Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/j0xdoTaEGOgffNs_VBakKEsMOIw.roa
File: j0xdoTaEGOgffNs_VBakKEsMOIw.roa (raw, json)
Hash identifier: Vqww+aEljEVXFS4ldAu13uV4iJ+lDj74IOqZmlKaL+A=
Subject key identifier: 8F:4C:5D:A1:36:84:18:E8:1F:7C:DB:3F:54:16:A4:28:4B:0C:38:8C
Certificate issuer: /CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8
Certificate serial: 019F47F5E3D4499EE8868A73724E10C11709
Authority key identifier: 49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/j0xdoTaEGOgffNs_VBakKEsMOIw.roa
Signing time: Thu 09 Jul 2026 17:38:44 +0000
ROA not before: Thu 09 Jul 2026 17:38:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402642
IP address blocks: 2a11:5a00::/29 maxlen: 29
2a11:a4c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 Jul 2026 14:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:47:f5:e3:d4:49:9e:e8:86:8a:73:72:4e:10:c1:17:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8
Validity
Not Before: Jul 9 17:38:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8f4c5da1368418e81f7cdb3f5416a4284b0c388c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:26:6e:52:8d:df:55:c4:ee:ca:6c:36:f5:b1:
4d:c9:75:4d:5c:03:d0:c1:da:98:df:3b:ae:f5:b6:
d0:03:f6:ef:6c:cd:95:9b:e3:06:92:59:22:f7:d0:
a6:59:21:ec:04:d3:ed:40:ac:3b:a4:6b:03:22:75:
6b:5c:18:50:9d:61:99:3e:22:cd:61:71:f1:54:ae:
05:db:64:f4:b3:cc:4e:02:18:9d:92:92:a5:28:fd:
35:59:57:2e:52:9e:c8:92:40:01:5a:6b:df:97:4c:
f6:5f:15:df:c8:e9:1f:43:32:a4:61:bd:2b:8c:20:
3b:50:67:0e:3a:cd:83:00:83:36:82:14:79:a0:a0:
f2:a5:5f:fe:7d:c0:d0:5d:08:10:81:b7:15:57:86:
83:57:7c:14:59:8d:ea:bf:15:24:17:a7:04:aa:47:
45:5c:ad:42:d7:d8:fe:8f:af:3c:35:04:b7:44:11:
c2:84:d1:fa:6d:9e:1a:87:82:50:67:52:c9:30:ca:
08:3e:58:9f:dc:57:ea:c4:66:76:c0:11:a2:a0:a5:
d8:30:b1:61:39:db:b6:df:3f:e7:9a:af:36:b4:77:
00:b6:57:d5:e2:b1:86:ba:8e:9c:e8:0b:3f:97:9e:
61:f6:4a:19:e0:04:83:c2:7e:d8:5c:a3:a5:f2:7f:
04:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:4C:5D:A1:36:84:18:E8:1F:7C:DB:3F:54:16:A4:28:4B:0C:38:8C
X509v3 Authority Key Identifier:
keyid:49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/j0xdoTaEGOgffNs_VBakKEsMOIw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:5a00::/29
2a11:a4c0::/29
Signature Algorithm: sha256WithRSAEncryption
5d:e8:18:26:cc:a2:4f:7d:bc:c1:72:7c:1e:88:88:36:13:01:
ba:17:f0:a4:6b:94:93:9d:aa:0d:8a:82:77:3a:a7:f9:bd:a1:
d4:2e:da:48:77:a3:97:da:0a:40:c6:2e:01:a1:66:84:fe:2b:
2e:b2:0d:69:cf:b6:1f:91:99:fe:f9:ef:fa:26:18:73:87:07:
74:80:a7:4c:9e:c6:5f:f8:1d:b0:e6:47:ed:d4:4a:4a:e1:91:
87:7e:06:d8:98:3e:01:fb:6e:7c:06:67:67:e4:d7:b9:3d:b8:
b4:37:9a:48:a2:db:b5:c4:7f:f6:26:f7:c5:1d:1c:af:95:59:
38:6d:0c:ec:5b:a9:b7:91:7c:56:7c:51:08:d6:d3:bf:1e:86:
30:50:01:f4:a7:e7:28:53:b3:f8:c2:96:b3:f1:fb:a0:f2:3a:
2f:e5:9d:8c:a1:f1:dc:bb:bf:17:47:7a:ba:c8:58:cf:62:e8:
76:8d:d5:bc:80:1a:d0:66:8c:cb:92:40:9d:bb:55:1f:f4:e0:
86:0a:c1:da:7a:bc:1e:4d:ea:a0:0e:4b:51:b9:75:20:f3:d7:
5c:34:20:c9:94:81:5f:81:3e:ef:97:96:13:2d:11:88:fa:71:
b2:ad:80:50:f7:7b:11:ac:76:86:8c:3f:ca:a8:5b:68:a5:fd:
e7:78:11:61
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZ9H9ePUSZ7ohopzck4QwRcJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5ZTE0YmY3NmY0MmRhNGYyYWMwMDNhNmM2OWQ2MWMyMzIw
ZTJjZDgwHhcNMjYwNzA5MTczODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZjRjNWRhMTM2ODQxOGU4MWY3Y2RiM2Y1NDE2YTQyODRiMGMzODhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSZuUo3fVcTuymw29bFNyXVNXAPQ
wdqY3zuu9bbQA/bvbM2Vm+MGklki99CmWSHsBNPtQKw7pGsDInVrXBhQnWGZPiLN
YXHxVK4F22T0s8xOAhidkpKlKP01WVcuUp7IkkABWmvfl0z2XxXfyOkfQzKkYb0r
jCA7UGcOOs2DAIM2ghR5oKDypV/+fcDQXQgQgbcVV4aDV3wUWY3qvxUkF6cEqkdF
XK1C19j+j688NQS3RBHChNH6bZ4ah4JQZ1LJMMoIPlif3FfqxGZ2wBGioKXYMLFh
Odu23z/nmq82tHcAtlfV4rGGuo6c6As/l55h9koZ4ASDwn7YXKOl8n8EnQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFI9MXaE2hBjoH3zbP1QWpChLDDiMMB8GA1UdIwQY
MBaAFEnhS/dvQtpPKsADpsadYcIyDizYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2VGTDkyOUMyazhxd0FPbXhwMWh3aklPTE5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC81NjE2N2YtNTMyNy00Yzg4LWI0ZWEt
M2JlY2NhYWUzMzZkLzEvajB4ZG9UYUVHT2dmZk5zX1ZCYWtLRXNNT0l3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC81NjE2N2YtNTMyNy00Yzg4LWI0ZWEtM2JlY2NhYWUzMzZk
LzEvU2VGTDkyOUMyazhxd0FPbXhwMWh3aklPTE5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAAjAOAwUDKhFaAAMF
AyoRpMAwDQYJKoZIhvcNAQELBQADggEBAF3oGCbMok99vMFyfB6IiDYTAboX8KRr
lJOdqg2Kgnc6p/m9odQu2kh3o5faCkDGLgGhZoT+Ky6yDWnPth+Rmf757/omGHOH
B3SAp0yexl/4HbDmR+3USkrhkYd+BtiYPgH7bnwGZ2fk17k9uLQ3mkii27XEf/Ym
98UdHK+VWThtDOxbqbeRfFZ8UQjW078ehjBQAfSn5yhTs/jClrPx+6DyOi/lnYyh
8dy7vxdHerrIWM9i6HaN1byAGtBmjMuSQJ27VR/04IYKwdp6vB5N6qAOS1G5dSDz
11w0IMmUgV+BPu+XlhMtEYj6cbKtgFD3exGsdoaMP8qoW2il/ed4EWE=
-----END CERTIFICATE-----
Generated at Sun Jul 12 20:54:30 2026 by rpki-client