Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/jqbFij7pY9jR5_tvg6aGlSqXWvY.roa
File: jqbFij7pY9jR5_tvg6aGlSqXWvY.roa (raw, json)
Hash identifier: 9lSkTQcSfW9ZV/1oCol4mnY2Fh21FXn6q4rov7K8Pww=
Subject key identifier: 8E:A6:C5:8A:3E:E9:63:D8:D1:E7:FB:6F:83:A6:86:95:2A:97:5A:F6
Certificate issuer: /CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541
Certificate serial: 019DD8B84999E908FE0FFC4C74BA98A25270
Authority key identifier: 9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/jqbFij7pY9jR5_tvg6aGlSqXWvY.roa
Signing time: Wed 29 Apr 2026 10:10:49 +0000
ROA not before: Wed 29 Apr 2026 10:10:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215152
IP address blocks: 2a11:240::/29 maxlen: 29
2a11:22c0::/29 maxlen: 29
2a11:99c0::/29 maxlen: 29
2a11:a400::/29 maxlen: 29
2a11:a700::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 May 2026 18:48:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d8:b8:49:99:e9:08:fe:0f:fc:4c:74:ba:98:a2:52:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541
Validity
Not Before: Apr 29 10:10:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8ea6c58a3ee963d8d1e7fb6f83a686952a975af6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:90:e5:b2:65:b4:74:a2:54:a6:9e:3d:6d:5f:
7c:65:44:d8:91:27:b3:11:c7:3a:8a:7a:f0:2b:a6:
5a:b5:54:95:f4:55:71:ec:9e:08:6e:32:b5:f1:88:
71:05:eb:f7:ea:93:39:6a:41:1a:fa:be:fb:ac:51:
8b:33:ec:00:73:75:76:df:2f:af:f1:f1:64:2f:2c:
8d:52:04:f9:dc:8b:75:09:e1:43:c8:a0:f8:61:91:
ac:52:f9:bd:94:d6:ba:b4:95:cc:a2:a8:f4:33:84:
6d:58:f6:fb:ae:b6:48:2d:8e:b1:51:16:b4:e1:b5:
a9:09:0d:71:bd:05:73:12:f0:5f:c4:7f:d1:b1:ee:
17:97:0c:6a:3b:a6:de:62:29:15:c0:c2:5b:3a:f6:
b6:fc:5b:83:ce:4a:9f:43:12:6b:c7:41:11:db:fa:
9a:1c:a2:11:40:63:97:98:f5:51:37:ea:f2:ea:4a:
61:1d:76:7e:52:6f:78:88:7c:b1:3e:90:f5:71:57:
3e:de:35:5a:cf:f4:47:4a:b8:9e:87:6c:5b:c1:de:
0c:90:97:f3:d4:c1:9c:df:b1:d2:5a:08:4b:db:73:
98:25:8f:a8:4d:cd:24:12:f0:64:b5:d5:d7:48:a3:
4b:32:6e:b7:90:da:4f:c1:9f:e2:55:45:f0:d1:63:
38:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:A6:C5:8A:3E:E9:63:D8:D1:E7:FB:6F:83:A6:86:95:2A:97:5A:F6
X509v3 Authority Key Identifier:
keyid:9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/jqbFij7pY9jR5_tvg6aGlSqXWvY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:240::/29
2a11:22c0::/29
2a11:99c0::/29
2a11:a400::/29
2a11:a700::/29
Signature Algorithm: sha256WithRSAEncryption
36:8c:8e:07:ed:02:bc:95:79:3b:94:47:70:54:78:6c:43:2c:
3e:2a:5a:a4:cb:bd:8e:1f:56:ac:82:42:38:88:25:8f:96:a8:
ef:6c:41:f0:0f:f0:d2:94:cd:2e:df:d0:03:3f:95:fa:24:60:
cb:6c:e9:e1:96:4c:18:48:c2:ef:a4:1e:a4:86:36:38:1d:f3:
aa:9b:c9:57:4e:94:74:c3:02:8c:2e:be:64:84:92:fa:80:16:
75:7d:1f:9f:d4:a8:37:fc:5e:4d:8d:c7:97:08:b8:92:a8:4c:
03:6e:a4:52:60:8d:18:71:4f:05:8f:7c:4f:7c:a1:d2:67:42:
25:9f:71:1b:74:fe:4b:ec:3b:a4:52:90:ec:7c:ac:25:55:f2:
74:e1:df:e3:91:49:b9:4e:0b:c6:ba:1e:44:1a:9e:de:2d:68:
92:11:78:09:9f:4b:ad:b9:96:47:36:27:f7:73:a3:f8:08:43:
3d:2b:45:96:7c:25:42:db:3e:f4:c0:be:31:04:43:19:47:19:
0f:4a:0e:e8:79:25:5e:11:12:ae:ea:f1:66:8c:27:d1:44:bd:
dc:e0:58:5f:61:69:57:2e:a7:f1:a5:55:0b:cd:45:8d:38:f9:
4e:27:99:0a:ed:69:bf:bb:dd:85:f0:9d:3a:59:db:6f:55:f4:
8b:14:a6:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 01:14:17 2026 by rpki-client