Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/RjlJyxrYJIpppY-il0IsnWaY1Yk.roa
File: RjlJyxrYJIpppY-il0IsnWaY1Yk.roa (raw, json)
Hash identifier: +L3StqZUGVJBR17tezGmEcfXdni/G3W+qWpSte6mPqk=
Subject key identifier: 46:39:49:CB:1A:D8:24:8A:69:A5:8F:A2:97:42:2C:9D:66:98:D5:89
Certificate issuer: /CN=58ad60da52671e9083cf39864eca2aa23241be9e
Certificate serial: 01A05D051C31035177D6E8101ABD7FA21C0D
Authority key identifier: 58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/RjlJyxrYJIpppY-il0IsnWaY1Yk.roa
Signing time: Tue 01 Sep 2026 12:50:11 +0000
ROA not before: Tue 01 Sep 2026 12:50:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402933
IP address blocks: 2a0f:e3c0::/29 maxlen: 29
2a10:7ac0::/29 maxlen: 29
2a13:bec0::/29 maxlen: 29
2a13:dfc0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 03:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5d:05:1c:31:03:51:77:d6:e8:10:1a:bd:7f:a2:1c:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58ad60da52671e9083cf39864eca2aa23241be9e
Validity
Not Before: Sep 1 12:50:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=463949cb1ad8248a69a58fa297422c9d6698d589
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a8:ad:19:2a:ea:bb:48:56:a9:7c:ad:26:9f:
4b:69:dd:d2:09:89:2e:4b:f9:55:6e:0c:25:03:76:
40:e2:5b:19:3a:a7:dc:17:92:85:1a:f6:6a:0d:24:
40:bb:ff:ff:76:62:ac:18:47:57:89:01:c3:75:c9:
4a:e5:28:c2:c6:c7:6e:fb:06:01:84:c8:8f:f2:21:
05:35:f5:bb:ef:b9:75:45:84:ba:1e:b5:60:a1:98:
a9:bd:52:63:45:8e:17:3e:80:34:d4:aa:74:e0:e2:
ac:f2:36:94:62:99:e0:46:52:26:c8:63:f8:1b:3e:
84:09:9e:f0:7c:d3:14:66:60:fc:b2:f8:9e:ea:b4:
f7:ae:5c:38:e5:6e:28:02:d2:80:bb:41:d6:1c:84:
9c:39:b3:b3:ae:6e:a2:db:34:71:4a:94:62:b0:f0:
c5:f4:9a:48:18:9c:e5:a9:35:5f:c0:bb:7d:11:73:
15:a4:9e:33:e6:57:e0:f2:03:60:c1:00:e6:32:07:
aa:ad:f2:c4:e9:5c:4a:b2:23:c6:e0:d3:08:a0:1f:
d3:b2:92:7c:b3:3e:7b:6f:b0:7a:29:fe:96:fa:00:
ac:e9:bf:10:65:9e:83:b1:19:ca:0c:88:b6:d5:13:
eb:3b:ec:66:37:85:ef:6c:47:f6:8a:fa:62:fb:a6:
e5:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:39:49:CB:1A:D8:24:8A:69:A5:8F:A2:97:42:2C:9D:66:98:D5:89
X509v3 Authority Key Identifier:
keyid:58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/RjlJyxrYJIpppY-il0IsnWaY1Yk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:e3c0::/29
2a10:7ac0::/29
2a13:bec0::/29
2a13:dfc0::/29
Signature Algorithm: sha256WithRSAEncryption
1c:74:a8:f7:b0:7f:f2:22:42:ce:96:85:85:21:63:1c:9c:81:
cf:02:77:44:de:fb:9e:3c:a0:2c:e1:b5:b3:89:38:c4:3e:34:
08:c4:bc:c1:3b:da:5a:0b:cc:2b:88:0f:ea:98:de:94:94:bf:
98:08:42:bb:32:d7:21:dd:5c:14:72:f6:3a:96:d0:8c:a1:a5:
3a:10:a6:8c:b6:57:a9:67:c8:96:55:12:91:23:a9:16:52:fc:
d4:95:91:58:4a:37:96:e4:e8:85:b7:e5:bb:11:0d:46:4c:a9:
56:0e:2c:53:f2:5c:6d:ee:54:fa:25:54:b7:b1:49:f3:09:d4:
75:3b:dd:4e:a1:c7:b8:7c:e8:35:05:8b:21:81:45:be:2c:f0:
d2:82:36:c3:e5:66:6c:9d:d1:65:ee:84:35:d8:d9:45:a9:80:
90:16:33:77:83:da:36:6a:32:be:62:4a:36:97:ac:5a:c1:e8:
c9:1a:e4:65:80:fa:1f:3d:2b:7b:6f:e7:2a:b3:e2:01:45:fc:
a0:fa:4d:ef:2d:05:2f:f2:e1:d1:df:5b:10:ad:d8:27:62:59:
b0:2c:5e:07:06:aa:ab:c5:ee:0b:84:3f:8d:34:d3:0a:f3:82:
0b:49:c7:76:94:cf:a9:5f:a1:7b:55:7e:80:75:ea:71:7e:0e:
49:92:f0:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 10:43:45 2026 by rpki-client