Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/jJn1dHuOkeVMWi6J9ETyQDEREpg.roa
File: jJn1dHuOkeVMWi6J9ETyQDEREpg.roa (raw, json)
Hash identifier: AM4eJps++jEM453FJ0De0uLZG1qRP+7djgMLYO5uA5s=
Subject key identifier: 8C:99:F5:74:7B:8E:91:E5:4C:5A:2E:89:F4:44:F2:40:31:11:12:98
Certificate issuer: /CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
Certificate serial: 01A095821D55724DE3DA567D18BE1A2272ED
Authority key identifier: 58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/jJn1dHuOkeVMWi6J9ETyQDEREpg.roa
Signing time: Sat 12 Sep 2026 12:05:27 +0000
ROA not before: Sat 12 Sep 2026 12:05:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 11967
IP address blocks: 2a14:c380:37::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Sep 2026 21:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:95:82:1d:55:72:4d:e3:da:56:7d:18:be:1a:22:72:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
Validity
Not Before: Sep 12 12:05:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8c99f5747b8e91e54c5a2e89f444f24031111298
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1c:53:e9:0f:a9:27:32:0d:03:db:9c:b4:64:
49:30:89:5c:7b:02:27:8d:01:f5:f4:bb:86:e5:f9:
3e:68:01:95:86:4d:48:d7:41:76:b0:48:5d:d4:52:
7b:5d:af:59:c0:9e:14:cb:9a:65:b7:df:7c:48:ff:
41:01:99:60:b6:11:6f:cb:2e:e2:19:02:53:e0:e9:
f0:6f:3d:07:3f:1c:6d:31:b8:21:45:c4:b1:1f:bf:
c4:43:84:b0:d1:59:93:d9:e1:9d:93:06:62:0d:14:
50:b6:0b:ff:1a:a5:2d:02:78:8e:2b:4d:bd:00:e5:
ba:a2:e6:12:34:98:d6:6e:56:f2:73:65:6a:0c:37:
51:12:e3:e3:1f:0c:97:cd:17:b7:0a:3e:af:35:da:
67:f1:a6:eb:79:83:49:a9:49:17:e7:d6:81:20:e1:
13:ee:b4:70:1f:44:5b:e4:91:60:94:a9:c4:df:1e:
e9:66:ef:72:f2:cf:14:9d:db:f2:bc:7d:f2:fe:21:
91:2e:bf:24:d2:4f:d7:c7:45:99:46:80:74:fd:e0:
e5:11:62:ed:fd:45:f9:f6:10:2b:f1:cf:65:1a:bb:
d4:77:e3:59:34:93:d3:25:b9:9a:48:82:54:f4:7b:
f6:68:78:1e:b8:21:0d:fa:48:39:d3:a6:1d:4f:a2:
5a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:99:F5:74:7B:8E:91:E5:4C:5A:2E:89:F4:44:F2:40:31:11:12:98
X509v3 Authority Key Identifier:
keyid:58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/jJn1dHuOkeVMWi6J9ETyQDEREpg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:c380:37::/48
Signature Algorithm: sha256WithRSAEncryption
49:98:c7:f7:9b:6f:b9:8a:61:ec:bd:c7:55:d4:c8:4e:23:b3:
e1:f4:52:61:d7:a1:81:40:a5:df:8d:19:d9:48:72:48:10:1e:
86:b3:d1:c6:80:2e:da:17:b8:40:90:2c:c4:9d:f6:48:90:08:
96:9c:64:0c:ed:28:b5:a6:93:d2:b1:6e:b5:93:eb:25:fc:1f:
ad:ff:62:78:b9:15:2e:60:91:6f:bd:5e:f9:25:04:3c:1c:94:
df:83:02:9e:be:8c:10:9e:dc:a2:b7:92:d6:5f:45:3b:3b:e8:
43:48:ed:f5:d2:8f:c2:14:60:b2:4a:54:03:93:82:fb:41:f0:
71:00:a5:f8:f3:8b:f9:8e:66:8d:4f:1d:fe:04:4d:cf:b8:8f:
4c:92:34:21:13:5f:d8:6b:32:27:ca:8a:75:08:f8:6f:17:dc:
6f:e6:77:95:d1:1e:68:c0:63:6c:58:a4:84:81:fa:db:00:56:
1e:4c:c1:75:36:83:f7:64:47:c3:13:dd:a5:df:28:33:84:cf:
03:62:eb:91:36:04:12:e7:93:e2:ce:95:14:65:0d:0c:c5:cd:
7d:96:93:18:cd:79:06:ca:00:42:21:8b:b9:5a:08:07:da:a8:
88:61:41:78:6a:44:8d:b5:0c:4d:b3:86:ba:65:3d:8c:10:4a:
d0:4d:28:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 14 03:40:18 2026 by rpki-client