Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/JopkOrgNQwjsD-zSEX8SwDPgom4.roa
File: JopkOrgNQwjsD-zSEX8SwDPgom4.roa (raw, json)
Hash identifier: kjQYurLHcKmMV2OibY4iBUL2xE3siWw3m96oXoLNg+M=
Subject key identifier: 26:8A:64:3A:B8:0D:43:08:EC:0F:EC:D2:11:7F:12:C0:33:E0:A2:6E
Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Certificate serial: 019E8205EDE60BAA80DC3EF9BCCBEDD8B5D6
Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/JopkOrgNQwjsD-zSEX8SwDPgom4.roa
Signing time: Mon 01 Jun 2026 07:11:27 +0000
ROA not before: Mon 01 Jun 2026 07:11:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208226
IP address blocks: 2a06:e881:7000::/44 maxlen: 44
2a0a:79c0:e00::/44 maxlen: 44
2a0a:79c0:1000::/44 maxlen: 44
2a0a:79c0:1400::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Jun 2026 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:82:05:ed:e6:0b:aa:80:dc:3e:f9:bc:cb:ed:d8:b5:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Validity
Not Before: Jun 1 07:11:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=268a643ab80d4308ec0fecd2117f12c033e0a26e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0c:f4:e3:3b:80:41:f8:39:18:a1:95:d2:52:
30:58:ae:6e:73:c8:7b:5d:99:6d:c4:49:77:ea:2a:
86:3d:5b:a5:7a:16:34:66:8c:c2:a3:64:e3:02:73:
77:75:d0:f9:97:4d:ab:e3:3d:3a:e0:89:8c:a0:ee:
55:94:0d:e5:b2:29:2e:92:11:00:23:bd:a7:67:3d:
13:39:15:51:58:9c:49:be:0c:b3:01:bd:a0:13:0c:
ea:6d:06:a5:57:dc:41:5c:25:eb:3c:12:b9:5b:e4:
5a:14:b4:f4:35:0c:9d:74:b5:52:3e:ad:f8:66:09:
f3:7f:70:c5:06:7f:b5:20:12:2f:d0:76:ac:7d:7d:
21:b5:8d:eb:9b:43:75:15:94:65:7f:d1:2c:af:3b:
19:2c:70:12:1b:84:1e:76:7b:3d:f7:dd:e7:ce:2a:
7b:bc:c9:1a:ec:7d:62:ec:bd:4d:13:c2:2f:dd:c2:
db:0e:1b:1d:85:52:6d:00:23:cb:b7:2c:d5:2b:0d:
e2:07:76:fc:84:fd:f5:2f:4f:25:9d:f8:21:33:d1:
e8:92:3d:a2:61:00:f0:c0:df:82:ba:68:a2:ce:7a:
86:41:7f:f2:10:04:30:91:9a:19:85:68:57:05:6a:
4e:a6:69:47:7d:b2:3d:5d:cd:e1:18:69:30:cc:34:
99:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:8A:64:3A:B8:0D:43:08:EC:0F:EC:D2:11:7F:12:C0:33:E0:A2:6E
X509v3 Authority Key Identifier:
keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/JopkOrgNQwjsD-zSEX8SwDPgom4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:e881:7000::/44
2a0a:79c0:e00::/44
2a0a:79c0:1000::/44
2a0a:79c0:1400::/44
Signature Algorithm: sha256WithRSAEncryption
1e:10:d1:ab:4b:bf:36:3d:c2:5f:32:fb:12:6d:41:4c:1f:6e:
ce:69:85:6d:ed:96:74:07:cc:8f:e4:df:6b:9b:4e:41:0a:c8:
07:4c:81:fe:49:c2:b3:a6:03:7f:6e:d3:ba:36:65:19:e5:75:
f7:ac:0a:5c:ea:e3:7d:9b:31:0e:a1:72:3f:3a:10:27:36:1b:
b5:e1:dc:26:79:8f:58:94:f9:b2:ff:3f:43:2f:5f:97:dc:80:
89:75:9a:53:ea:e1:08:f8:31:c3:c7:db:3d:45:dd:f4:6e:1a:
3d:75:7a:cb:42:1b:40:29:cf:63:df:3a:1d:da:4a:99:7d:c4:
b9:7c:a4:0f:45:ac:43:32:7e:ce:d8:26:94:da:c0:cf:d3:19:
fe:fc:69:3f:b2:f6:1d:60:e8:68:51:d6:18:05:f8:6d:54:0e:
64:22:8d:9f:5f:2b:8e:d9:ce:43:6e:64:9a:6c:fe:09:e8:b1:
3d:1c:5b:7d:d2:9d:ef:84:bc:52:33:42:52:67:d9:da:b2:3e:
b1:35:a7:6e:b0:04:5f:bc:74:3b:89:7d:58:4c:16:74:55:74:
72:18:cd:07:09:41:b3:05:8b:a5:0b:9e:e3:59:12:ca:28:16:
e1:8d:5b:2f:39:2c:04:0b:e8:47:66:15:bc:ef:cd:b1:98:97:
87:1b:0e:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 05:21:40 2026 by rpki-client