Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/AmJH-oKP8JDfCGjtvLBdScjcl94.roa
File: AmJH-oKP8JDfCGjtvLBdScjcl94.roa (raw, json)
Hash identifier: JYSfH/iBbNzkn+YYYr8OyA3qLrDl+3bHlmfyOFI1Y70=
Subject key identifier: 02:62:47:FA:82:8F:F0:90:DF:08:68:ED:BC:B0:5D:49:C8:DC:97:DE
Certificate issuer: /CN=a4537cbedad356819cbc77ae3fca17d65431c280
Certificate serial: 019F2368FEC47B548108A3BAFACC2EE595EF
Authority key identifier: A4:53:7C:BE:DA:D3:56:81:9C:BC:77:AE:3F:CA:17:D6:54:31:C2:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pFN8vtrTVoGcvHeuP8oX1lQxwoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/AmJH-oKP8JDfCGjtvLBdScjcl94.roa
Signing time: Thu 02 Jul 2026 15:18:31 +0000
ROA not before: Thu 02 Jul 2026 15:18:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 36411
IP address blocks: 2a00:79e1:820::/45 maxlen: 45
2a00:79e1:820::/47 maxlen: 47
2a00:79e1:821::/48 maxlen: 48
2a00:79e1:822::/47 maxlen: 47
2a00:79e1:823::/48 maxlen: 48
2a00:79e1:824::/48 maxlen: 48
2a00:79e1:825::/48 maxlen: 48
2a00:79e1:826::/48 maxlen: 48
2a00:79e1:827::/48 maxlen: 48
2a00:79e1:840::/48 maxlen: 48
2a00:79e1:841::/48 maxlen: 48
2a00:79e1:2000::/35 maxlen: 35
2a00:79e1:2000::/38 maxlen: 38
2a00:79e1:2200::/39 maxlen: 39
2a00:79e1:2400::/39 maxlen: 39
2a00:79e1:2600::/39 maxlen: 39
2a00:79e1:2800::/38 maxlen: 38
2a00:79e1:2a00::/39 maxlen: 39
2a00:79e1:2c00::/39 maxlen: 39
2a00:79e1:2e00::/39 maxlen: 39
2a00:79e1:3000::/38 maxlen: 38
2a00:79e1:3200::/39 maxlen: 39
2a00:79e1:3400::/39 maxlen: 39
2a00:79e1:3600::/39 maxlen: 39
2a00:79e1:3800::/38 maxlen: 38
2a00:79e1:3a00::/39 maxlen: 39
2a00:79e1:3c00::/39 maxlen: 39
2a00:79e1:3e00::/39 maxlen: 39
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/pFN8vtrTVoGcvHeuP8oX1lQxwoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/pFN8vtrTVoGcvHeuP8oX1lQxwoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pFN8vtrTVoGcvHeuP8oX1lQxwoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Jul 2026 13:45:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:fe:c4:7b:54:81:08:a3:ba:fa:cc:2e:e5:95:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4537cbedad356819cbc77ae3fca17d65431c280
Validity
Not Before: Jul 2 15:18:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=026247fa828ff090df0868edbcb05d49c8dc97de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:bc:2e:7d:17:2d:c5:29:92:d1:93:c0:07:00:
55:04:1e:eb:e8:8d:0e:d8:b5:52:ab:86:fc:c9:34:
d8:15:17:73:b5:63:cd:73:8a:ca:92:7c:6d:51:47:
04:7d:42:9d:81:90:44:54:81:91:7b:52:64:d2:f2:
5a:c9:05:59:fd:fb:b8:ed:54:d8:bf:45:e7:8c:1c:
fa:76:74:bd:5a:d7:6c:43:52:69:76:ea:02:0f:7a:
94:95:7e:06:0b:1c:4e:8f:24:84:82:97:e3:c9:58:
c0:52:44:fa:ef:cb:59:14:cf:cd:2e:06:cc:6e:59:
26:fe:b6:b3:47:25:ef:9a:72:41:32:10:d2:33:56:
2f:a7:80:f2:e7:59:7d:74:69:f7:c6:ea:f4:6c:a2:
02:a6:8e:79:fa:b9:45:82:84:6f:5b:3f:c6:b0:ba:
37:42:24:ff:54:25:15:9a:b5:d2:b5:4e:9f:47:98:
cd:e8:6e:94:95:c5:f2:2b:3c:e3:de:7b:55:01:5e:
1b:44:3c:85:1f:7d:59:25:d2:98:f4:9e:8e:cb:a0:
80:be:e8:fc:85:b4:15:d5:24:2a:ae:3e:8c:ee:24:
71:e5:23:90:e5:b8:3c:76:fd:d9:10:08:bf:06:09:
3b:77:8c:9f:7b:68:8b:24:eb:2b:b6:45:00:82:79:
64:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:62:47:FA:82:8F:F0:90:DF:08:68:ED:BC:B0:5D:49:C8:DC:97:DE
X509v3 Authority Key Identifier:
keyid:A4:53:7C:BE:DA:D3:56:81:9C:BC:77:AE:3F:CA:17:D6:54:31:C2:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pFN8vtrTVoGcvHeuP8oX1lQxwoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/AmJH-oKP8JDfCGjtvLBdScjcl94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/pFN8vtrTVoGcvHeuP8oX1lQxwoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:79e1:820::/45
2a00:79e1:840::/47
2a00:79e1:2000::/35
Signature Algorithm: sha256WithRSAEncryption
3e:dd:b4:27:de:b6:ad:5a:11:ee:22:30:a8:4e:6b:ad:d7:73:
11:50:22:40:bd:35:3b:0f:49:94:50:bc:b6:9b:e9:34:2d:4f:
50:9f:a6:57:fc:43:43:23:72:09:54:46:ac:00:f2:e4:a0:dc:
c0:f3:3b:58:88:47:f7:3c:7f:1f:f5:20:0d:76:d8:24:64:de:
2c:54:f6:d3:76:b7:0a:c1:2e:0b:c3:22:e3:92:e3:7d:05:61:
1e:72:ed:5a:17:35:b9:95:62:df:2e:ad:99:8a:72:fa:80:c8:
63:75:c4:45:30:c6:90:53:4a:61:bc:04:c7:0e:1f:13:8b:dd:
6d:f8:b8:09:95:b0:5c:61:f4:76:38:e2:f8:fb:86:85:49:82:
c3:96:88:a3:a1:d8:b6:86:fb:73:76:5f:fe:0e:e3:b2:fb:fa:
1e:0c:ea:f5:5a:dc:8a:8e:80:3f:3e:32:18:c2:7f:fa:cf:ad:
a7:66:a0:c3:b1:4c:c1:4a:6b:e5:87:fc:32:13:e8:b4:44:fa:
bd:a6:9a:f6:bd:f2:2d:84:2d:20:82:44:15:b2:82:67:cb:4f:
f4:63:16:b3:48:bc:7a:3e:89:53:f6:67:ac:9b:69:7e:23:b8:
ad:c0:a6:60:8c:6c:39:cd:99:a2:40:c4:a0:c7:f6:6e:a4:2a:
56:95:46:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 19:54:37 2026 by rpki-client