Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/j2rUrTt65gVhQHk7WRN8TBt9QI4.roa
File: j2rUrTt65gVhQHk7WRN8TBt9QI4.roa (raw, json)
Hash identifier: FG4T2CI3Uszd3lEn7F6GVjjKAY0/E4wJWIgK/iWvqIs=
Subject key identifier: 8F:6A:D4:AD:3B:7A:E6:05:61:40:79:3B:59:13:7C:4C:1B:7D:40:8E
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 019FAE7AD96B304D0ED5856AD63A2B04C717
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/j2rUrTt65gVhQHk7WRN8TBt9QI4.roa
Signing time: Wed 29 Jul 2026 15:25:14 +0000
ROA not before: Wed 29 Jul 2026 15:25:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 140469
IP address blocks: 201.3.124.0/24 maxlen: 24
201.3.125.0/24 maxlen: 24
201.3.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 28 Aug 2026 09:50:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ae:7a:d9:6b:30:4d:0e:d5:85:6a:d6:3a:2b:04:c7:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: Jul 29 15:25:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8f6ad4ad3b7ae6056140793b59137c4c1b7d408e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:5d:ba:ee:5f:62:38:19:67:cb:6c:1e:88:99:
b6:f1:92:ba:02:88:6b:b9:da:9d:ed:09:c4:1d:24:
5a:96:4f:ff:f7:5f:59:20:06:4b:2e:4f:fb:59:bc:
7f:a8:8c:48:36:dd:b5:61:59:a4:51:33:ff:db:1c:
ae:4b:44:fc:ee:01:02:c0:3f:b0:d1:6c:04:77:47:
c3:ff:b5:5a:38:3d:39:4a:32:9d:39:e6:7d:48:df:
21:fc:4e:6e:af:62:b9:68:96:e6:9e:c7:e3:a0:16:
29:88:6e:9a:bd:ea:56:9c:24:db:de:9c:0a:69:70:
72:5f:ad:52:0a:7a:eb:23:48:a5:43:f8:f3:52:8b:
22:7a:98:20:97:c5:67:14:a7:37:d3:88:88:29:4e:
cd:54:c8:f2:2c:8d:fd:df:b2:a3:3b:e8:42:e7:63:
20:f0:56:1b:80:35:9f:49:7d:b5:c2:38:30:f3:f9:
88:d2:e1:88:d0:e6:2e:cf:31:85:5a:3e:4b:47:10:
8e:44:53:49:4d:20:16:02:c6:34:c2:ce:26:3d:62:
eb:a3:24:47:62:23:48:95:49:da:67:d3:11:bd:d8:
f4:3a:10:d3:bd:f5:b6:31:87:ff:6b:3b:c1:cd:d5:
de:2f:17:0b:12:f5:66:3f:41:f2:f9:fd:fd:55:91:
a6:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:6A:D4:AD:3B:7A:E6:05:61:40:79:3B:59:13:7C:4C:1B:7D:40:8E
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/j2rUrTt65gVhQHk7WRN8TBt9QI4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.3.124.0-201.3.126.255
Signature Algorithm: sha256WithRSAEncryption
ad:b0:ea:5d:b7:ba:f1:9c:82:77:ed:fc:8c:2c:b6:98:bb:4e:
1d:c0:18:c3:0c:5b:ee:5a:0c:83:59:74:8a:27:a7:bc:b2:77:
3d:6e:93:89:0b:bf:e2:8a:6f:24:ec:0f:0d:ba:2c:b7:c0:56:
22:c5:66:ae:a7:b1:e6:50:de:1e:0c:c3:3a:62:b9:b2:69:c3:
d0:bf:a3:94:2b:3d:bd:1d:b8:10:eb:28:2c:df:35:10:0d:c2:
d5:22:35:e7:a1:ab:a4:5d:a9:90:ea:cd:c4:0b:a1:8f:20:59:
96:88:92:0a:e9:6a:8c:b8:94:c8:bb:51:39:75:25:85:89:15:
bb:a2:98:28:c1:25:bf:30:6c:75:74:f4:3f:07:fe:1a:64:f1:
03:73:64:de:3a:03:87:62:8b:66:75:52:28:6a:40:29:79:a7:
c7:90:74:58:1f:6f:fe:d1:d4:83:94:f8:44:43:90:15:bb:a5:
a5:b2:34:18:c8:d8:ef:eb:f5:8c:68:21:af:4b:2b:e2:ef:29:
45:e3:2f:17:4a:c0:d2:88:fa:cb:c6:c1:6c:21:5a:fb:ff:9c:
bf:89:9d:bf:ef:ab:6b:86:47:0f:ff:fb:9e:d9:f3:c7:0f:d7:
08:51:15:55:04:26:a2:a5:5e:43:87:94:65:48:35:f5:5f:03:
a0:c4:a1:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 16:55:46 2026 by rpki-client