Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/jXOEge_OAdmsJDZh_jruNzJx8I4.roa
File: jXOEge_OAdmsJDZh_jruNzJx8I4.roa (raw, json)
Hash identifier: 4svbdqBdNh2F0T2zbRs1YgAzsTSoy+jBdrn+KTYqBKU=
Subject key identifier: 8D:73:84:81:EF:CE:01:D9:AC:24:36:61:FE:3A:EE:37:32:71:F0:8E
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A1A62D24B2EBFDE65298D05D0A558382D9
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/jXOEge_OAdmsJDZh_jruNzJx8I4.roa
Signing time: Wed 04 Nov 2026 10:48:58 +0000
ROA not before: Wed 04 Nov 2026 10:48:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218196
IP address blocks: 2a02:2fc0:3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 06:38:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a6:2d:24:b2:eb:fd:e6:52:98:d0:5d:0a:55:83:82:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Nov 4 10:48:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8d738481efce01d9ac243661fe3aee373271f08e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:23:d3:1e:b0:c4:bb:ef:be:a0:8a:43:8c:75:
30:67:b1:bd:60:dc:48:81:03:be:11:32:8b:1e:15:
0b:8f:b1:ec:7e:e9:9d:7b:53:3c:b4:46:bc:d4:b0:
9e:0d:a9:5d:5e:7f:39:03:93:e3:83:8b:0f:38:20:
f5:42:b3:31:3c:df:18:fa:01:d9:0d:48:a9:6f:e2:
a4:40:f7:00:76:b3:75:90:27:a3:1a:e6:7d:56:a1:
09:cd:48:8d:15:e5:0a:77:d4:2d:40:29:44:e6:5e:
24:19:e0:95:d0:5a:3f:8f:8a:c5:e4:bd:01:d4:ce:
1d:03:5f:b4:a4:70:c4:f1:b9:57:9c:ff:46:a7:67:
9e:0f:4f:93:c9:25:c8:ec:e7:e2:07:b7:8b:78:75:
e1:26:a5:83:04:02:98:5d:58:ce:db:ed:bf:4b:2d:
c3:c0:04:80:c8:19:46:28:d4:7a:16:de:10:7c:37:
b7:35:e0:7b:d1:09:98:d7:7b:8a:a9:aa:0b:5c:17:
17:ed:55:2e:04:5d:2d:31:85:1e:90:94:3d:4f:8a:
e7:82:3f:c7:d8:5c:19:77:9f:f5:64:9b:8b:18:af:
87:a8:f0:6d:3b:f7:9b:91:eb:20:42:d9:9f:58:1f:
9f:46:64:c9:8a:57:2e:36:12:0a:b3:5f:9b:f9:aa:
08:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:73:84:81:EF:CE:01:D9:AC:24:36:61:FE:3A:EE:37:32:71:F0:8E
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/jXOEge_OAdmsJDZh_jruNzJx8I4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:2fc0:3::/48
Signature Algorithm: sha256WithRSAEncryption
2e:41:e4:2f:8e:a8:22:58:d4:f8:30:49:c5:75:d7:de:1b:15:
96:47:d5:4c:eb:ce:61:e9:13:cc:83:58:67:6c:e1:80:25:c2:
24:d7:97:0d:d5:88:40:4e:0a:7d:e8:79:69:ad:d6:6d:b1:d4:
42:33:83:39:71:e6:8c:33:f3:bb:9c:73:8b:01:59:62:de:13:
b0:a0:e5:d0:c4:bf:15:11:7a:06:33:fe:6b:25:d9:c7:92:c6:
4b:1c:f4:fc:43:da:c7:af:21:22:97:67:e8:01:58:15:9a:24:
4b:90:fc:d3:87:9d:98:1a:54:49:d1:02:ad:96:82:35:6a:5c:
6f:7f:d0:e2:39:e3:b0:16:ba:50:40:35:9e:51:a4:d9:29:18:
08:46:ce:58:36:78:6a:5c:f6:d4:94:27:d9:52:db:cf:0b:52:
e9:9f:84:66:a7:35:19:af:6b:d2:4c:29:c3:ba:e1:b6:c6:bf:
6b:88:89:33:0a:78:6c:12:30:e1:34:6b:e5:5e:43:6c:dc:2c:
1d:01:a3:c0:1f:fd:0a:75:7f:35:b1:f6:f9:df:72:0e:43:07:
94:fe:3c:6c:24:75:8b:4d:71:83:b3:a1:1e:3c:2f:b5:54:d3:
50:eb:14:62:77:7d:03:d1:f4:b2:ce:63:fb:73:21:66:c6:56:
a7:2f:cb:f8
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAaGmLSSy6/3mUpjQXQpVg4LZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjYxMTA0MTA0ODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZDczODQ4MWVmY2UwMWQ5YWMyNDM2NjFmZTNhZWUzNzMyNzFmMDhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSPTHrDEu+++oIpDjHUwZ7G9YNxI
gQO+ETKLHhULj7Hsfumde1M8tEa81LCeDaldXn85A5Pjg4sPOCD1QrMxPN8Y+gHZ
DUipb+KkQPcAdrN1kCejGuZ9VqEJzUiNFeUKd9QtQClE5l4kGeCV0Fo/j4rF5L0B
1M4dA1+0pHDE8blXnP9Gp2eeD0+TySXI7OfiB7eLeHXhJqWDBAKYXVjO2+2/Sy3D
wASAyBlGKNR6Ft4QfDe3NeB70QmY13uKqaoLXBcX7VUuBF0tMYUekJQ9T4rngj/H
2FwZd5/1ZJuLGK+HqPBtO/ebkesgQtmfWB+fRmTJilcuNhIKs1+b+aoI3wIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFI1zhIHvzgHZrCQ2Yf467jcycfCOMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvalhPRWdlX09BZG1zSkRaaF9qcnVOekp4OEk0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgIvwAAD
MA0GCSqGSIb3DQEBCwUAA4IBAQAuQeQvjqgiWNT4MEnFddfeGxWWR9VM685h6RPM
g1hnbOGAJcIk15cN1YhATgp96HlprdZtsdRCM4M5ceaMM/O7nHOLAVli3hOwoOXQ
xL8VEXoGM/5rJdnHksZLHPT8Q9rHryEil2foAVgVmiRLkPzTh52YGlRJ0QKtloI1
alxvf9DiOeOwFrpQQDWeUaTZKRgIRs5YNnhqXPbUlCfZUtvPC1Lpn4RmpzUZr2vS
TCnDuuG2xr9riIkzCnhsEjDhNGvlXkNs3CwdAaPAH/0KdX81sfb533IOQweU/jxs
JHWLTXGDs6EePC+1VNNQ6xRid30D0fSyzmP7cyFmxlanL8v4
-----END CERTIFICATE-----
Generated at Thu Nov 5 17:44:42 2026 by rpki-client