Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/027208-40dc-412a-b64c-38bf1e942a64/1/JQHbkZiCoz_ArYL3K_jRaitcYso.roa
File: JQHbkZiCoz_ArYL3K_jRaitcYso.roa (raw, json)
Hash identifier: LSS9szWjmAex/d/OuZRvWyhXy/Z+aR2BRiVKGpC62GY=
Subject key identifier: 25:01:DB:91:98:82:A3:3F:C0:AD:82:F7:2B:F8:D1:6A:2B:5C:62:CA
Certificate issuer: /CN=b112370ca26012b4d1d0154cef7230bd89a5b95d
Certificate serial: 019CA79CA5467AA897A8B04A9EA4CD75EFBB
Authority key identifier: B1:12:37:0C:A2:60:12:B4:D1:D0:15:4C:EF:72:30:BD:89:A5:B9:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sRI3DKJgErTR0BVM73IwvYmluV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/027208-40dc-412a-b64c-38bf1e942a64/1/JQHbkZiCoz_ArYL3K_jRaitcYso.roa
Signing time: Sun 01 Mar 2026 04:16:26 +0000
ROA not before: Sun 01 Mar 2026 04:16:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200623
IP address blocks: 2a07:bb03:a0ff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/027208-40dc-412a-b64c-38bf1e942a64/1/sRI3DKJgErTR0BVM73IwvYmluV0.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/027208-40dc-412a-b64c-38bf1e942a64/1/sRI3DKJgErTR0BVM73IwvYmluV0.mft
rsync://rpki.ripe.net/repository/DEFAULT/sRI3DKJgErTR0BVM73IwvYmluV0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a7:9c:a5:46:7a:a8:97:a8:b0:4a:9e:a4:cd:75:ef:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b112370ca26012b4d1d0154cef7230bd89a5b95d
Validity
Not Before: Mar 1 04:16:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2501db919882a33fc0ad82f72bf8d16a2b5c62ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:9c:34:96:ae:cc:26:da:e0:8e:f9:1f:4b:a4:
1d:b3:95:c2:f5:ad:be:13:c3:51:12:81:8e:16:60:
0b:48:c1:e2:9f:15:9f:8c:0f:c3:8f:b0:44:6d:26:
3b:4e:4a:88:e1:62:7e:e1:33:cf:b1:0d:af:7a:b6:
18:92:4e:f8:a1:e8:84:88:04:c8:d2:9c:dd:e3:aa:
85:3d:c5:21:5b:d2:a5:1c:bd:93:d9:ef:d5:07:dd:
61:64:65:f0:a5:72:26:96:d2:53:51:ea:ad:20:64:
39:ea:37:dd:98:a8:a7:f6:d5:95:2c:fc:d6:bf:db:
19:a0:ec:b8:f6:d4:62:39:a8:12:a2:d7:b0:77:33:
c8:f6:a7:af:75:bf:1e:d8:fa:d5:aa:39:64:42:ea:
a0:b9:3f:55:3a:cf:8e:ba:dc:c9:82:7e:b6:1d:d8:
c6:7e:d9:68:d0:07:5e:4d:37:88:e6:ac:a7:e2:17:
89:2b:81:71:8c:d0:f9:2d:72:8f:b8:c1:40:23:fc:
cf:91:37:3d:ec:14:43:4f:4c:74:67:5c:70:35:5a:
68:7f:51:91:30:09:54:f8:0f:af:35:8b:e4:54:a9:
6c:cc:e6:2b:3b:5a:c0:c2:54:e0:98:b0:4d:76:01:
88:36:62:6e:37:9e:26:5e:9e:58:7e:a1:4a:de:86:
17:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:01:DB:91:98:82:A3:3F:C0:AD:82:F7:2B:F8:D1:6A:2B:5C:62:CA
X509v3 Authority Key Identifier:
keyid:B1:12:37:0C:A2:60:12:B4:D1:D0:15:4C:EF:72:30:BD:89:A5:B9:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sRI3DKJgErTR0BVM73IwvYmluV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/027208-40dc-412a-b64c-38bf1e942a64/1/JQHbkZiCoz_ArYL3K_jRaitcYso.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/027208-40dc-412a-b64c-38bf1e942a64/1/sRI3DKJgErTR0BVM73IwvYmluV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:bb03:a0ff::/48
Signature Algorithm: sha256WithRSAEncryption
5f:2c:46:a5:7d:f4:66:2e:71:e2:67:de:1b:c6:d1:39:4b:d6:
1c:f5:b6:83:a8:42:9e:8e:7f:50:0f:f5:38:f1:c5:97:16:8b:
f9:41:65:e1:6a:ec:d5:2b:85:fc:28:04:7e:1b:29:35:4e:79:
09:c5:6e:e2:40:80:9d:66:b1:51:57:63:b5:18:ba:75:8b:56:
45:c7:aa:9d:fe:a3:e0:78:fd:b2:0f:95:b8:59:7f:6b:96:52:
3b:a8:90:42:70:fa:79:ac:73:a5:1a:74:25:d1:bc:8d:4e:88:
ec:e5:39:29:b5:a7:39:2f:95:c6:b0:1b:37:07:c8:85:e7:a2:
01:49:cc:e3:3b:e0:d3:19:3e:98:1b:b3:d6:f0:a5:d1:34:07:
80:bc:5b:f9:8e:39:70:e9:92:0d:0f:ba:66:91:d7:c0:bc:b0:
1f:a6:c6:74:ed:cb:80:29:76:b8:4d:31:6b:ae:5c:a6:ce:93:
7a:7a:50:8d:1c:e5:73:9d:d3:79:9f:e9:8f:47:87:90:84:b8:
aa:e9:b4:b2:d6:7f:34:70:2b:05:42:fb:ae:d4:5f:42:2d:43:
83:f8:2e:ce:87:61:69:4b:09:31:97:22:8c:e2:91:7c:10:b1:
db:0d:4a:fc:f5:6a:fd:65:b2:06:4f:9a:95:a7:8d:0f:89:4d:
8f:34:50:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:52:12 2026 by rpki-client