Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/Jzj8iSw0vJ_nKLxrgCvA5r_jCUM.roa
File: Jzj8iSw0vJ_nKLxrgCvA5r_jCUM.roa (raw, json)
Hash identifier: qthe4k3qdM7snNafkTyRsJRCRgLD006FLSrfqpvtf/M=
Subject key identifier: 27:38:FC:89:2C:34:BC:9F:E7:28:BC:6B:80:2B:C0:E6:BF:E3:09:43
Certificate issuer: /CN=e15b90ffdfa0ab285485e78446b871998b24dcc0
Certificate serial: 019C81596B7788FC03EBF70F0FC5CAD8248C
Authority key identifier: E1:5B:90:FF:DF:A0:AB:28:54:85:E7:84:46:B8:71:99:8B:24:DC:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VuQ_9-gqyhUheeERrhxmYsk3MA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/Jzj8iSw0vJ_nKLxrgCvA5r_jCUM.roa
Signing time: Sat 21 Feb 2026 17:57:26 +0000
ROA not before: Sat 21 Feb 2026 17:57:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204936
IP address blocks: 2a13:9ac0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/4VuQ_9-gqyhUheeERrhxmYsk3MA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/4VuQ_9-gqyhUheeERrhxmYsk3MA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4VuQ_9-gqyhUheeERrhxmYsk3MA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:81:59:6b:77:88:fc:03:eb:f7:0f:0f:c5:ca:d8:24:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e15b90ffdfa0ab285485e78446b871998b24dcc0
Validity
Not Before: Feb 21 17:57:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2738fc892c34bc9fe728bc6b802bc0e6bfe30943
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:28:0a:cc:29:77:68:fe:cd:bb:66:79:14:f4:
97:51:12:8c:75:3e:29:33:e9:e8:28:1e:11:2a:8d:
ae:ce:76:f3:52:ac:84:39:84:6a:1b:5b:63:ba:ee:
c1:e7:6b:e0:a1:09:35:ce:8b:8b:a6:26:9a:b1:ac:
b7:24:39:bf:8d:a5:8d:ff:c4:9b:ae:29:bb:be:cc:
2d:66:53:c9:6a:5e:39:18:bd:00:d0:0b:40:d3:e1:
40:b4:06:7e:37:15:39:46:75:d6:34:85:ba:cb:41:
d5:5d:18:d4:22:20:ee:9f:4e:14:49:d7:d8:85:19:
ed:d1:31:8f:cf:19:a1:a3:e9:7b:bd:dd:2c:9c:88:
72:24:1a:23:3a:1f:96:6a:a2:71:93:0c:bd:bc:ff:
69:14:7a:82:8a:90:c7:f4:7a:85:79:08:ae:c8:16:
03:3a:dd:29:2c:37:1c:d6:70:d2:fa:fc:b4:e4:cb:
92:6a:90:6b:0b:2a:4d:0c:6e:cf:b8:1f:ae:f2:9a:
f9:f6:15:e9:99:fa:3b:c7:9e:aa:80:76:a0:43:dd:
45:86:41:03:04:c0:c4:4f:51:cc:07:78:62:38:00:
80:ee:f4:fd:d4:8a:7a:23:95:46:f3:b8:5b:3e:64:
4d:3f:fa:1a:54:8d:62:21:13:e3:7e:c1:2f:7b:ad:
a3:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:38:FC:89:2C:34:BC:9F:E7:28:BC:6B:80:2B:C0:E6:BF:E3:09:43
X509v3 Authority Key Identifier:
keyid:E1:5B:90:FF:DF:A0:AB:28:54:85:E7:84:46:B8:71:99:8B:24:DC:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VuQ_9-gqyhUheeERrhxmYsk3MA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/Jzj8iSw0vJ_nKLxrgCvA5r_jCUM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/4VuQ_9-gqyhUheeERrhxmYsk3MA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9ac0::/29
Signature Algorithm: sha256WithRSAEncryption
1c:aa:1c:12:ca:39:3e:16:d4:dc:26:a8:5a:65:b4:e7:1b:6d:
d3:84:43:27:f8:ed:da:a2:8d:18:5e:14:36:4b:7e:13:aa:2b:
1f:03:a3:2c:2d:77:d2:68:0b:9f:2e:dc:00:29:e9:7a:39:78:
9b:ea:fa:48:c8:38:e8:ba:ff:7d:83:78:76:a3:fd:42:2b:51:
45:64:bc:9b:7d:d3:03:f3:9f:27:7f:33:14:c9:7a:0d:62:84:
fa:ce:85:9f:45:58:da:16:c5:15:93:c6:a1:e4:4c:7a:5d:9f:
59:9e:63:ca:7d:65:3d:7e:a2:9b:5c:c5:e0:2f:ec:e8:fa:d7:
a7:d5:54:cb:0b:b8:00:f4:ce:fe:ba:ce:d1:94:64:2c:fa:8e:
8b:4e:54:ad:0d:eb:d1:63:ad:f4:63:db:74:75:42:20:71:16:
b9:dc:38:3e:de:6d:5f:57:87:b6:b1:7c:76:f1:b6:75:31:90:
be:a7:65:45:e9:b9:a4:6f:5a:4e:f9:db:bd:d7:64:d5:a6:59:
d6:26:0e:9b:e2:66:76:d1:b8:5f:b9:06:32:59:fc:07:e9:e7:
1f:0d:7b:dc:08:bc:35:e5:e3:e2:13:39:6d:75:b7:f7:cc:c3:
dc:a1:33:c5:8f:80:57:e6:67:55:79:fd:29:13:00:39:b2:5d:
23:1c:58:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:15:16 2026 by rpki-client