Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/a862e1-3d9f-4b46-87cc-abb9627d95ec/1/JbP1DaYmfAXbAIIDLF2iKNau78U.roa
File: JbP1DaYmfAXbAIIDLF2iKNau78U.roa (raw, json)
Hash identifier: TeCpeD604HqwpWXylmrKKY5o1QnXKpTZG7uy3rpUOas=
Subject key identifier: 25:B3:F5:0D:A6:26:7C:05:DB:00:82:03:2C:5D:A2:28:D6:AE:EF:C5
Certificate issuer: /CN=63497e324554dcd7da084832e158686135468a98
Certificate serial: 019F421D397C7226DBB5ED60B8115D547FC8
Authority key identifier: 63:49:7E:32:45:54:DC:D7:DA:08:48:32:E1:58:68:61:35:46:8A:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0l-MkVU3NfaCEgy4VhoYTVGipg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/a862e1-3d9f-4b46-87cc-abb9627d95ec/1/JbP1DaYmfAXbAIIDLF2iKNau78U.roa
Signing time: Wed 08 Jul 2026 14:23:59 +0000
ROA not before: Wed 08 Jul 2026 14:23:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 680
IP address blocks: 141.32.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/a862e1-3d9f-4b46-87cc-abb9627d95ec/1/Y0l-MkVU3NfaCEgy4VhoYTVGipg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/a862e1-3d9f-4b46-87cc-abb9627d95ec/1/Y0l-MkVU3NfaCEgy4VhoYTVGipg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y0l-MkVU3NfaCEgy4VhoYTVGipg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:42:1d:39:7c:72:26:db:b5:ed:60:b8:11:5d:54:7f:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63497e324554dcd7da084832e158686135468a98
Validity
Not Before: Jul 8 14:23:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=25b3f50da6267c05db0082032c5da228d6aeefc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:4c:7f:87:58:70:19:92:fd:f4:c7:0a:86:76:
a0:b1:96:66:dd:e8:d7:8a:75:46:b6:41:d9:a0:d8:
49:d3:20:28:e3:93:e8:14:4f:17:e5:40:c6:ee:be:
8a:43:6a:3d:18:10:78:27:b5:51:e4:9b:84:41:5a:
33:cf:e7:7b:14:62:ca:6a:02:9a:2b:6a:fe:39:06:
d3:2f:4d:26:1d:5b:cf:66:f8:c1:d9:be:21:26:3a:
92:35:0f:b5:53:6e:d0:f1:dd:eb:f2:21:44:6d:2b:
b7:44:53:d6:77:b8:a9:64:54:93:62:97:f6:0d:c2:
02:eb:33:e5:1c:32:19:c7:2b:ff:82:60:a4:43:59:
40:30:9e:f4:a1:cb:3c:86:26:6c:01:75:35:f1:2c:
b6:07:b7:59:3b:d8:4f:96:ad:50:c6:79:ee:bc:8a:
c5:a3:ce:cd:e6:8c:18:c8:c7:4e:53:a5:17:b9:0a:
35:a2:4b:fc:64:2a:0c:87:ac:d9:56:a5:2e:0e:f5:
bb:f5:79:69:a2:1f:07:c4:48:7c:65:7e:8a:fc:0c:
49:3c:62:40:99:9c:df:e1:27:c9:73:54:ca:86:01:
71:98:9d:f7:a8:a5:70:5d:79:4c:aa:a5:53:8e:c0:
54:60:d0:47:cb:ec:18:36:be:58:d3:a3:10:82:a0:
64:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:B3:F5:0D:A6:26:7C:05:DB:00:82:03:2C:5D:A2:28:D6:AE:EF:C5
X509v3 Authority Key Identifier:
keyid:63:49:7E:32:45:54:DC:D7:DA:08:48:32:E1:58:68:61:35:46:8A:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0l-MkVU3NfaCEgy4VhoYTVGipg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a862e1-3d9f-4b46-87cc-abb9627d95ec/1/JbP1DaYmfAXbAIIDLF2iKNau78U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a862e1-3d9f-4b46-87cc-abb9627d95ec/1/Y0l-MkVU3NfaCEgy4VhoYTVGipg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.32.0.0/16
Signature Algorithm: sha256WithRSAEncryption
ae:b7:1b:91:d6:27:48:20:6f:9a:ff:e3:10:38:42:17:fe:5f:
c7:04:37:df:77:30:03:81:12:ea:16:e9:89:c0:1a:a6:3f:d1:
79:d5:68:86:88:ab:70:87:3c:06:0c:ef:4a:21:cf:77:cf:6a:
6d:bb:79:20:c8:42:ee:b7:a4:61:80:7a:f5:a7:75:65:2b:2a:
24:78:02:0e:a8:c6:c9:58:f1:34:fa:f1:5f:c6:da:80:93:ac:
ed:86:58:3e:87:7f:25:bd:7b:86:f4:97:bd:93:9b:d1:b5:f3:
48:31:14:6b:18:91:9d:87:a3:0e:3e:d2:a5:34:89:b9:e9:1f:
d4:c0:44:63:9f:5b:1b:44:51:ff:d9:39:90:ff:91:fe:90:17:
80:31:82:fc:3e:f7:76:9b:f2:3f:b3:3f:7c:58:cf:57:0f:12:
2b:f9:63:91:5b:16:dd:a6:d9:bd:9b:3f:10:ae:cb:9a:4d:b0:
7b:60:d3:72:37:6a:92:33:39:0c:6f:7b:6c:f0:82:07:ac:06:
3e:3c:22:9e:10:30:83:d8:4b:1a:ee:00:42:f2:e3:16:75:96:
c1:f5:5c:bf:b1:8c:23:5f:bf:d1:39:72:34:d3:ac:0e:61:4e:
55:fb:fe:ea:cc:5a:c8:b0:80:75:c1:21:6b:8d:24:bf:59:9d:
91:34:23:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 07:00:56 2026 by rpki-client