Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/J2AX-dfSBlxAov2g7XU-SvPTN2g.roa
File: J2AX-dfSBlxAov2g7XU-SvPTN2g.roa (raw, json)
Hash identifier: Ub7s38aHKyVCQB8qIwC3JEAo5wPRv8Jfjm1a8qORU2A=
Subject key identifier: 27:60:17:F9:D7:D2:06:5C:40:A2:FD:A0:ED:75:3E:4A:F3:D3:37:68
Certificate issuer: /CN=03364fcedd691357733cd5ccd7029db8e61d1e3a
Certificate serial: 01A13BBF45311E83694DB8B2CD843FC336C5
Authority key identifier: 03:36:4F:CE:DD:69:13:57:73:3C:D5:CC:D7:02:9D:B8:E6:1D:1E:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AzZPzt1pE1dzPNXM1wKduOYdHjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/J2AX-dfSBlxAov2g7XU-SvPTN2g.roa
Signing time: Wed 14 Oct 2026 18:49:13 +0000
ROA not before: Wed 14 Oct 2026 18:49:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 54694
IP address blocks: 2a14:16c0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.mft
rsync://rpki.ripe.net/repository/DEFAULT/AzZPzt1pE1dzPNXM1wKduOYdHjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 14:28:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3b:bf:45:31:1e:83:69:4d:b8:b2:cd:84:3f:c3:36:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03364fcedd691357733cd5ccd7029db8e61d1e3a
Validity
Not Before: Oct 14 18:49:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=276017f9d7d2065c40a2fda0ed753e4af3d33768
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e4:4d:a0:5a:cc:3e:54:e1:12:ae:98:fd:b0:
8c:40:d0:ee:16:a6:31:29:3e:0b:70:49:f5:96:dc:
a3:53:f2:96:91:e5:af:19:a9:07:12:41:02:a5:08:
90:b9:9f:04:e4:82:70:8d:25:a2:88:39:10:40:7b:
0f:0f:f8:3d:21:83:79:fd:21:58:d7:76:86:1b:00:
9e:69:02:2d:a0:a7:2f:0a:26:5b:ba:c2:d1:c7:66:
0b:11:61:55:ce:1a:47:da:8d:3c:e7:ff:de:ff:2a:
e4:24:33:c7:9d:34:01:48:25:09:e9:a0:f9:97:d7:
56:77:d1:45:99:45:f5:b0:4a:86:1e:31:ed:9f:53:
5a:2b:d8:68:db:ee:38:e0:e6:b5:c9:7d:46:c7:dc:
6a:52:90:a2:79:10:bf:19:18:9e:43:05:41:2c:e3:
51:0e:21:5f:3d:cf:f6:b2:d2:ce:40:e4:34:12:1c:
d1:80:49:36:c8:40:db:02:2a:bf:97:b2:cd:f4:a9:
ef:6b:17:f8:1d:8e:36:27:b5:58:9c:ae:3f:b6:62:
ac:a9:4b:13:f2:47:09:b1:73:db:67:11:1d:3a:7d:
02:3f:af:fd:c6:61:47:56:5b:9a:33:bf:eb:7d:c4:
04:8f:c7:05:1b:d4:52:c9:ec:8f:92:08:b9:d1:81:
18:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:60:17:F9:D7:D2:06:5C:40:A2:FD:A0:ED:75:3E:4A:F3:D3:37:68
X509v3 Authority Key Identifier:
keyid:03:36:4F:CE:DD:69:13:57:73:3C:D5:CC:D7:02:9D:B8:E6:1D:1E:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AzZPzt1pE1dzPNXM1wKduOYdHjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/J2AX-dfSBlxAov2g7XU-SvPTN2g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:16c0::/29
Signature Algorithm: sha256WithRSAEncryption
4d:e1:78:e9:cd:38:e6:03:37:c4:4d:a4:cf:6e:1b:9b:58:da:
87:78:51:bd:28:0f:c5:d8:b6:98:9f:d0:52:ac:ea:ed:c1:7b:
89:7e:3c:c9:30:7b:08:f1:14:72:ae:5c:53:03:16:c3:3c:0d:
bc:f8:ae:6c:c7:b3:28:63:6b:31:2c:74:bb:b8:b8:54:e8:a4:
97:1b:7d:1b:eb:cb:96:6c:85:fb:5f:39:95:c2:68:1e:cf:b7:
b9:2a:55:3d:e6:05:5b:51:67:ee:53:d9:a3:bc:e2:8e:71:a6:
bf:fb:93:64:8c:6a:49:52:88:18:e7:98:74:38:71:43:4d:4d:
0c:ca:26:12:2c:f9:41:26:df:d5:1b:95:46:6e:0e:f6:52:46:
ae:cb:4a:1b:1a:bc:73:1e:96:fd:aa:b6:66:ee:1b:b5:5a:9d:
e2:7a:0d:11:8f:bf:59:c2:9d:a2:3b:b5:45:c7:f5:60:cc:d6:
65:b6:42:a8:97:59:31:ec:5c:99:14:57:1e:33:47:1c:e8:af:
b3:75:99:39:65:af:e7:7f:be:1c:0e:31:d2:d6:a5:5c:60:08:
3c:e2:e3:71:e9:be:86:a9:13:ea:43:87:6f:09:59:c7:af:5e:
7e:e3:38:60:98:b7:ff:1b:93:5e:cb:dd:d0:8c:0f:a6:dd:4b:
ec:e4:b7:5d
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAaE7v0UxHoNpTbiyzYQ/wzbFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzMzY0ZmNlZGQ2OTEzNTc3MzNjZDVjY2Q3MDI5ZGI4ZTYx
ZDFlM2EwHhcNMjYxMDE0MTg0OTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNzYwMTdmOWQ3ZDIwNjVjNDBhMmZkYTBlZDc1M2U0YWYzZDMzNzY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtuRNoFrMPlThEq6Y/bCMQNDuFqYx
KT4LcEn1ltyjU/KWkeWvGakHEkECpQiQuZ8E5IJwjSWiiDkQQHsPD/g9IYN5/SFY
13aGGwCeaQItoKcvCiZbusLRx2YLEWFVzhpH2o085//e/yrkJDPHnTQBSCUJ6aD5
l9dWd9FFmUX1sEqGHjHtn1NaK9ho2+444Oa1yX1Gx9xqUpCieRC/GRieQwVBLONR
DiFfPc/2stLOQOQ0EhzRgEk2yEDbAiq/l7LN9Knvaxf4HY42J7VYnK4/tmKsqUsT
8kcJsXPbZxEdOn0CP6/9xmFHVluaM7/rfcQEj8cFG9RSyeyPkgi50YEY3QIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFCdgF/nX0gZcQKL9oO11Pkrz0zdoMB8GA1UdIwQY
MBaAFAM2T87daRNXczzVzNcCnbjmHR46MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXpaUHp0MXBFMWR6UE5YTTF3S2R1T1lkSGpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi81NmY1MjYtNTNkZS00YzlkLWI0MDEt
YWJmMGI1OTQ2NDZmLzEvSjJBWC1kZlNCbHhBb3YyZzdYVS1TdlBUTjJnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi81NmY1MjYtNTNkZS00YzlkLWI0MDEtYWJmMGI1OTQ2NDZm
LzEvQXpaUHp0MXBFMWR6UE5YTTF3S2R1T1lkSGpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhQWwDAN
BgkqhkiG9w0BAQsFAAOCAQEATeF46c045gM3xE2kz24bm1jah3hRvSgPxdi2mJ/Q
Uqzq7cF7iX48yTB7CPEUcq5cUwMWwzwNvPiubMezKGNrMSx0u7i4VOiklxt9G+vL
lmyF+185lcJoHs+3uSpVPeYFW1Fn7lPZo7zijnGmv/uTZIxqSVKIGOeYdDhxQ01N
DMomEiz5QSbf1RuVRm4O9lJGrstKGxq8cx6W/aq2Zu4btVqd4noNEY+/WcKdoju1
Rcf1YMzWZbZCqJdZMexcmRRXHjNHHOivs3WZOWWv53++HA4x0talXGAIPOLjcem+
hqkT6kOHbwlZx69efuM4YJi3/xuTXsvd0IwPpt1L7OS3XQ==
-----END CERTIFICATE-----
Generated at Mon Oct 19 20:57:57 2026 by rpki-client