Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/JSlJ5Kkw9KB2_LkNtS2R5YtwIFI.roa
File: JSlJ5Kkw9KB2_LkNtS2R5YtwIFI.roa (raw, json)
Hash identifier: kLX9M81nDKcFoHg/EVvUnvLDWyGSEaaypinH5YoB/Hk=
Subject key identifier: 25:29:49:E4:A9:30:F4:A0:76:FC:B9:0D:B5:2D:91:E5:8B:70:20:52
Certificate issuer: /CN=b31c4ce663e1ec245e747cd846f1a69ddb834b3b
Certificate serial: 01A13BBE5B0E7E80DD83A417A8185DA0B9F8
Authority key identifier: B3:1C:4C:E6:63:E1:EC:24:5E:74:7C:D8:46:F1:A6:9D:DB:83:4B:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sxxM5mPh7CRedHzYRvGmnduDSzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/JSlJ5Kkw9KB2_LkNtS2R5YtwIFI.roa
Signing time: Wed 14 Oct 2026 18:48:13 +0000
ROA not before: Wed 14 Oct 2026 18:48:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 54694
IP address blocks: 2a14:1cc0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/sxxM5mPh7CRedHzYRvGmnduDSzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 14:43:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3b:be:5b:0e:7e:80:dd:83:a4:17:a8:18:5d:a0:b9:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b31c4ce663e1ec245e747cd846f1a69ddb834b3b
Validity
Not Before: Oct 14 18:48:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=252949e4a930f4a076fcb90db52d91e58b702052
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:9b:f0:7c:e6:2c:72:0b:48:b8:ad:41:96:56:
9c:cd:06:f8:55:63:64:d9:42:18:a3:3f:f5:62:9b:
a2:10:fc:41:ee:e1:ed:87:af:97:fa:88:9a:c0:bc:
ad:90:cd:ba:41:20:b0:67:25:5e:61:50:75:70:e8:
c0:b3:41:a1:26:fa:eb:b7:01:26:db:69:d0:7b:d5:
42:eb:02:d7:6a:d0:f2:66:9e:b2:f9:f4:39:4e:83:
06:46:9b:4c:c2:45:ee:11:c3:46:91:dc:f7:38:10:
69:0f:5d:19:5d:09:ec:c9:e4:44:6a:b0:1a:70:1b:
84:13:f6:e7:a8:6f:30:35:6d:28:bb:04:88:56:77:
1f:44:79:79:53:35:ec:e9:04:9b:8b:57:44:58:2a:
43:29:8f:0b:99:03:03:4c:0a:9b:14:cb:f1:0b:72:
86:60:8e:68:6d:91:37:6c:70:db:93:36:35:a4:c0:
e5:15:b0:89:65:23:21:f2:9b:9f:33:02:50:fe:14:
45:92:11:16:0b:96:e1:d3:85:5d:b6:af:34:ae:0e:
0b:9e:04:72:b7:9b:f8:9d:20:af:77:ff:66:e1:5b:
69:fe:6a:e4:42:76:39:e9:8c:4a:6c:e7:e8:56:a7:
94:97:fc:03:b4:20:f4:b1:9c:33:6f:1e:3e:93:76:
c4:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:29:49:E4:A9:30:F4:A0:76:FC:B9:0D:B5:2D:91:E5:8B:70:20:52
X509v3 Authority Key Identifier:
keyid:B3:1C:4C:E6:63:E1:EC:24:5E:74:7C:D8:46:F1:A6:9D:DB:83:4B:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sxxM5mPh7CRedHzYRvGmnduDSzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/JSlJ5Kkw9KB2_LkNtS2R5YtwIFI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:1cc0::/29
Signature Algorithm: sha256WithRSAEncryption
11:4c:ca:e4:e1:6f:d2:82:47:c4:9c:35:58:1c:44:bc:6a:11:
36:59:df:26:da:d1:0c:52:c4:89:8d:d9:5f:d2:ea:ea:f4:e5:
4a:e8:a0:0f:48:13:14:c9:5c:c2:48:5f:b0:28:a4:23:0c:dd:
a8:b7:12:18:e0:65:0f:41:69:31:63:1f:0a:64:18:10:6b:75:
f2:d9:52:ac:0b:93:27:9a:19:6e:8b:b7:ed:5a:7e:42:6f:09:
30:67:a8:40:71:1f:95:74:4e:d6:7c:fc:2c:dd:b5:e6:9b:44:
d9:b8:0c:fb:b6:4b:8f:76:eb:08:ba:06:17:a0:ae:b7:ef:d9:
d1:40:87:f8:18:01:d1:f2:0a:26:d7:6b:dc:b1:79:ad:76:fe:
b3:36:5f:cc:d4:fb:7f:72:1f:9b:45:bb:ac:5f:d7:5a:3a:fd:
31:9f:4d:60:21:f2:6f:18:16:f7:77:d3:f3:4d:53:0c:5e:b1:
82:8c:0a:89:31:48:f9:23:97:3c:0c:be:75:01:e2:b2:e6:fc:
ce:2b:02:07:c6:50:18:29:fa:6c:bb:d0:d3:d5:60:61:fe:3c:
de:8b:e9:6e:76:53:3c:bf:da:f8:32:04:5e:81:09:e1:c0:40:
57:ac:ac:6f:c3:40:43:75:f8:7a:3b:c2:0b:65:d2:07:37:98:
7f:a1:aa:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 01:52:18 2026 by rpki-client