Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/1-J4PSDEl9d0llDjfWsIWQxWc6_I.roa
File: 1-J4PSDEl9d0llDjfWsIWQxWc6_I.roa (raw, json)
Hash identifier: ypQcjGIhT4f6yMw/Eo/q0CXm3np4TkiH1MrKx8KGA8U=
Subject key identifier: F8:9E:0F:48:31:25:F5:DD:25:94:38:DF:5A:C2:16:43:15:9C:EB:F2
Certificate issuer: /CN=25776c77f8ebe7094ca007ace1a9c0bfdc2b3aec
Certificate serial: 019EFD63282D8B74E890F60207A06D873E25
Authority key identifier: 25:77:6C:77:F8:EB:E7:09:4C:A0:07:AC:E1:A9:C0:BF:DC:2B:3A:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/1-J4PSDEl9d0llDjfWsIWQxWc6_I.roa
Signing time: Thu 25 Jun 2026 06:06:34 +0000
ROA not before: Thu 25 Jun 2026 06:06:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 38854
IP address blocks: 2a0b:21c1:601d::/48 maxlen: 48
2a0b:21c1:602b::/48 maxlen: 48
2a0b:21c1:602c::/48 maxlen: 48
2a0b:21c1:6031::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fd:63:28:2d:8b:74:e8:90:f6:02:07:a0:6d:87:3e:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25776c77f8ebe7094ca007ace1a9c0bfdc2b3aec
Validity
Not Before: Jun 25 06:06:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f89e0f483125f5dd259438df5ac21643159cebf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b9:b9:1b:da:1f:0d:8f:c0:f0:aa:87:be:a2:
26:31:c4:8b:8e:6d:f4:29:b6:f5:cc:08:34:a1:bd:
a0:20:7b:8c:27:58:f4:97:47:87:a3:1b:39:71:d4:
84:80:8b:00:b4:24:4d:73:c1:2e:49:c2:5e:b2:79:
59:76:c7:33:a4:62:d4:eb:d8:94:b2:00:76:f6:4f:
0e:b6:05:80:8f:de:3e:e0:05:6d:2a:ee:5c:5a:4f:
5b:86:53:fb:a6:ee:c4:bd:c3:c8:cf:ea:08:9c:b4:
4e:b2:cf:eb:05:40:f3:79:38:66:28:39:1d:a0:31:
51:c3:78:ce:2b:ed:77:f5:92:ce:62:d6:3c:23:cf:
f9:46:92:94:2d:bc:00:9d:fa:3c:8c:ca:b9:6b:68:
3c:ab:0c:2f:a8:fd:25:b4:f9:45:d0:df:67:8d:36:
3b:db:81:6a:05:34:74:43:61:59:26:58:4e:0f:00:
4f:65:dc:32:60:de:ce:72:b3:1d:ab:b9:19:50:e5:
a8:e4:01:51:b2:15:16:2a:00:9b:9c:72:fa:ec:e5:
a6:72:18:c7:d8:0a:5d:df:62:4b:49:1a:ac:67:d4:
e4:f7:3d:05:d9:7a:f4:48:52:47:8b:21:fd:44:27:
69:72:28:87:1d:4f:80:96:29:46:02:19:9e:33:db:
d7:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:9E:0F:48:31:25:F5:DD:25:94:38:DF:5A:C2:16:43:15:9C:EB:F2
X509v3 Authority Key Identifier:
keyid:25:77:6C:77:F8:EB:E7:09:4C:A0:07:AC:E1:A9:C0:BF:DC:2B:3A:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/1-J4PSDEl9d0llDjfWsIWQxWc6_I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:21c1:601d::/48
2a0b:21c1:602b::-2a0b:21c1:602c:ffff:ffff:ffff:ffff:ffff
2a0b:21c1:6031::/48
Signature Algorithm: sha256WithRSAEncryption
5f:fe:ae:32:a0:80:9d:7a:ae:2b:7e:7a:2d:69:84:08:6c:e0:
60:36:0a:f6:18:26:6c:2c:4a:1a:da:9a:07:bf:20:b1:d0:34:
ef:bc:e0:5a:e3:d7:fe:eb:c3:db:0d:d4:b2:5d:02:bf:d8:69:
6a:5a:1d:90:e7:9f:08:ce:88:ef:ea:27:f8:8f:32:70:e7:ba:
59:b8:70:63:fa:0d:e6:13:88:8e:aa:9b:da:3a:b5:3e:82:0d:
c8:7e:16:88:40:8b:20:1b:fe:53:fd:2a:89:b7:72:6f:16:6e:
97:1b:0f:40:dc:ac:4f:7d:18:ed:05:69:e8:7f:e1:51:fd:cb:
d1:fd:a5:ab:00:87:05:68:f1:af:3d:37:1e:b3:39:6b:99:87:
20:74:c1:49:94:88:e0:c9:ca:1e:6d:e4:88:e0:31:fd:be:84:
84:e4:f9:fe:e6:9d:3a:0e:f6:a9:bd:ad:68:ce:17:0f:99:d0:
9f:46:e1:ff:22:7b:2f:e1:1b:08:41:96:25:22:b8:01:5c:f7:
80:56:a5:0d:75:07:59:12:1b:28:25:48:37:db:e9:b1:54:97:
c5:18:45:d7:a1:77:33:84:f1:d3:ce:11:89:38:d3:5e:65:84:
48:16:c3:e5:f7:c1:9c:bb:b2:52:65:0a:a5:42:b7:c9:ab:77:
9e:99:22:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 00:12:07 2026 by rpki-client