Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/J6cvqdNaa_h8c-AJMPMNzi3IcZk.roa
File: J6cvqdNaa_h8c-AJMPMNzi3IcZk.roa (raw, json)
Hash identifier: szt8aLA4tUZEqoG37djJt0EwfQ+WkrWOnry8JrN53Wg=
Subject key identifier: 27:A7:2F:A9:D3:5A:6B:F8:7C:73:E0:09:30:F3:0D:CE:2D:C8:71:99
Certificate issuer: /CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Certificate serial: 01A0C3D5C8F309E7960C1A6C30520005C81B
Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/J6cvqdNaa_h8c-AJMPMNzi3IcZk.roa
Signing time: Mon 21 Sep 2026 11:59:22 +0000
ROA not before: Mon 21 Sep 2026 11:59:22 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152698
IP address blocks: 43.240.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 11:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:d5:c8:f3:09:e7:96:0c:1a:6c:30:52:00:05:c8:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Validity
Not Before: Sep 21 11:59:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=27a72fa9d35a6bf87c73e00930f30dce2dc87199
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a0:0e:60:86:33:83:3e:20:a1:fb:d6:35:8b:
a6:e6:d4:be:c3:9e:76:52:97:bc:32:1b:6d:e3:70:
d0:4c:eb:d3:d9:33:8d:2f:52:51:d9:cb:f5:d4:bb:
f4:1d:5a:f9:a0:d8:50:9e:1b:5d:43:4a:51:2f:9a:
7d:dd:b3:7f:c9:01:04:a8:8b:61:43:7c:07:40:90:
a8:d6:be:a1:c2:e1:dc:93:07:99:ab:9d:19:9c:d7:
b7:97:4b:37:23:aa:73:b6:21:ca:3a:ba:2e:a2:ad:
84:14:27:36:cd:84:20:5c:b5:ae:9f:43:e0:7b:a4:
75:69:95:fd:4c:5d:88:68:8b:76:6f:72:ae:03:dc:
5a:99:62:5a:36:a8:0f:cd:f5:c6:57:f3:d9:bc:15:
18:48:cc:40:8b:08:09:3e:1d:08:e6:89:74:2e:98:
48:96:2c:1e:2e:f7:01:97:bb:c4:e4:aa:48:58:76:
82:7f:f0:e7:fb:f3:15:79:f2:d7:29:c8:c4:5b:7f:
03:18:6d:00:bd:75:7e:81:06:16:59:35:9e:f8:22:
6b:e0:8c:66:db:1c:3f:0e:24:1d:40:cc:fe:2d:3f:
a1:fb:4b:2b:f6:c3:4a:4c:e1:d6:b1:f3:94:96:34:
f0:a5:06:2a:12:c8:97:25:02:04:65:49:77:eb:0b:
5f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:A7:2F:A9:D3:5A:6B:F8:7C:73:E0:09:30:F3:0D:CE:2D:C8:71:99
X509v3 Authority Key Identifier:
keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/J6cvqdNaa_h8c-AJMPMNzi3IcZk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.240.151.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:bc:2a:04:4a:dd:e9:50:58:09:51:da:a0:fb:95:23:7b:30:
62:98:89:e8:89:e3:20:07:dd:5c:96:8e:98:ef:a7:57:e3:06:
aa:98:fa:e8:96:a5:76:23:40:15:9d:65:18:d5:05:aa:4f:58:
57:9f:03:04:b3:f3:18:2e:3d:1c:ef:30:87:3a:b1:97:15:48:
74:10:e3:60:87:e5:a2:b6:fc:05:8d:94:32:b9:36:7e:e0:a5:
68:6c:0f:8f:1c:00:d2:a1:d1:99:d9:fd:4d:c7:52:86:45:4d:
c5:4d:d0:0e:fa:05:53:fb:41:dd:21:e7:d7:7e:03:25:6e:06:
9e:7b:1c:9c:af:75:64:74:4c:c5:8e:49:bc:b5:43:0d:54:26:
99:cf:e8:a7:94:60:a7:56:10:d9:7c:5c:45:9b:8d:a5:63:72:
c8:0f:db:04:23:d3:14:94:83:92:43:2f:c5:b8:78:42:7b:98:
c4:1e:84:fc:61:ad:b8:dd:1a:5a:1b:36:af:12:39:dc:a8:32:
01:a5:35:a6:58:15:31:8e:16:aa:24:92:e1:16:0e:3a:4e:bf:
c4:dc:01:e9:06:98:5e:51:e4:2c:b4:65:a8:47:ed:4f:4e:c6:
41:02:d9:a1:3f:26:9f:dd:e4:2e:22:c3:79:a6:ce:57:75:b5:
ca:2b:b8:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:50:09 2026 by rpki-client