Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/j95KZacu65LcIUxcLXVmOAdhH6Y.roa
File: j95KZacu65LcIUxcLXVmOAdhH6Y.roa (raw, json)
Hash identifier: PJ2W72hMJu9cz8ZsopSnihi9xme+iNzvYlbW5Aa4KWE=
Subject key identifier: 8F:DE:4A:65:A7:2E:EB:92:DC:21:4C:5C:2D:75:66:38:07:61:1F:A6
Certificate issuer: /CN=f19d396e5ad5b728ce96cfbcef75f58f50e61007
Certificate serial: 019F2368E58CA1DD78974773257F9BA8D59F
Authority key identifier: F1:9D:39:6E:5A:D5:B7:28:CE:96:CF:BC:EF:75:F5:8F:50:E6:10:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Z05blrVtyjOls-873X1j1DmEAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/j95KZacu65LcIUxcLXVmOAdhH6Y.roa
Signing time: Thu 02 Jul 2026 15:18:24 +0000
ROA not before: Thu 02 Jul 2026 15:18:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15890
IP address blocks: 2a00:ec83::/32 maxlen: 32
2a04:800:5000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/8Z05blrVtyjOls-873X1j1DmEAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/8Z05blrVtyjOls-873X1j1DmEAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Z05blrVtyjOls-873X1j1DmEAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:e5:8c:a1:dd:78:97:47:73:25:7f:9b:a8:d5:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f19d396e5ad5b728ce96cfbcef75f58f50e61007
Validity
Not Before: Jul 2 15:18:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8fde4a65a72eeb92dc214c5c2d75663807611fa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a4:a5:ed:ba:d0:b5:61:cf:7f:a3:a7:dc:21:
7c:32:77:7f:49:b8:8e:fa:f2:65:f0:fd:5d:5d:4d:
a1:93:93:a0:8f:e1:9a:59:a7:6a:a0:9b:98:a1:71:
38:96:a4:39:d2:77:92:d2:f4:1c:57:7c:4c:e4:a2:
7d:3f:0c:db:0f:1d:f5:66:79:b9:63:a7:aa:30:83:
b0:9e:c3:4a:b2:08:44:b1:cc:36:74:d2:c9:7a:37:
62:da:dc:c3:fa:dc:a4:a6:a3:4b:5a:3a:f1:71:7f:
11:7c:02:47:e5:d2:5f:90:ad:9b:cd:63:ee:f0:7c:
ab:e2:ea:19:d6:0c:12:c5:06:8f:4b:c6:fe:94:fa:
99:86:a1:04:77:43:dc:50:63:2d:4b:07:fb:0d:36:
66:4c:25:64:c0:79:d0:99:11:c7:53:4c:28:48:95:
7c:24:ad:22:6e:e1:ce:46:97:a6:e1:48:e2:92:43:
58:35:bf:fb:dd:dc:0e:1e:56:9a:6c:86:e6:b1:f5:
da:21:7a:f9:aa:db:ee:a8:9b:ae:e7:ca:d0:98:55:
05:87:5d:8a:8f:b7:5e:60:40:60:5c:d9:4a:40:64:
ca:35:54:30:c2:3e:61:bf:c6:37:e5:7c:8f:90:ff:
81:e9:60:6e:91:1a:27:af:38:f6:b0:20:19:ce:3c:
91:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:DE:4A:65:A7:2E:EB:92:DC:21:4C:5C:2D:75:66:38:07:61:1F:A6
X509v3 Authority Key Identifier:
keyid:F1:9D:39:6E:5A:D5:B7:28:CE:96:CF:BC:EF:75:F5:8F:50:E6:10:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Z05blrVtyjOls-873X1j1DmEAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/j95KZacu65LcIUxcLXVmOAdhH6Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/8Z05blrVtyjOls-873X1j1DmEAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:ec83::/32
2a04:800:5000::/36
Signature Algorithm: sha256WithRSAEncryption
48:71:02:cf:19:f1:a6:ae:a7:21:d5:b5:01:5e:05:a0:19:41:
42:6a:b9:6a:66:17:dc:59:b2:45:55:21:db:09:41:60:05:95:
a5:48:bf:b7:c4:74:b1:db:10:4e:cf:70:11:b3:66:13:7c:3b:
0b:6f:83:8e:bb:46:fa:f5:e6:94:30:7a:e7:00:70:5f:41:86:
bc:03:af:df:9f:c6:45:c7:6e:3d:18:ef:06:d3:7c:1f:0f:f8:
e4:4a:e0:9c:af:80:5a:e6:3e:7a:cc:63:7d:07:37:d3:8b:31:
c5:b2:7e:ca:1a:35:a0:c1:fc:9b:ea:3a:80:5a:71:18:0f:09:
88:36:f2:a1:94:80:5c:cb:e4:af:fa:84:ae:2c:ec:a3:c7:9f:
b2:35:c3:59:57:94:46:a1:83:35:fb:91:ed:c2:c3:02:65:f0:
d4:29:1b:c8:ff:55:2c:60:3a:4b:6b:19:54:b5:4b:a5:e5:83:
f6:7a:d3:dd:ab:a1:4e:65:66:22:a2:0e:74:46:5d:f7:31:1f:
7b:3e:66:63:05:38:8b:ec:35:22:4c:91:8b:b2:62:9a:4a:ec:
fa:67:7e:3a:5e:20:42:27:ea:40:94:a9:24:ac:be:fa:bc:69:
90:70:83:83:8a:b7:7a:9e:f2:d9:09:ee:f3:0e:1c:95:88:97:
31:84:6e:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:56:08 2026 by rpki-client