Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/ji5uq7lgpZme2h5LP4PpoR1KlXg.roa
File: ji5uq7lgpZme2h5LP4PpoR1KlXg.roa (raw, json)
Hash identifier: KpOwi/Y6b4qR3//I1ROSdvQABJ8PA4YdcglI0GCbEGo=
Subject key identifier: 8E:2E:6E:AB:B9:60:A5:99:9E:DA:1E:4B:3F:83:E9:A1:1D:4A:95:78
Certificate issuer: /CN=7021d7528be713a4ba2cb4db5e58d64d882eb555
Certificate serial: 019F38247EBB3CA696F0CBA2CFC998282DB5
Authority key identifier: 70:21:D7:52:8B:E7:13:A4:BA:2C:B4:DB:5E:58:D6:4D:88:2E:B5:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cCHXUovnE6S6LLTbXljWTYgutVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/ji5uq7lgpZme2h5LP4PpoR1KlXg.roa
Signing time: Mon 06 Jul 2026 15:55:43 +0000
ROA not before: Mon 06 Jul 2026 15:55:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203545
IP address blocks: 2a0f:bf01::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/cCHXUovnE6S6LLTbXljWTYgutVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 15:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:38:24:7e:bb:3c:a6:96:f0:cb:a2:cf:c9:98:28:2d:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7021d7528be713a4ba2cb4db5e58d64d882eb555
Validity
Not Before: Jul 6 15:55:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8e2e6eabb960a5999eda1e4b3f83e9a11d4a9578
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e8:2d:d5:30:01:14:0f:85:81:d8:f4:23:6c:
42:13:13:d3:40:b7:b7:78:1a:59:90:b6:02:d9:cb:
33:f8:46:82:1f:c0:55:16:6f:51:30:a4:55:69:3b:
9a:ad:29:25:d6:0d:83:7f:c4:ae:fd:92:29:81:47:
97:d3:51:a1:9f:8c:75:36:c3:f3:23:75:c4:2e:ac:
9e:f9:f2:59:54:76:db:59:6f:8a:6d:4f:50:e2:18:
5a:4f:ca:ab:c1:80:b5:07:3c:5d:f4:89:fd:0f:54:
8b:ed:69:c4:f3:06:4b:fb:6c:a7:44:d9:5e:ff:fe:
b2:13:29:67:e0:44:d0:a0:9b:1c:5d:e0:c1:92:0d:
87:05:ac:da:04:d2:34:1d:f5:39:7e:3f:3e:15:4b:
30:7b:75:da:58:eb:1e:22:e5:46:dc:4d:66:20:aa:
5e:48:a3:96:b3:30:eb:57:f3:a9:f1:39:73:ba:19:
1f:45:0d:dd:db:8a:a5:02:e3:bc:22:f7:87:93:b0:
7b:7d:ac:0c:c6:43:78:b8:e2:09:6e:a7:76:0d:41:
f8:4b:17:df:a2:57:31:c0:b1:66:86:4e:86:62:86:
07:1f:26:f2:0c:5c:94:20:04:7a:69:68:57:83:ee:
c7:07:6b:3f:9a:cd:0b:13:44:de:8e:ee:df:0d:f9:
6d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:2E:6E:AB:B9:60:A5:99:9E:DA:1E:4B:3F:83:E9:A1:1D:4A:95:78
X509v3 Authority Key Identifier:
keyid:70:21:D7:52:8B:E7:13:A4:BA:2C:B4:DB:5E:58:D6:4D:88:2E:B5:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cCHXUovnE6S6LLTbXljWTYgutVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/ji5uq7lgpZme2h5LP4PpoR1KlXg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:bf01::/48
Signature Algorithm: sha256WithRSAEncryption
43:62:5c:b1:a8:77:a8:46:72:27:56:5a:d6:c6:19:e3:93:e6:
72:8d:87:96:12:a6:58:30:83:fd:4c:34:be:fa:52:b8:8b:6a:
02:50:e9:1f:55:8a:f7:54:44:ac:57:d8:e0:53:5d:0e:0f:0a:
3d:39:2b:02:3f:9a:b7:5a:7d:6c:27:27:a3:15:f8:b7:e1:31:
7a:97:ec:df:e4:66:68:8c:55:cf:ac:28:26:76:03:fb:cf:0e:
0f:b7:73:81:3a:a0:ba:f0:0a:e0:b8:f7:43:bb:fb:8b:a9:ce:
95:2b:c6:53:2f:37:6f:75:d7:46:e0:d5:35:f1:ab:ee:1f:ad:
0c:86:1d:a5:79:f2:5f:59:80:a0:e8:a9:8a:cc:c4:e7:30:89:
53:15:30:52:e6:31:97:d9:2d:2f:e9:cb:b2:f6:ae:35:7d:6b:
10:5e:d9:85:4d:c8:ca:11:bb:ce:ee:1a:7b:d6:bb:b0:48:ea:
27:7c:10:f4:5f:95:52:87:40:66:3a:80:2a:3b:3f:c3:37:0a:
1e:ad:cf:04:61:32:8c:a8:59:89:22:41:fb:07:70:46:5c:b7:
ac:b1:8e:be:89:c1:fe:16:b4:e8:99:06:92:15:5e:2e:42:50:
43:9f:67:4f:96:6d:45:23:32:57:eb:f1:59:20:25:be:61:41:
95:40:03:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 00:22:07 2026 by rpki-client