Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/r-JYCIrAkWjDsujvpPkWA3beJsY.roa
File: r-JYCIrAkWjDsujvpPkWA3beJsY.roa (raw, json)
Hash identifier: chgYsdHZjw5WexSL8+gZH158Y9DHcxZvsWS54B4lqUk=
Subject key identifier: AF:E2:58:08:8A:C0:91:68:C3:B2:E8:EF:A4:F9:16:03:76:DE:26:C6
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 019C47B5A9E2E1099C12E21EB5E54869E3FA
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/r-JYCIrAkWjDsujvpPkWA3beJsY.roa
Signing time: Tue 10 Feb 2026 13:20:13 +0000
ROA not before: Tue 10 Feb 2026 13:20:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201345
IP address blocks: 2a0c:9a40:8920::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:47:b5:a9:e2:e1:09:9c:12:e2:1e:b5:e5:48:69:e3:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Feb 10 13:20:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=afe258088ac09168c3b2e8efa4f9160376de26c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:cf:cd:52:a5:68:de:ea:18:f2:1d:e8:0f:63:
4d:c5:64:8a:0f:ee:95:01:91:da:37:b9:f7:cc:15:
9a:4f:a3:f4:6a:54:63:5f:c8:01:b5:48:5f:30:a6:
4b:fa:56:78:d0:a6:31:71:27:67:4a:70:59:cd:74:
58:44:16:fb:97:5c:3f:6c:96:88:75:c1:a0:d2:6b:
0b:5c:e6:d5:47:99:05:4a:a7:92:e7:9d:84:d6:1b:
13:bd:02:30:09:4d:0b:82:2c:0f:9c:18:36:42:f1:
b4:83:e0:1c:cf:ff:d2:de:7a:38:42:00:a1:b5:49:
ce:b4:4f:83:d2:b7:ee:14:5c:b0:39:f3:b7:dd:ba:
a3:49:74:13:ca:e2:6f:07:52:2b:01:c5:90:24:58:
a5:8e:8e:71:21:e2:b0:f6:be:a8:18:6a:c4:bd:d3:
fe:c2:1b:17:1d:49:17:ca:5c:28:5b:ec:94:42:98:
ba:65:de:ab:87:ba:1f:e4:2e:a7:37:72:e1:27:11:
1d:ff:de:71:66:d9:ee:36:32:50:29:de:10:88:86:
b8:73:fb:f0:9c:d9:83:46:48:09:86:07:28:28:dc:
3f:bf:cb:a5:cc:2f:23:9f:c1:e5:da:4e:00:b1:d6:
ed:9d:36:f6:2a:1f:29:58:c0:d8:6e:74:be:e0:b7:
a5:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:E2:58:08:8A:C0:91:68:C3:B2:E8:EF:A4:F9:16:03:76:DE:26:C6
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/r-JYCIrAkWjDsujvpPkWA3beJsY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8920::/48
Signature Algorithm: sha256WithRSAEncryption
58:cd:fa:eb:dd:45:26:48:37:69:e5:d5:d5:0f:49:91:b0:af:
f1:49:06:5f:fc:17:09:ea:ea:5d:bc:0f:e8:06:88:00:9f:7a:
b8:08:94:20:9c:55:27:b5:13:f5:68:c8:62:a9:a8:de:e7:88:
a1:e9:c0:33:0f:ec:38:35:27:a3:7c:91:6d:cd:12:fc:6d:23:
78:c2:7f:da:02:ed:8d:ad:c8:1e:b8:a5:c6:83:a1:64:c8:2d:
4a:5f:13:ff:34:8a:da:7c:b6:f1:e0:b9:73:1c:f1:0f:3f:ce:
64:28:49:e4:14:ba:2e:02:59:c4:6a:e4:1a:88:b2:47:15:a5:
17:08:09:85:79:4e:06:83:76:b0:c8:c4:b6:e4:8a:f9:a6:2c:
a1:ea:b9:c2:06:0c:e3:5e:7d:0f:4b:47:82:c8:fe:e9:bc:a0:
50:7a:50:aa:39:55:17:96:4d:73:70:2c:d7:a3:76:7c:9b:b7:
16:ef:d5:77:89:f4:ef:ab:ef:a0:c4:e0:09:b8:fd:d1:03:3c:
0c:c9:af:a0:f9:7f:7c:15:7f:28:bb:de:16:4f:d2:6e:4b:ae:
0f:7e:74:f8:f0:25:86:8b:66:fe:7b:f2:c0:bc:1b:9b:82:81:
79:bb:4a:43:90:fb:ed:c3:9f:be:dc:95:93:73:8c:c8:39:29:
c8:74:f4:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:26:38 2026 by rpki-client