Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/JjobvDHzB_RdGlQHuakDY7g6qUc.roa
File: JjobvDHzB_RdGlQHuakDY7g6qUc.roa (raw, json)
Hash identifier: lMc17XsqpF3q+RuSqmQMroyA9fOiD+xrXB77wQY0+oY=
Subject key identifier: 26:3A:1B:BC:31:F3:07:F4:5D:1A:54:07:B9:A9:03:63:B8:3A:A9:47
Certificate issuer: /CN=137e5707444a16c68e1a1c52ac4909d0bdca62ae
Certificate serial: 019D894BCF47B76AEC6DB632523E029C34F0
Authority key identifier: 13:7E:57:07:44:4A:16:C6:8E:1A:1C:52:AC:49:09:D0:BD:CA:62:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E35XB0RKFsaOGhxSrEkJ0L3KYq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/JjobvDHzB_RdGlQHuakDY7g6qUc.roa
Signing time: Tue 14 Apr 2026 00:02:20 +0000
ROA not before: Tue 14 Apr 2026 00:02:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200825
IP address blocks: 2a12:cb41:400::/39 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/E35XB0RKFsaOGhxSrEkJ0L3KYq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/E35XB0RKFsaOGhxSrEkJ0L3KYq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/E35XB0RKFsaOGhxSrEkJ0L3KYq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 15 Apr 2026 22:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:89:4b:cf:47:b7:6a:ec:6d:b6:32:52:3e:02:9c:34:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=137e5707444a16c68e1a1c52ac4909d0bdca62ae
Validity
Not Before: Apr 14 00:02:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=263a1bbc31f307f45d1a5407b9a90363b83aa947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ea:ef:19:5f:da:c4:11:ba:e3:4a:a9:86:da:
af:45:fc:9e:65:ad:ab:e2:57:40:f9:f3:b7:c4:f6:
f8:ca:e1:72:9f:c7:b1:db:ff:e5:53:ec:8c:45:d3:
fc:ce:60:6c:8d:9f:6f:66:4f:6a:97:8c:30:76:11:
97:04:34:14:71:17:e2:8b:f7:e7:96:89:1d:f5:f2:
fd:97:75:a3:4a:92:bb:dd:76:c4:39:41:77:0f:46:
3a:9e:ed:09:82:11:04:39:89:9f:7d:23:76:97:5a:
3d:ca:86:6e:c6:63:00:6a:ed:5c:07:42:f3:40:73:
aa:2f:22:61:b6:69:17:a3:e4:d6:08:63:ca:78:b8:
76:e2:07:d4:1f:dc:0e:7b:5b:3e:68:cb:7d:bf:80:
5f:66:39:a3:3a:54:df:c7:8d:c9:c7:36:5c:d4:c8:
35:75:0a:f7:43:25:4c:4e:a0:e8:81:2d:b3:b9:95:
15:bc:ef:ae:59:44:30:7d:eb:c4:5f:a7:8c:05:22:
c1:26:21:27:66:ca:65:e7:37:36:df:4d:eb:13:d1:
b9:c6:b9:c8:39:45:3a:52:0c:94:d2:f6:24:0b:3b:
0d:d7:cf:d7:84:16:41:08:06:f0:70:85:31:b3:cc:
6e:38:88:b9:76:cb:19:f8:0d:0b:df:f1:1a:3f:5d:
01:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:3A:1B:BC:31:F3:07:F4:5D:1A:54:07:B9:A9:03:63:B8:3A:A9:47
X509v3 Authority Key Identifier:
keyid:13:7E:57:07:44:4A:16:C6:8E:1A:1C:52:AC:49:09:D0:BD:CA:62:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E35XB0RKFsaOGhxSrEkJ0L3KYq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/JjobvDHzB_RdGlQHuakDY7g6qUc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/E35XB0RKFsaOGhxSrEkJ0L3KYq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:cb41:400::/39
Signature Algorithm: sha256WithRSAEncryption
c9:85:a7:7d:6f:40:e5:c9:d8:d7:f5:54:73:b2:e3:86:e1:55:
c5:af:5c:cc:73:ea:92:6b:03:77:7a:99:7b:26:e7:77:48:2e:
7b:c7:39:2c:b2:a0:aa:68:69:76:3f:d4:64:19:d0:be:b0:27:
48:26:dc:9c:ed:5a:b6:68:17:79:22:8b:b3:67:70:a3:68:29:
70:b5:c9:6a:bf:7a:de:41:d8:e0:71:f8:fb:b2:10:97:13:93:
a5:fe:8c:95:77:7d:a3:64:c6:f7:e5:ec:18:ac:75:db:e0:99:
b4:c8:4e:9f:07:5d:bb:55:72:b7:bf:3a:ac:73:a9:21:8b:0d:
eb:e4:13:17:dc:8f:a6:06:4c:ba:12:e2:2d:9f:56:3e:15:22:
30:36:cb:a1:f4:57:19:49:ff:25:ed:ce:b2:5e:ac:cc:dc:c5:
c0:fb:fe:22:9e:52:fa:74:9b:8f:47:4f:c9:82:65:87:b1:e9:
e2:5b:44:fc:ac:db:38:65:37:c6:1b:22:15:64:53:41:50:2c:
af:46:38:db:c3:2e:b7:26:40:b5:4f:a0:4c:9f:7a:89:1b:75:
b2:bd:fa:b3:12:6a:80:ef:15:61:7d:9b:a2:0c:f7:00:91:dc:
5c:0c:6b:79:1f:51:a4:47:08:5b:07:87:bb:8a:f1:cf:bf:9c:
b7:e0:a1:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 15 05:04:55 2026 by rpki-client