Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/jxAGCxrwlE5EgLA0btOJyzNEpY8.roa
File: jxAGCxrwlE5EgLA0btOJyzNEpY8.roa (raw, json)
Hash identifier: 3iJ62ep1M0jqBaOO+Ubf1RPdkkXY7NA+pqYnAW6bkEE=
Subject key identifier: 8F:10:06:0B:1A:F0:94:4E:44:80:B0:34:6E:D3:89:CB:33:44:A5:8F
Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial: 01A0911F859F0E1BDBA0F87A85FD3CB1E2F3
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/jxAGCxrwlE5EgLA0btOJyzNEpY8.roa
Signing time: Fri 11 Sep 2026 15:39:17 +0000
ROA not before: Fri 11 Sep 2026 15:39:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 1004
IP address blocks: 2a10:eac0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 08:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:91:1f:85:9f:0e:1b:db:a0:f8:7a:85:fd:3c:b1:e2:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Validity
Not Before: Sep 11 15:39:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8f10060b1af0944e4480b0346ed389cb3344a58f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:0a:2a:73:ef:a4:13:be:17:51:61:d0:99:d0:
f5:aa:c4:0e:32:30:c7:ba:d9:5e:1e:31:35:0d:bc:
36:2e:fb:e4:4a:ec:a7:51:1d:0f:c8:5a:27:29:70:
c2:b6:ce:de:b7:cc:b5:3d:4e:76:a4:60:7f:b8:bc:
74:c2:ed:73:20:03:33:ad:3d:5a:ad:de:9b:47:20:
8b:d4:3a:cc:da:f8:08:98:3e:db:e3:11:d2:82:ff:
eb:c1:42:76:10:8a:ef:e4:4a:62:2c:a4:ae:35:51:
80:a3:72:60:ec:f6:46:f8:5a:9c:38:99:9d:f2:bd:
00:2e:18:6a:4d:46:fc:05:1a:6b:dc:c5:37:2b:3b:
fe:5b:1b:80:a7:90:df:7e:f6:b7:99:c0:37:a8:b5:
11:97:4b:2f:3a:10:1f:50:92:a2:7b:57:19:65:83:
f3:42:87:eb:af:f8:f9:dc:5b:a6:bc:24:05:96:bb:
7c:f9:6e:5f:d4:02:53:77:9f:7f:d9:78:d7:aa:4f:
cd:38:5d:d9:92:15:dd:e2:55:30:b4:8a:16:a9:87:
6d:16:ba:8f:a6:9f:25:d1:32:ff:e7:f6:a5:64:1e:
73:d7:15:99:6f:49:8d:81:46:f2:00:67:44:78:2d:
52:3e:d0:9b:e9:ca:a2:5c:3f:41:07:9d:3b:17:8d:
f4:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:10:06:0B:1A:F0:94:4E:44:80:B0:34:6E:D3:89:CB:33:44:A5:8F
X509v3 Authority Key Identifier:
keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/jxAGCxrwlE5EgLA0btOJyzNEpY8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:eac0::/29
Signature Algorithm: sha256WithRSAEncryption
4d:63:26:51:e0:e6:14:f9:c0:3f:52:d2:35:f6:86:72:60:a2:
a8:e6:33:0d:28:d0:7b:83:16:d1:73:f3:12:df:65:a1:0a:74:
83:ef:d4:e6:61:09:69:80:0b:9d:98:2c:c3:b4:f8:05:65:71:
a7:68:12:a6:a1:f8:66:8c:c4:43:7b:ac:48:ad:8d:40:ba:f9:
73:84:c3:75:d4:27:a0:93:b5:94:a5:3b:57:48:d3:e3:b2:f4:
19:5c:f1:ae:68:ef:d1:7c:78:1e:69:a3:76:68:22:c3:6e:a1:
ad:4b:6e:32:66:cd:c4:b0:fa:2a:72:6e:dc:43:11:9e:24:8f:
7d:15:4f:4c:04:30:6d:07:f6:a0:87:90:63:18:68:d4:2e:ee:
f2:2b:50:bc:3d:a0:1f:15:21:5d:22:76:22:18:89:ac:18:a3:
3d:5d:fa:ff:49:6b:bb:56:ec:79:fd:c7:99:cb:49:d0:88:66:
35:ee:5e:9c:5d:2a:ab:cf:7d:9f:22:0b:ff:be:d2:6a:90:03:
0d:b9:31:56:85:2f:5d:6d:a1:9c:66:22:5a:da:74:cc:9c:30:
22:59:cd:7d:0d:2f:07:80:0b:9c:e3:32:37:e6:c5:1d:55:86:
34:6e:9d:0f:6f:3f:ba:c6:87:2c:d4:98:c0:32:ff:71:fc:63:
d1:22:b8:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 19:09:50 2026 by rpki-client