Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/77d760-d301-4020-a286-856cbf94edff/1/_j_QYhrm9EtHVz55rfuJrPeU9ac.roa
File: _j_QYhrm9EtHVz55rfuJrPeU9ac.roa (raw, json)
Hash identifier: NUaMPNcwY1qDOrksQXA+36Saq/+PThu5xZNDt3TsgDo=
Subject key identifier: FE:3F:D0:62:1A:E6:F4:4B:47:57:3E:79:AD:FB:89:AC:F7:94:F5:A7
Certificate issuer: /CN=f6559a58e2c4f14a1fb6344319080af3cc56446b
Certificate serial: 019E373453DCBBD90052CBBE717A5D594807
Authority key identifier: F6:55:9A:58:E2:C4:F1:4A:1F:B6:34:43:19:08:0A:F3:CC:56:44:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9lWaWOLE8UoftjRDGQgK88xWRGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/77d760-d301-4020-a286-856cbf94edff/1/_j_QYhrm9EtHVz55rfuJrPeU9ac.roa
Signing time: Sun 17 May 2026 18:30:36 +0000
ROA not before: Sun 17 May 2026 18:30:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207135
IP address blocks: 2001:678:1284::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/77d760-d301-4020-a286-856cbf94edff/1/9lWaWOLE8UoftjRDGQgK88xWRGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/77d760-d301-4020-a286-856cbf94edff/1/9lWaWOLE8UoftjRDGQgK88xWRGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/9lWaWOLE8UoftjRDGQgK88xWRGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Jun 2026 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:37:34:53:dc:bb:d9:00:52:cb:be:71:7a:5d:59:48:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6559a58e2c4f14a1fb6344319080af3cc56446b
Validity
Not Before: May 17 18:30:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fe3fd0621ae6f44b47573e79adfb89acf794f5a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:80:14:62:8b:d4:27:d9:67:eb:9e:8e:a2:5b:
1c:17:39:e0:ef:31:cb:e8:e6:14:f3:d3:bb:c7:51:
34:a6:10:ec:1d:d0:7b:a1:80:f6:69:43:c2:a8:a0:
cf:92:92:37:35:f5:70:3b:25:c0:0f:1b:4c:82:0b:
b9:dd:9c:18:bd:20:90:4e:e9:9f:83:76:2e:e5:48:
de:cd:b2:ff:50:1e:f8:b8:81:b3:a9:8a:2c:43:5a:
96:5b:bb:34:05:bf:14:5f:72:bf:a3:e1:cd:92:6b:
b0:cb:76:67:9b:3b:a0:b0:e7:a0:61:b1:70:03:dd:
8d:83:37:d7:06:b5:e3:d9:73:6a:dd:f0:8a:a8:5a:
80:cd:15:e7:34:46:41:85:6e:d2:af:87:db:56:fc:
e3:a9:01:0f:2f:21:a2:48:c8:7b:63:89:07:b0:63:
6e:83:f9:8e:1c:65:05:7b:0d:d0:2b:ec:2f:4f:17:
10:e7:8c:94:55:a1:bf:bc:16:a7:36:b8:e3:a8:83:
f8:86:13:bb:09:d1:f2:35:16:87:06:d2:91:bb:f0:
68:e2:59:3c:16:7e:fe:27:49:f3:c8:55:8c:ce:a1:
64:6c:76:d4:3b:da:c5:55:c8:25:5f:48:3d:2e:f7:
2d:2b:57:88:05:ba:00:c8:e5:ef:1b:5a:4c:92:cb:
d9:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:3F:D0:62:1A:E6:F4:4B:47:57:3E:79:AD:FB:89:AC:F7:94:F5:A7
X509v3 Authority Key Identifier:
keyid:F6:55:9A:58:E2:C4:F1:4A:1F:B6:34:43:19:08:0A:F3:CC:56:44:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lWaWOLE8UoftjRDGQgK88xWRGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/77d760-d301-4020-a286-856cbf94edff/1/_j_QYhrm9EtHVz55rfuJrPeU9ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/77d760-d301-4020-a286-856cbf94edff/1/9lWaWOLE8UoftjRDGQgK88xWRGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:1284::/48
Signature Algorithm: sha256WithRSAEncryption
53:08:93:11:d5:7a:47:c2:cb:10:d6:59:1a:a8:bb:91:9e:e5:
8a:1c:44:c4:2b:e7:e4:77:95:04:1c:fd:17:ba:38:5d:a7:5b:
bd:58:67:4c:21:74:58:7b:c7:4c:ae:d6:77:a6:a7:b4:c0:79:
db:d7:6f:fb:60:53:8e:f3:d2:0a:ed:c2:70:56:a2:43:c0:df:
65:11:a7:62:c4:1d:d2:bf:9c:49:64:b3:42:3c:e5:d2:22:a2:
5e:d7:72:15:d4:89:66:a4:3b:6e:f9:5e:ca:80:fd:ae:f4:ca:
af:d8:82:5e:f2:01:35:72:c9:93:e8:2f:3b:8e:9e:7a:d4:d2:
37:27:ee:f2:7f:e8:c7:25:f0:d5:6a:fa:21:35:28:58:67:13:
fa:2f:e9:c9:c6:63:76:e4:93:93:56:c0:3f:85:01:09:26:f7:
76:85:76:a3:db:aa:f2:46:f7:d8:e9:7f:b7:68:20:63:6e:37:
95:b8:f2:e6:d4:a1:4f:1c:38:ee:ef:4c:dc:c1:f6:73:f6:75:
58:8d:b4:8d:2c:20:cf:e8:44:b4:29:1a:31:6a:04:c9:64:29:
e3:5c:59:b2:81:cc:40:a1:2f:09:52:9f:7c:ba:7a:76:2b:15:
a9:55:aa:2a:72:44:18:0e:db:46:96:b9:da:c9:90:3b:af:51:
3f:60:91:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 05:21:32 2026 by rpki-client