Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/JlEEj_IgdbR4G0r8BEZXcqrRyB4.roa
File: JlEEj_IgdbR4G0r8BEZXcqrRyB4.roa (raw, json)
Hash identifier: kj+piKKyYaFc0y2qRTOBBD9Z8MDpAVzUtGQ1xOYtCYg=
Subject key identifier: 26:51:04:8F:F2:20:75:B4:78:1B:4A:FC:04:46:57:72:AA:D1:C8:1E
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019E4185A1EEAFD01E195EB79C68AC4A029E
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/JlEEj_IgdbR4G0r8BEZXcqrRyB4.roa
Signing time: Tue 19 May 2026 18:35:37 +0000
ROA not before: Tue 19 May 2026 18:35:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5065
IP address blocks: 2a12:f540::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 01 Jun 2026 04:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:41:85:a1:ee:af:d0:1e:19:5e:b7:9c:68:ac:4a:02:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: May 19 18:35:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2651048ff22075b4781b4afc04465772aad1c81e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:2c:03:dd:31:be:db:d2:12:c9:23:bf:2c:1e:
01:85:a1:99:9b:6f:47:73:b4:27:c8:bc:31:56:a1:
ae:6c:a9:59:ce:f8:0b:c8:82:87:63:0c:38:f9:0b:
46:68:03:d7:37:a0:85:06:67:5b:79:7a:a6:03:73:
ee:ab:43:2d:a5:84:dc:b3:1e:fd:86:b1:2e:a4:35:
60:b0:64:7e:2c:6b:32:50:89:8c:4b:6a:27:b3:a5:
3d:0d:ff:38:63:41:94:d6:9e:6b:58:b3:9d:eb:17:
62:b3:d7:31:9b:47:55:d1:ee:97:4a:b2:1b:45:a8:
db:e9:76:ef:e5:72:59:e3:32:ba:1e:c9:06:f3:4e:
80:df:a8:3b:b0:35:cd:aa:99:06:da:32:d0:75:13:
ad:2b:b0:b9:35:e8:cb:bc:5f:9b:04:2a:e0:f1:b4:
87:06:98:f5:ea:17:29:aa:38:fe:32:e6:c2:df:22:
7e:a3:c9:1e:65:70:81:6b:0b:3f:29:b4:d9:74:f1:
2d:fd:69:10:95:43:75:3a:33:e4:9c:b9:20:9e:e4:
a9:7b:b1:a9:d9:e7:b9:ae:25:ea:bb:bf:f8:4c:13:
96:46:20:cf:59:c6:55:2d:e6:02:90:2a:30:b0:34:
6a:2e:17:a3:49:93:aa:06:03:5a:b3:c3:c1:97:0b:
46:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:51:04:8F:F2:20:75:B4:78:1B:4A:FC:04:46:57:72:AA:D1:C8:1E
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/JlEEj_IgdbR4G0r8BEZXcqrRyB4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:f540::/29
Signature Algorithm: sha256WithRSAEncryption
57:e7:73:22:5c:79:28:06:4c:ca:8a:60:c9:9c:ca:c9:73:7f:
f3:78:7d:f5:d1:50:64:a7:c3:3f:0d:0f:b8:74:4d:ff:f2:96:
48:cf:0b:fe:5a:cc:60:60:a6:10:81:21:06:ed:38:26:8c:b2:
35:20:48:25:86:a4:5f:82:c2:25:73:ff:23:a2:d7:03:cc:6e:
e0:67:5d:f7:35:0b:05:fe:ad:65:d5:eb:1a:91:b7:82:d5:e3:
21:97:7d:f5:ad:b0:ff:13:22:26:bf:5e:bd:57:31:2f:99:25:
43:d3:4a:7c:b9:89:fc:a5:e4:8a:9a:fa:85:4b:94:cf:aa:54:
48:f5:8c:14:b7:bf:ca:ce:3d:6e:47:4e:d5:99:ba:b8:11:8d:
cb:74:70:30:87:1b:5c:67:b5:5a:2e:c5:99:25:4a:9c:fb:a3:
5c:2e:d7:fc:4f:7c:da:df:01:89:70:bc:92:3e:5f:a3:ab:60:
3b:1e:14:f2:63:99:dd:fa:08:81:b7:6e:a1:ea:00:a5:66:1d:
6f:07:4d:7e:d1:58:2f:cb:a8:36:19:f7:16:e9:30:26:03:3f:
91:d3:c4:13:ba:94:86:2f:7e:4c:86:f1:b0:a1:e9:5e:f6:f8:
42:c1:c3:b0:b7:39:04:61:0b:38:b5:a4:48:27:fb:5d:59:c7:
29:01:32:08
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZ5BhaHur9AeGV63nGisSgKeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjYwNTE5MTgzNTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNjUxMDQ4ZmYyMjA3NWI0NzgxYjRhZmMwNDQ2NTc3MmFhZDFjODFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlCwD3TG+29ISySO/LB4BhaGZm29H
c7QnyLwxVqGubKlZzvgLyIKHYww4+QtGaAPXN6CFBmdbeXqmA3Puq0MtpYTcsx79
hrEupDVgsGR+LGsyUImMS2ons6U9Df84Y0GU1p5rWLOd6xdis9cxm0dV0e6XSrIb
Rajb6Xbv5XJZ4zK6HskG806A36g7sDXNqpkG2jLQdROtK7C5NejLvF+bBCrg8bSH
Bpj16hcpqjj+MubC3yJ+o8keZXCBaws/KbTZdPEt/WkQlUN1OjPknLkgnuSpe7Gp
2ee5riXqu7/4TBOWRiDPWcZVLeYCkCowsDRqLhejSZOqBgNas8PBlwtGuQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFCZRBI/yIHW0eBtK/ARGV3Kq0cgeMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvSmxFRWpfSWdkYlI0RzByOEJFWlhjcXJSeUI0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhL1QDAN
BgkqhkiG9w0BAQsFAAOCAQEAV+dzIlx5KAZMyopgyZzKyXN/83h99dFQZKfDPw0P
uHRN//KWSM8L/lrMYGCmEIEhBu04JoyyNSBIJYakX4LCJXP/I6LXA8xu4Gdd9zUL
Bf6tZdXrGpG3gtXjIZd99a2w/xMiJr9evVcxL5klQ9NKfLmJ/KXkipr6hUuUz6pU
SPWMFLe/ys49bkdO1Zm6uBGNy3RwMIcbXGe1Wi7FmSVKnPujXC7X/E982t8BiXC8
kj5fo6tgOx4U8mOZ3foIgbduoeoApWYdbwdNftFYL8uoNhn3FukwJgM/kdPEE7qU
hi9+TIbxsKHpXvb4QsHDsLc5BGELOLWkSCf7XVnHKQEyCA==
-----END CERTIFICATE-----
Generated at Sun May 31 08:59:13 2026 by rpki-client