Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/js-kMHF6cPXDti5NU7dlF1sPTLc.roa
File: js-kMHF6cPXDti5NU7dlF1sPTLc.roa (raw, json)
Hash identifier: EARaawOp26i2xau5tcnpqYFS7hFHVGLyoMSK75kpsK4=
Subject key identifier: 8E:CF:A4:30:71:7A:70:F5:C3:B6:2E:4D:53:B7:65:17:5B:0F:4C:B7
Certificate issuer: /CN=367160181739568e578e1b5f57976a60398062e6
Certificate serial: 019E978B4F852101B3A99588C25562918E2B
Authority key identifier: 36:71:60:18:17:39:56:8E:57:8E:1B:5F:57:97:6A:60:39:80:62:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/js-kMHF6cPXDti5NU7dlF1sPTLc.roa
Signing time: Fri 05 Jun 2026 11:29:09 +0000
ROA not before: Fri 05 Jun 2026 11:29:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204464
IP address blocks: 2a09:3f06::/31 maxlen: 31
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:97:8b:4f:85:21:01:b3:a9:95:88:c2:55:62:91:8e:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=367160181739568e578e1b5f57976a60398062e6
Validity
Not Before: Jun 5 11:29:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8ecfa430717a70f5c3b62e4d53b765175b0f4cb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2f:82:ee:40:77:cc:17:bd:14:bf:89:ea:af:
37:11:e8:b2:69:fe:a6:34:ce:78:5d:d5:d4:0a:67:
b8:b4:30:04:3b:cf:dd:42:fc:5a:ee:b2:0d:66:e3:
f7:87:88:53:93:b7:e1:c5:86:d3:6d:e4:dd:bd:70:
98:0b:6f:40:10:7d:3c:3e:11:cf:b1:2b:31:4f:db:
7d:35:44:02:b0:5a:57:49:9d:58:0c:31:83:89:53:
84:64:c4:8a:a0:5a:df:92:25:a2:5b:c9:22:fa:80:
dd:0d:2c:52:c9:42:f5:05:18:a0:6c:6a:e2:8c:6e:
dc:30:24:5a:db:55:03:ce:66:4e:a0:98:46:9b:86:
8e:70:96:68:a2:80:aa:50:9c:ef:5d:62:76:22:c1:
11:31:4e:a1:da:f5:00:7a:a0:62:d8:76:e8:7c:39:
bb:0f:b2:e4:05:ae:12:42:df:af:72:8e:1c:cf:5c:
a1:48:1d:3d:a1:9b:85:9c:1b:38:c3:44:83:58:7f:
4e:3f:2d:02:df:69:83:dc:cd:81:3e:e2:68:1a:25:
7c:41:af:ec:94:8e:63:e0:ce:cd:dd:f3:df:8e:06:
11:7e:4a:dc:99:7f:09:bf:bf:cb:3f:9f:97:6d:53:
42:83:73:9c:7b:45:55:81:6d:cc:9a:60:7a:76:5f:
dc:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:CF:A4:30:71:7A:70:F5:C3:B6:2E:4D:53:B7:65:17:5B:0F:4C:B7
X509v3 Authority Key Identifier:
keyid:36:71:60:18:17:39:56:8E:57:8E:1B:5F:57:97:6A:60:39:80:62:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/js-kMHF6cPXDti5NU7dlF1sPTLc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:3f06::/31
Signature Algorithm: sha256WithRSAEncryption
93:82:be:12:47:c6:f2:ab:44:13:2d:28:24:f2:5f:91:bd:9d:
49:7d:a1:fb:78:e3:65:71:79:69:36:53:64:9a:d6:d2:c6:f2:
e3:db:52:64:99:95:ab:cd:3f:31:01:15:d3:c8:ae:99:b9:66:
ef:61:18:58:78:cd:a4:07:e1:60:ee:ba:9a:c7:3d:82:a7:89:
23:d1:b5:0d:0e:7f:b4:52:1c:c3:dc:0c:85:8c:ff:ba:68:4c:
e2:2a:b8:a8:e0:44:1a:ce:1c:29:b4:42:c1:3b:66:57:f1:5b:
5f:0f:71:4f:aa:a6:d9:0a:61:84:9c:9f:d4:bc:ed:89:08:d4:
55:78:bc:5b:14:40:09:4d:bd:c7:a2:ed:8f:5c:4b:8a:1e:a0:
1e:45:49:dc:b3:2c:a5:ad:fb:ff:ab:f1:46:c6:53:f2:ea:a1:
20:a2:16:a6:81:46:2f:c6:b3:f6:e0:ec:e0:ee:a0:28:16:39:
71:8a:5e:66:eb:81:c4:ad:da:c3:8e:89:e9:8f:24:c6:ea:e5:
de:1b:88:e7:00:4f:5b:8d:68:e9:7e:40:6e:75:a9:88:41:3e:
7c:4b:bd:9d:f2:c3:1b:a4:b2:dc:48:f9:12:c7:2b:2d:32:96:
78:ba:c5:ed:1a:a7:a0:c5:f7:ab:85:64:d9:90:b8:73:00:9d:
4e:10:fe:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:55:14 2026 by rpki-client