0c9-49db-bdfa-792f29eb13f8/1/cjj-j23xq1RyQ_bUrNGmu-cXcwc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/e41999-c0c9-49db-bdfa-792f29eb13f8/1/2-R-VZ0qgs9QtBUZZeNpN-P_dno.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:6340:400::/48
Signature Algorithm: sha256WithRSAEncryption
9b:7d:fd:41:1e:1c:d1:00:f8:ac:cb:1a:9a:62:79:b8:b6:b5:
58:8c:a7:c6:bf:d4:ab:91:da:8f:1e:0b:45:9a:bc:bd:63:1f:
69:32:66:8a:84:3b:b3:d8:90:94:03:33:46:26:04:12:32:51:
19:f7:66:03:6e:af:5a:82:36:b2:83:a3:d2:1e:87:d7:55:09:
75:39:6e:4b:cf:c5:70:07:4d:c1:43:be:74:73:5d:ac:c1:ee:
ae:15:a8:9d:30:55:fb:06:35:e9:d2:3d:27:f4:46:15:ac:b2:
5a:c4:ed:49:6f:5f:f0:e5:f2:f5:70:7d:69:3e:5c:b6:d9:44:
ab:65:31:16:20:0d:df:8d:8b:75:76:ab:59:f6:0c:e3:48:d5:
dd:cd:a3:46:b5:0a:c2:9e:7d:ad:b6:0a:cb:05:19:51:cb:5c:
da:67:21:ce:fd:7a:49:39:7f:f0:b1:56:20:06:22:c1:1b:72:
56:78:4d:00:9e:56:2c:b4:3e:56:e9:c0:56:62:ee:50:c4:d0:
67:5c:88:d8:de:89:aa:32:4a:59:2f:c0:e1:6d:2f:27:cd:fe:
f1:74:9e:79:46:a0:7f:92:a0:82:91:3b:73:6c:31:18:43:94:
31:1b:70:31:86:0b:f8:71:9a:3a:b8:c0:8c:41:fe:43:10:0c:
f0:9f:ad:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:48:45 2026 by rpki-client