Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/J3R2IeAW_m0d02uAQasK7sttZCQ.roa
File: J3R2IeAW_m0d02uAQasK7sttZCQ.roa (raw, json)
Hash identifier: 20fGt425z6WH78gh3mBbdekTdMzKNuIzu/Znp+h8cBU=
Subject key identifier: 27:74:76:21:E0:16:FE:6D:1D:D3:6B:80:41:AB:0A:EE:CB:6D:64:24
Certificate issuer: /CN=58ad60da52671e9083cf39864eca2aa23241be9e
Certificate serial: 01A05D051BC2BB2AD978A80274755C829884
Authority key identifier: 58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/J3R2IeAW_m0d02uAQasK7sttZCQ.roa
Signing time: Tue 01 Sep 2026 12:50:10 +0000
ROA not before: Tue 01 Sep 2026 12:50:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216078
IP address blocks: 2a01:f040::/29 maxlen: 29
2a0b:b480::/29 maxlen: 29
2a0e:d300::/29 maxlen: 29
2a13:b740::/29 maxlen: 29
2a13:be40::/29 maxlen: 29
2a13:d0c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 12:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5d:05:1b:c2:bb:2a:d9:78:a8:02:74:75:5c:82:98:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58ad60da52671e9083cf39864eca2aa23241be9e
Validity
Not Before: Sep 1 12:50:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=27747621e016fe6d1dd36b8041ab0aeecb6d6424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:16:c1:9e:f4:59:3d:7f:88:03:d3:fa:de:96:
34:f8:25:91:dd:6a:5d:0f:22:8a:6d:cb:7d:38:92:
c6:de:1a:f2:32:3a:db:8a:27:da:7c:c7:b9:88:f9:
09:83:ee:7d:6c:be:a8:5e:b0:6a:90:b1:ed:03:dc:
17:c2:26:7f:86:75:92:64:2b:37:ca:bf:27:fc:41:
79:03:1d:d7:f2:5f:d7:e4:2b:1f:9d:20:f4:e0:9a:
c0:31:a9:2b:c2:2f:a1:8e:81:c3:50:fa:4b:e5:fe:
fe:b2:5a:2c:89:c9:d5:04:1d:6b:d2:77:32:d4:f6:
46:ae:c6:8c:23:38:8a:75:8d:20:33:d5:5c:38:09:
77:c3:00:05:cc:91:38:b7:63:be:60:cb:94:ba:f1:
19:95:9b:46:42:ea:0b:bf:7c:5b:3c:17:57:41:e7:
7c:ad:4a:82:2e:5c:31:3a:d0:c0:92:90:a6:65:88:
fb:08:c4:c0:04:6b:52:b7:99:4e:7c:41:d3:67:21:
fb:03:e4:65:43:3a:44:7d:d9:63:6e:92:f6:5d:b8:
ec:ea:87:af:65:35:fc:4d:5d:0c:a2:88:2a:8a:19:
67:d4:62:67:9a:ec:87:89:d0:17:ab:e9:c3:54:f1:
f1:d1:cb:de:6d:e7:2f:db:35:a2:d1:69:68:8b:61:
3b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:74:76:21:E0:16:FE:6D:1D:D3:6B:80:41:AB:0A:EE:CB:6D:64:24
X509v3 Authority Key Identifier:
keyid:58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/J3R2IeAW_m0d02uAQasK7sttZCQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:f040::/29
2a0b:b480::/29
2a0e:d300::/29
2a13:b740::/29
2a13:be40::/29
2a13:d0c0::/29
Signature Algorithm: sha256WithRSAEncryption
31:20:bb:07:3d:8d:ab:49:06:37:d3:44:e7:d7:15:0c:76:94:
bb:51:15:cb:49:55:c7:de:f0:0c:09:21:63:33:31:6b:7e:65:
eb:75:58:8c:c7:19:17:1a:6d:56:93:6d:43:be:96:8f:f5:4d:
66:bb:14:41:1b:90:4f:7c:27:c7:0e:33:0d:7c:f7:7c:0d:16:
7c:f3:34:53:46:72:4a:6c:51:66:2b:5c:d1:6d:62:36:c8:23:
b5:6a:8c:ee:98:2b:69:18:de:4b:1e:e1:bb:81:70:5c:28:22:
57:c5:19:ef:d8:5c:13:cf:8b:34:fa:bb:7a:5f:3b:c3:d6:9e:
f6:29:ee:61:c2:8a:0c:c2:42:45:77:21:74:1e:b0:06:17:e1:
9f:76:15:cc:c5:26:3e:c0:60:ff:68:10:02:2b:21:f8:90:aa:
fa:fe:ef:8a:48:fc:81:48:93:83:9c:96:97:72:78:0e:2c:86:
96:7f:68:03:c7:1a:cf:8f:86:c1:5f:59:00:7d:e4:8a:b8:cc:
55:ea:90:d7:7c:a2:32:06:bc:16:d8:7f:1e:34:1e:d0:4d:44:
a7:61:ae:4c:34:fd:be:77:83:a0:36:5c:ab:67:b0:11:dc:05:
3c:d2:6b:84:6b:55:30:8f:7f:67:ec:1f:0c:75:1f:4e:96:04:
f9:5d:3d:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:17:42 2026 by rpki-client