Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/JbKoCPRDaVNJoxVECOPx-P0HjVY.roa
File: JbKoCPRDaVNJoxVECOPx-P0HjVY.roa (raw, json)
Hash identifier: itC4BrCVxmTvUA8oY/pShpiK6eQ7j03nBLzkVlQoOP8=
Subject key identifier: 25:B2:A8:08:F4:43:69:53:49:A3:15:44:08:E3:F1:F8:FD:07:8D:56
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019C7AA210859FB8FCB19D0DDB5B559007E8
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/JbKoCPRDaVNJoxVECOPx-P0HjVY.roa
Signing time: Fri 20 Feb 2026 10:39:27 +0000
ROA not before: Fri 20 Feb 2026 10:39:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 23470
IP address blocks: 2a0e:5a80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 23 Feb 2026 12:52:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:7a:a2:10:85:9f:b8:fc:b1:9d:0d:db:5b:55:90:07:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Feb 20 10:39:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=25b2a808f443695349a3154408e3f1f8fd078d56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:aa:b2:95:5b:24:a4:73:7d:9e:e2:ac:ad:13:
d2:f5:f1:4c:2e:ba:93:b6:4c:03:a0:5a:91:27:1f:
04:18:8c:8c:f6:9e:96:f0:e4:8e:56:a0:ff:cc:53:
c7:d8:ac:43:06:71:61:be:cb:c5:0d:ca:43:b9:cf:
b3:ee:c0:70:ee:3e:9d:c3:85:5a:ce:45:83:68:df:
0a:21:d3:29:76:17:ca:a0:9f:ed:59:d5:7d:50:81:
97:d0:eb:c3:e0:58:a5:74:d2:96:fe:41:5e:d6:44:
df:2f:92:48:9f:5e:83:68:55:35:38:4e:3e:e8:73:
d7:30:6a:a4:02:4d:14:c2:1e:a4:f6:74:0c:f8:19:
25:c4:11:69:aa:7a:f4:04:91:2b:64:18:0a:a1:cc:
83:41:e2:a9:e3:51:eb:9a:59:b3:56:78:de:ab:eb:
69:29:15:c7:56:cd:cd:e0:4c:9b:1b:cf:04:57:0f:
a3:cf:99:87:71:0e:58:89:fa:25:ec:c7:34:7d:fa:
23:5d:4b:32:f4:5b:d9:cc:83:dc:3c:9c:54:f5:93:
37:d3:03:a0:c4:1e:df:93:c4:49:d5:8d:70:c1:0e:
0a:90:f5:68:fc:e8:90:43:32:23:b1:98:a9:51:46:
91:2e:b7:3c:75:c7:0b:5d:5f:b4:b9:18:d0:88:58:
9b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:B2:A8:08:F4:43:69:53:49:A3:15:44:08:E3:F1:F8:FD:07:8D:56
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/JbKoCPRDaVNJoxVECOPx-P0HjVY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:5a80::/29
Signature Algorithm: sha256WithRSAEncryption
b9:16:d5:d8:0f:4d:93:fb:88:00:fe:98:90:a2:88:bb:63:53:
b7:cb:0c:7f:a4:88:c5:ef:7d:e2:12:18:1d:1a:3f:a7:9a:94:
2e:0e:35:96:70:e5:97:02:ff:3f:06:53:f2:2c:65:09:66:75:
8c:07:1e:6a:28:70:66:57:ce:e3:e3:c5:58:e8:c8:be:1d:d6:
ea:d6:b0:51:68:69:73:2e:34:43:5f:6c:61:15:74:13:78:9b:
e8:fb:e1:59:6f:26:14:db:c8:b0:ca:d6:07:bb:5b:75:e2:f3:
43:ad:96:78:a3:e8:6a:f6:79:74:8a:87:1d:d0:82:da:bb:59:
51:50:14:94:fa:d2:c0:30:67:76:c9:06:46:55:10:9f:2f:d2:
27:79:ba:87:e0:a2:38:da:c6:14:8f:87:a6:f3:82:6e:e2:e0:
1e:70:31:3d:72:b9:04:89:5b:3b:5f:60:fd:9f:da:97:b9:5c:
24:17:b1:e5:3c:c1:51:c6:a8:c4:91:85:9f:f6:7e:d8:5b:6b:
85:d1:51:46:66:ee:fc:b2:fd:e9:a8:75:d0:85:16:46:98:16:
ac:4a:37:fc:58:33:25:96:37:3d:5e:01:35:5c:32:c3:9c:ee:
ca:9a:74:4c:c2:ba:81:3b:72:20:4d:43:e7:0b:13:fa:e8:b5:
60:5f:88:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 22 21:42:37 2026 by rpki-client