Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/1491f9-dc76-4777-b5be-83f9a8d1d4d6/1/PJ-F3Qyitp5W4P_JmuXEhDwj95A.roa
File: PJ-F3Qyitp5W4P_JmuXEhDwj95A.roa (raw, json)
Hash identifier: b6sH2r0w/lWXF9PFk3rc40IsaEaHPz3g/VKzI2NYj4g=
Subject key identifier: 3C:9F:85:DD:0C:A2:B6:9E:56:E0:FF:C9:9A:E5:C4:84:3C:23:F7:90
Certificate issuer: /CN=9e6d1dc6caa41d3beffe8d1da2671a50e7f79a30
Certificate serial: 01A0A0DDA36580099463FD195B198B9FFC47
Authority key identifier: 9E:6D:1D:C6:CA:A4:1D:3B:EF:FE:8D:1D:A2:67:1A:50:E7:F7:9A:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nm0dxsqkHTvv_o0domcaUOf3mjA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/1491f9-dc76-4777-b5be-83f9a8d1d4d6/1/PJ-F3Qyitp5W4P_JmuXEhDwj95A.roa
Signing time: Mon 14 Sep 2026 17:01:14 +0000
ROA not before: Mon 14 Sep 2026 17:01:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209771
IP address blocks: 2a0c:6500:200::/42 maxlen: 48
2a0c:6500:23e::/48 maxlen: 48
2a0c:6500:23f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/1491f9-dc76-4777-b5be-83f9a8d1d4d6/1/nm0dxsqkHTvv_o0domcaUOf3mjA.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/1491f9-dc76-4777-b5be-83f9a8d1d4d6/1/nm0dxsqkHTvv_o0domcaUOf3mjA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nm0dxsqkHTvv_o0domcaUOf3mjA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a0:dd:a3:65:80:09:94:63:fd:19:5b:19:8b:9f:fc:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e6d1dc6caa41d3beffe8d1da2671a50e7f79a30
Validity
Not Before: Sep 14 17:01:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3c9f85dd0ca2b69e56e0ffc99ae5c4843c23f790
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0c:8a:46:62:66:23:42:27:6c:44:76:59:5f:
48:fa:07:39:fe:5f:30:39:60:66:95:12:0d:83:d6:
e2:c2:fb:b0:08:69:81:cd:ce:52:e7:4e:20:11:30:
5d:f2:e1:98:6f:f9:65:73:1a:f1:f0:20:78:c7:cc:
49:82:52:60:89:f3:46:f9:36:5c:b5:74:9e:33:18:
43:32:08:31:23:1a:19:d0:56:43:b8:2f:bc:43:5e:
71:72:b7:40:ba:ef:a8:8d:1e:05:fc:83:a2:d5:55:
02:b1:0b:86:ec:5a:4d:a1:6c:23:8f:a8:9e:a0:e3:
fb:90:c8:7c:3e:a4:61:4d:cd:4d:ac:ff:aa:0e:a7:
f0:52:73:99:31:c6:93:9d:ff:e8:90:5c:2d:11:33:
6b:10:1a:b8:54:95:b2:8e:5e:15:57:94:92:df:5a:
c5:eb:e0:d9:6c:e1:a9:09:21:8c:ab:e1:b4:d4:59:
df:37:0c:be:a3:09:01:8d:e8:d2:48:57:97:ee:ff:
81:d5:33:11:d5:07:c4:fc:5d:36:01:fd:69:5a:71:
9b:f2:e7:a1:e8:f7:34:53:57:78:65:0d:33:ae:b2:
24:1a:3a:5f:4c:7f:0a:c3:fb:78:ec:2f:37:f8:d6:
e3:6e:57:d1:48:2a:16:19:fe:13:e2:84:c0:20:09:
80:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:9F:85:DD:0C:A2:B6:9E:56:E0:FF:C9:9A:E5:C4:84:3C:23:F7:90
X509v3 Authority Key Identifier:
keyid:9E:6D:1D:C6:CA:A4:1D:3B:EF:FE:8D:1D:A2:67:1A:50:E7:F7:9A:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nm0dxsqkHTvv_o0domcaUOf3mjA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1491f9-dc76-4777-b5be-83f9a8d1d4d6/1/PJ-F3Qyitp5W4P_JmuXEhDwj95A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1491f9-dc76-4777-b5be-83f9a8d1d4d6/1/nm0dxsqkHTvv_o0domcaUOf3mjA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:6500:200::/42
Signature Algorithm: sha256WithRSAEncryption
83:a1:50:c0:28:a0:cf:46:18:c1:b8:67:e1:94:93:04:fd:cf:
9d:09:36:d2:0a:f9:56:ef:d8:72:9e:82:c5:5e:ba:8b:23:aa:
bd:34:ee:7e:0e:99:0d:8e:20:1f:3e:07:10:32:b1:c8:5c:99:
a7:9a:05:c6:60:8c:6b:c6:fe:5d:1e:26:b7:c8:e2:cc:1c:94:
99:2f:7c:e0:d8:6d:a9:02:6a:18:79:14:de:83:6b:06:76:e5:
46:3f:30:26:b4:98:9e:14:05:97:d9:07:1f:0b:79:71:e4:af:
f3:f9:0f:06:37:bb:e7:8e:56:bd:6f:d3:bc:a7:9c:c3:7d:37:
58:5d:0e:72:bd:5b:ff:45:18:95:06:19:04:62:50:8a:0f:6c:
45:1c:10:25:ff:76:d4:01:2a:fb:16:b9:c0:d2:53:d3:84:fb:
a8:97:6a:2d:4b:65:be:b9:91:57:b8:95:ac:4b:07:54:04:c1:
27:41:a6:dd:d7:4e:2d:38:a5:20:70:fc:0a:b6:99:db:4d:17:
0e:4a:1f:e6:f9:09:ec:13:31:68:e5:27:16:82:c2:a1:26:9b:
c8:43:ef:b2:01:d6:f4:26:2b:21:bd:30:19:a5:c5:ec:61:58:
9c:eb:5a:da:25:6e:35:f5:a9:df:c4:ae:bb:03:2c:56:f3:e0:
20:34:83:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 10:53:19 2026 by rpki-client