Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/62633f-2b3f-4072-8f4a-b474970eca66/1/j4s0fLaJ4M0j3HIUEYyBIZhw_Rk.roa
File: j4s0fLaJ4M0j3HIUEYyBIZhw_Rk.roa (raw, json)
Hash identifier: YKWInfEvjT2tzjdSrpQyeMguWoSka4sAxAanPSwcSQY=
Subject key identifier: 8F:8B:34:7C:B6:89:E0:CD:23:DC:72:14:11:8C:81:21:98:70:FD:19
Certificate issuer: /CN=8e06f5a7314b2f966b24fc53155ce7bf604c07a6
Certificate serial: 01A05FDAA7277F777C1AE14F3FD1E09DA1F8
Authority key identifier: 8E:06:F5:A7:31:4B:2F:96:6B:24:FC:53:15:5C:E7:BF:60:4C:07:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jgb1pzFLL5ZrJPxTFVznv2BMB6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/62633f-2b3f-4072-8f4a-b474970eca66/1/j4s0fLaJ4M0j3HIUEYyBIZhw_Rk.roa
Signing time: Wed 02 Sep 2026 02:02:40 +0000
ROA not before: Wed 02 Sep 2026 02:02:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199614
IP address blocks: 2a13:a280::/33 maxlen: 33
2a13:a280:8000::/33 maxlen: 33
2a13:a281::/33 maxlen: 33
2a13:a281:8000::/33 maxlen: 33
2a13:a282::/33 maxlen: 33
2a13:a282:8000::/33 maxlen: 33
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/62633f-2b3f-4072-8f4a-b474970eca66/1/jgb1pzFLL5ZrJPxTFVznv2BMB6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/62633f-2b3f-4072-8f4a-b474970eca66/1/jgb1pzFLL5ZrJPxTFVznv2BMB6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/jgb1pzFLL5ZrJPxTFVznv2BMB6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 09:18:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5f:da:a7:27:7f:77:7c:1a:e1:4f:3f:d1:e0:9d:a1:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e06f5a7314b2f966b24fc53155ce7bf604c07a6
Validity
Not Before: Sep 2 02:02:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8f8b347cb689e0cd23dc7214118c81219870fd19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1e:ae:97:43:1d:50:9e:3e:4e:fd:4e:50:4d:
3d:eb:16:d5:de:46:0e:bd:06:d4:da:d8:48:2f:06:
12:c4:d6:04:0e:80:75:cc:d3:e7:3a:e4:30:b3:f8:
d4:cb:d3:ef:1e:35:6a:2b:11:55:e8:6e:b6:da:cb:
49:58:82:32:f5:b7:67:07:f7:97:4d:e8:b0:c4:23:
3e:12:f3:3c:34:7a:cc:af:3b:71:47:21:af:88:32:
a7:96:fb:fc:9d:0e:4e:a0:57:b3:86:78:00:f1:78:
23:73:81:5c:cb:91:53:25:2a:d3:3c:41:87:4b:a5:
24:bb:70:3e:61:a1:29:91:15:f3:67:78:c6:94:9a:
2b:78:8f:a7:17:79:20:07:c3:19:f2:e5:ff:d1:fc:
b3:68:a4:b6:8e:1f:2a:a1:5c:07:d5:f3:f5:85:bd:
e6:7f:9b:7e:04:c9:35:10:18:d4:ef:5a:38:84:15:
64:6b:db:9f:bf:1a:b5:84:63:f0:1e:cf:44:7e:62:
a0:9c:cf:df:ed:e4:1b:95:48:19:25:8c:a7:d1:ff:
a4:49:5a:01:2e:14:58:3e:d8:8c:99:e2:3c:10:95:
5c:dd:9b:e9:69:24:f8:49:38:d4:2d:1a:07:87:c5:
34:8e:10:45:2e:4d:eb:31:a8:a0:dd:f3:b8:d3:0c:
c8:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:8B:34:7C:B6:89:E0:CD:23:DC:72:14:11:8C:81:21:98:70:FD:19
X509v3 Authority Key Identifier:
keyid:8E:06:F5:A7:31:4B:2F:96:6B:24:FC:53:15:5C:E7:BF:60:4C:07:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jgb1pzFLL5ZrJPxTFVznv2BMB6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/62633f-2b3f-4072-8f4a-b474970eca66/1/j4s0fLaJ4M0j3HIUEYyBIZhw_Rk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/62633f-2b3f-4072-8f4a-b474970eca66/1/jgb1pzFLL5ZrJPxTFVznv2BMB6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:a280::-2a13:a282:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
5c:26:5a:2d:e9:44:28:b8:cc:5c:d8:64:db:8a:85:28:2d:6b:
7e:d6:4d:6f:0d:28:35:94:a1:ab:e9:8a:b7:18:e2:ee:c1:29:
d2:59:b9:fb:0f:8b:2c:53:c8:e4:df:8e:b3:42:02:81:3b:0d:
3b:1a:0f:84:f1:36:95:0a:e5:ef:39:44:a0:55:bf:b1:e4:70:
74:51:83:d4:0e:a6:27:47:8f:33:12:61:f8:1c:c1:51:4f:b5:
71:32:e2:5a:01:3f:f2:65:7d:55:c2:91:72:75:84:7c:89:f0:
e4:a6:97:04:9b:83:75:d4:e7:25:29:cd:0c:52:f7:a3:23:4e:
43:64:cf:fd:44:6e:a8:38:28:f8:12:57:03:84:c7:52:f1:8e:
79:e5:ba:a0:cc:0a:ba:11:9a:97:5c:ef:7f:95:14:1d:e3:b6:
46:28:2a:58:e5:9a:67:df:88:33:57:9b:21:40:e9:65:69:70:
a9:9c:1d:f4:ea:7a:ed:b4:18:2f:71:df:72:93:8d:41:72:10:
b6:19:d4:15:0e:d1:df:60:59:33:69:17:aa:0d:b8:f1:07:4c:
74:38:92:0a:b5:90:0d:59:28:3e:cd:d8:88:ac:49:e3:e2:32:
4d:99:3c:3e:21:a2:b4:1f:07:c5:d1:d9:7f:6f:0a:88:c4:25:
2d:97:e8:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 15:15:26 2026 by rpki-client