Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/JDndh6j465NHPFqcUIAxmDMl1_4.roa
File: JDndh6j465NHPFqcUIAxmDMl1_4.roa (raw, json)
Hash identifier: b/z9kTCR5Pv6OwHYysLdjRfGopTcn7nyBFVh0WDow0o=
Subject key identifier: 24:39:DD:87:A8:F8:EB:93:47:3C:5A:9C:50:80:31:98:33:25:D7:FE
Certificate issuer: /CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541
Certificate serial: 019DD8B67537BC48721E0C4FE2950F7D0140
Authority key identifier: 9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/JDndh6j465NHPFqcUIAxmDMl1_4.roa
Signing time: Wed 29 Apr 2026 10:08:49 +0000
ROA not before: Wed 29 Apr 2026 10:08:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60262
IP address blocks: 2a11:d3c0::/29 maxlen: 29
2a11:f3c0::/29 maxlen: 29
2a12:880::/29 maxlen: 29
2a12:5f80::/29 maxlen: 29
2a12:9b80::/29 maxlen: 29
2a12:bd00::/29 maxlen: 29
2a12:dc80::/29 maxlen: 29
2a12:ee00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 13:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d8:b6:75:37:bc:48:72:1e:0c:4f:e2:95:0f:7d:01:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541
Validity
Not Before: Apr 29 10:08:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2439dd87a8f8eb93473c5a9c508031983325d7fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:79:b9:69:bd:12:f9:7c:9e:d3:ce:4e:be:e4:
43:61:4b:07:6c:3b:e1:ed:e6:9d:a1:df:9d:9f:57:
3d:7d:14:39:14:ef:0f:2d:4b:ed:c7:4a:18:74:7d:
77:c1:5e:3b:af:ca:61:c1:76:f2:97:52:3a:a7:67:
fb:ae:1c:f6:1f:69:0f:41:e1:06:ae:bc:ff:26:79:
06:ed:3f:ff:c7:2c:8c:ea:2d:10:91:72:5a:74:4d:
d0:a0:99:c4:4c:18:01:c5:c0:5f:9a:cc:58:ee:d1:
9a:ec:62:87:a6:0c:51:b5:f5:4f:09:30:a1:2d:d5:
1b:f9:63:2b:a1:ff:19:c2:22:9c:31:79:0a:11:64:
9e:05:7a:3e:48:43:d7:90:14:1e:bd:e3:20:07:a7:
ff:89:07:15:65:6a:b3:a3:15:8c:2f:63:d7:21:31:
0d:a5:ce:a4:c8:bc:62:be:e3:74:5b:e8:a7:71:c3:
cf:f6:5c:dd:6e:33:53:96:ef:53:8a:b1:b3:2b:70:
e6:62:1d:ab:83:0b:6f:5d:ea:c0:e3:fe:5c:bd:f1:
42:f7:89:6b:6e:7d:30:8e:14:b0:54:51:53:cd:db:
66:6f:2e:6c:0c:8b:6e:16:9a:a3:1f:f1:fd:64:69:
e5:90:8b:bc:d5:92:4a:44:07:8c:53:08:aa:62:58:
db:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:39:DD:87:A8:F8:EB:93:47:3C:5A:9C:50:80:31:98:33:25:D7:FE
X509v3 Authority Key Identifier:
keyid:9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/JDndh6j465NHPFqcUIAxmDMl1_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:d3c0::/29
2a11:f3c0::/29
2a12:880::/29
2a12:5f80::/29
2a12:9b80::/29
2a12:bd00::/29
2a12:dc80::/29
2a12:ee00::/29
Signature Algorithm: sha256WithRSAEncryption
13:85:0f:08:9f:bf:da:97:03:02:c2:9c:d1:1e:3a:b7:c6:c6:
a2:da:e4:00:c6:1c:1b:95:7e:83:35:14:cf:91:68:89:0e:53:
82:98:8f:41:b9:67:ce:0f:e2:ff:04:13:e5:27:5c:b1:f0:19:
b8:9c:90:9d:fd:54:40:03:a6:54:ce:a5:5d:3a:ff:bc:2d:62:
f9:de:b0:45:dd:d4:dd:dd:74:60:03:0e:25:c1:b6:8a:14:41:
59:82:7e:95:f9:55:79:37:15:4d:0d:4f:69:4c:e6:33:49:7a:
83:01:0a:9a:97:d4:41:bc:56:3f:df:9e:8e:9d:62:2a:6a:f9:
57:af:0e:5d:12:62:71:9e:b3:3d:20:9b:3b:93:10:de:1b:7f:
29:9f:dd:37:4b:1c:e6:27:c7:d0:87:94:af:b0:f6:e6:b2:e4:
94:ff:87:46:5a:65:fb:1a:f8:62:4a:bf:3f:2b:87:b5:04:85:
7f:f2:57:2d:0e:fa:c9:6f:a7:4b:bc:ae:f7:22:82:7a:59:45:
b7:1c:09:fd:39:5b:a5:d8:45:d4:aa:28:cd:1e:ee:52:a6:72:
3b:30:30:e6:3b:fc:f8:d7:72:30:2a:e3:68:41:70:90:43:2c:
cb:12:71:84:28:6f:3c:60:bb:96:0b:8b:fd:ad:20:b0:5f:39:
a6:7a:bc:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 19:31:49 2026 by rpki-client