Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/1047f9-9f5e-4b24-93ff-cb1dcf7126c9/1/jgOL2tJQLrYm30Lq61CCvxxKTLU.roa
File: jgOL2tJQLrYm30Lq61CCvxxKTLU.roa (raw, json)
Hash identifier: eBcqqbVvXfc7hYjWR9k75RZaMKi04DdasRprdoGGtDE=
Subject key identifier: 8E:03:8B:DA:D2:50:2E:B6:26:DF:42:EA:EB:50:82:BF:1C:4A:4C:B5
Certificate issuer: /CN=2fe00a644b64066613868769382bd9756254b74c
Certificate serial: 01A0DD5F211F1211B67C951533DF378851F5
Authority key identifier: 2F:E0:0A:64:4B:64:06:66:13:86:87:69:38:2B:D9:75:62:54:B7:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L-AKZEtkBmYThodpOCvZdWJUt0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/1047f9-9f5e-4b24-93ff-cb1dcf7126c9/1/jgOL2tJQLrYm30Lq61CCvxxKTLU.roa
Signing time: Sat 26 Sep 2026 10:59:54 +0000
ROA not before: Sat 26 Sep 2026 10:59:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215419
IP address blocks: 2a0e:e780:10::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/1047f9-9f5e-4b24-93ff-cb1dcf7126c9/1/L-AKZEtkBmYThodpOCvZdWJUt0w.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/1047f9-9f5e-4b24-93ff-cb1dcf7126c9/1/L-AKZEtkBmYThodpOCvZdWJUt0w.mft
rsync://rpki.ripe.net/repository/DEFAULT/L-AKZEtkBmYThodpOCvZdWJUt0w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:5f:21:1f:12:11:b6:7c:95:15:33:df:37:88:51:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fe00a644b64066613868769382bd9756254b74c
Validity
Not Before: Sep 26 10:59:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8e038bdad2502eb626df42eaeb5082bf1c4a4cb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:42:fb:53:60:4e:da:a7:6e:d2:70:90:53:c8:
2c:3c:ea:c9:29:53:dd:fc:9e:01:7f:42:7d:98:c2:
6d:90:14:8b:06:ec:8e:aa:f2:09:a8:24:60:b9:b0:
18:c6:b6:9e:c4:1e:ad:73:ed:f6:f2:78:3e:58:89:
fc:47:8f:0b:b7:c9:8c:d7:6e:40:92:bc:59:d8:9c:
46:85:6e:29:cb:ce:2f:f1:02:18:dc:ad:21:f5:12:
48:e6:37:ed:b4:a5:4f:63:72:a9:38:bc:96:e5:14:
b9:7b:b1:99:6f:95:3c:e6:07:5a:0a:b8:d6:3d:27:
8e:2c:23:69:71:25:4c:2d:2f:60:0e:9a:28:15:b4:
b8:da:b1:9d:ac:a9:c7:00:b3:f2:d8:10:42:48:67:
f2:3c:c5:0e:6e:f4:cd:64:9c:2e:92:79:2a:17:59:
fd:94:ef:8e:79:94:88:13:af:e3:ea:d6:4d:b8:0f:
78:c9:ec:63:1b:c2:31:66:3d:0e:41:09:c6:9e:5d:
b8:b7:c1:18:65:33:36:28:f7:3a:8a:c1:de:f3:f0:
a4:63:1e:b8:bd:1d:74:6c:06:2b:ea:f7:f6:73:9f:
44:66:f6:27:e0:61:23:e2:d0:8b:23:b0:f3:54:d4:
b7:8f:d7:9a:c9:53:6e:70:e6:ae:df:3f:60:30:56:
ea:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:03:8B:DA:D2:50:2E:B6:26:DF:42:EA:EB:50:82:BF:1C:4A:4C:B5
X509v3 Authority Key Identifier:
keyid:2F:E0:0A:64:4B:64:06:66:13:86:87:69:38:2B:D9:75:62:54:B7:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L-AKZEtkBmYThodpOCvZdWJUt0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/1047f9-9f5e-4b24-93ff-cb1dcf7126c9/1/jgOL2tJQLrYm30Lq61CCvxxKTLU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/1047f9-9f5e-4b24-93ff-cb1dcf7126c9/1/L-AKZEtkBmYThodpOCvZdWJUt0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:e780:10::/48
Signature Algorithm: sha256WithRSAEncryption
46:c2:42:0a:c9:2e:c9:5c:ab:6b:a0:ba:dc:72:e7:61:46:d0:
f1:7e:ce:6a:06:ce:9d:5d:74:19:60:a6:9b:d4:fa:73:fa:50:
5c:b3:f0:f2:90:76:5c:71:8e:9c:9c:22:6f:c4:8b:04:3d:a7:
16:b6:52:56:d3:7b:b4:e2:35:f9:c3:9e:cf:1c:78:b3:34:87:
cc:02:fa:0f:a3:59:d9:c8:0a:66:cc:68:60:73:28:af:cf:b1:
7b:ee:94:ae:a1:46:38:58:7b:ab:4a:1b:09:d6:21:13:ec:1a:
ae:99:4b:2f:6a:99:a0:1a:8e:1a:b0:9c:dd:64:d6:f4:89:9c:
ca:ae:44:60:06:54:e8:ff:b9:b5:56:cf:37:c0:25:ca:c2:69:
f8:75:18:71:e7:be:5f:00:4d:42:f3:e9:2b:1f:75:07:cf:0f:
54:61:b3:74:33:29:50:ac:37:97:08:df:1f:a0:b7:81:1c:76:
52:66:d3:98:d5:e1:31:99:b4:bd:9b:f4:7e:19:23:15:67:e1:
7b:42:41:01:74:f9:20:54:fc:35:be:37:27:6a:c9:33:f9:12:
31:3c:7d:89:6e:4a:ad:d7:ad:51:a2:1d:c6:9c:85:57:96:ad:
f6:92:7b:97:8c:0c:e4:2d:41:44:68:9b:6a:e2:44:cd:7a:9f:
b2:19:41:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:49:34 2026 by rpki-client