Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/ajFaZwTIdu3W6qUXInD2ZebB8Ko.roa
File: ajFaZwTIdu3W6qUXInD2ZebB8Ko.roa (raw, json)
Hash identifier: WWyrqyz1eCJbRVCKQIKHhhIgeU4jmP2rAh23Pg0mu/Q=
Subject key identifier: 6A:31:5A:67:04:C8:76:ED:D6:EA:A5:17:22:70:F6:65:E6:C1:F0:AA
Certificate issuer: /CN=8d9c6e843ffe7f34b95d3a0cd72dd4abb69ba425
Certificate serial: 019F2368904D27EC61BA8A5BFC6BC5078740
Authority key identifier: 8D:9C:6E:84:3F:FE:7F:34:B9:5D:3A:0C:D7:2D:D4:AB:B6:9B:A4:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jZxuhD_-fzS5XToM1y3Uq7abpCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/ajFaZwTIdu3W6qUXInD2ZebB8Ko.roa
Signing time: Thu 02 Jul 2026 15:18:02 +0000
ROA not before: Thu 02 Jul 2026 15:18:02 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202940
IP address blocks: 2a02:ce8:556::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/jZxuhD_-fzS5XToM1y3Uq7abpCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/jZxuhD_-fzS5XToM1y3Uq7abpCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/jZxuhD_-fzS5XToM1y3Uq7abpCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:90:4d:27:ec:61:ba:8a:5b:fc:6b:c5:07:87:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d9c6e843ffe7f34b95d3a0cd72dd4abb69ba425
Validity
Not Before: Jul 2 15:18:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a315a6704c876edd6eaa5172270f665e6c1f0aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:77:0d:29:67:60:00:b8:02:62:39:ad:0d:b4:
3a:ae:bd:51:d2:76:bc:73:76:76:f0:09:04:10:4f:
98:3f:ea:be:3b:28:9c:1f:0d:38:ed:cd:19:df:03:
a2:f4:dc:01:56:6b:37:04:a3:de:de:05:55:2a:f3:
c7:19:28:b4:90:05:be:9c:75:ae:8f:d0:b0:d5:d2:
da:c8:56:26:f4:41:73:1d:66:21:a1:19:c2:04:fc:
d3:0a:8d:75:3d:e4:e2:7a:93:d7:67:55:26:e8:eb:
e3:18:69:75:bb:2e:79:3a:b2:36:6a:d9:52:56:7a:
30:ca:28:20:9e:ee:20:5d:e8:5d:12:40:dc:14:00:
26:d2:85:cc:0c:6c:4f:a4:ad:47:7f:d5:af:2b:61:
45:3f:bf:e1:4c:bb:da:1f:9f:52:b8:fa:ab:f7:de:
4f:9f:bc:02:ce:f0:94:89:3e:22:bf:fe:70:55:9b:
70:36:1e:69:70:da:9e:a8:d3:e0:83:81:f9:15:6f:
4b:f2:ae:6c:ba:3e:7f:3b:0d:90:2d:f8:c3:2a:54:
88:39:bd:f9:4b:a6:3b:5b:f9:cb:e8:bf:52:8a:85:
40:f8:15:b0:8e:2a:e3:b8:73:b5:a8:c1:9a:3d:97:
ca:23:ae:88:84:01:a9:8d:89:21:3f:a9:b6:cc:0d:
13:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:31:5A:67:04:C8:76:ED:D6:EA:A5:17:22:70:F6:65:E6:C1:F0:AA
X509v3 Authority Key Identifier:
keyid:8D:9C:6E:84:3F:FE:7F:34:B9:5D:3A:0C:D7:2D:D4:AB:B6:9B:A4:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jZxuhD_-fzS5XToM1y3Uq7abpCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/ajFaZwTIdu3W6qUXInD2ZebB8Ko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/jZxuhD_-fzS5XToM1y3Uq7abpCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:ce8:556::/48
Signature Algorithm: sha256WithRSAEncryption
3b:7b:28:3e:e9:01:df:ad:99:ec:36:4b:d1:fa:f1:15:9f:8b:
8a:ba:fb:e5:d1:a0:a9:b0:7a:b0:33:d8:41:e0:cc:ef:04:5d:
f1:ea:8c:46:5d:df:e9:61:72:96:c8:cb:4b:6c:8e:ee:bd:51:
9d:09:e3:d8:5e:16:bd:bc:78:31:c2:19:0f:53:1f:07:9b:86:
52:28:23:bf:1b:29:06:48:3d:95:82:4c:fb:62:20:45:11:4a:
72:74:f3:10:30:39:c0:5c:e6:0e:f7:ab:67:5f:f1:4b:ed:cb:
cc:fc:cd:64:9d:57:d4:4b:4b:92:a5:a2:9d:33:7f:2e:42:ff:
cd:d9:6d:b9:42:bc:c8:ef:aa:0c:e5:e6:dc:04:eb:a8:1f:09:
d1:91:65:5e:92:28:f0:91:ed:a9:d7:24:d1:44:d5:52:6d:17:
03:0a:91:02:af:8c:cc:fb:5f:5b:c4:22:68:ee:a0:4e:75:b1:
46:c8:34:cb:3a:bd:a1:23:9d:f7:21:62:0d:f9:cf:2f:ed:9b:
5d:a7:94:de:ed:bc:62:96:ce:ce:7c:94:63:ff:b2:79:d9:29:
c9:49:f9:00:13:d5:39:55:a8:58:a4:b0:e6:ab:60:8d:0b:3c:
2e:35:bc:51:cb:e7:79:2e:be:b8:c6:d2:14:bc:81:a3:e6:9f:
65:3a:64:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:59:00 2026 by rpki-client