Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/jG8u0DdMeVDnzAs9ajzk41GxjYI.roa
File: jG8u0DdMeVDnzAs9ajzk41GxjYI.roa (raw, json)
Hash identifier: 2i9+DbG6rnpNrbDbrTa+vcvNqwfsERMCoNQAt/YdO9A=
Subject key identifier: 8C:6F:2E:D0:37:4C:79:50:E7:CC:0B:3D:6A:3C:E4:E3:51:B1:8D:82
Certificate issuer: /CN=e15b90ffdfa0ab285485e78446b871998b24dcc0
Certificate serial: 019C815CA89D8BCDEBF9C4C1274A720B1744
Authority key identifier: E1:5B:90:FF:DF:A0:AB:28:54:85:E7:84:46:B8:71:99:8B:24:DC:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VuQ_9-gqyhUheeERrhxmYsk3MA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/jG8u0DdMeVDnzAs9ajzk41GxjYI.roa
Signing time: Sat 21 Feb 2026 18:00:59 +0000
ROA not before: Sat 21 Feb 2026 18:00:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 23532
IP address blocks: 2a13:9ac0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/4VuQ_9-gqyhUheeERrhxmYsk3MA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/4VuQ_9-gqyhUheeERrhxmYsk3MA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4VuQ_9-gqyhUheeERrhxmYsk3MA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:81:5c:a8:9d:8b:cd:eb:f9:c4:c1:27:4a:72:0b:17:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e15b90ffdfa0ab285485e78446b871998b24dcc0
Validity
Not Before: Feb 21 18:00:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8c6f2ed0374c7950e7cc0b3d6a3ce4e351b18d82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a6:0e:d0:c3:bd:e4:89:c1:4a:61:18:01:0c:
92:b7:3d:87:9f:dd:99:ee:1c:c1:3b:9a:37:f8:b2:
64:fa:99:c3:52:fe:78:6a:2a:d5:32:b0:28:a1:6f:
98:c0:28:bc:f8:d1:65:5e:00:87:77:e9:6f:21:37:
c3:e2:13:d5:17:87:08:23:84:60:bd:2b:7b:5a:d7:
b5:5f:7e:81:ae:db:eb:bf:3e:59:ac:02:5f:ba:e2:
aa:a3:04:0f:56:fa:3e:1c:f3:0d:4c:a4:71:d3:c1:
c8:79:aa:97:51:3d:f1:57:b9:77:9d:2e:7f:06:14:
e3:fe:4a:0a:d5:da:5c:c6:ba:b2:61:a4:ae:7b:26:
23:03:02:dd:31:83:df:88:dc:70:c3:04:f8:5f:97:
a8:a8:4f:86:25:dc:f3:54:78:7a:8d:c6:b9:a5:f6:
6f:2d:61:cd:2c:36:3f:a3:4a:d4:7a:97:b0:ad:db:
f6:48:95:35:15:b3:14:f7:a4:cf:ea:f1:25:9e:a3:
f3:61:b2:58:16:93:f6:9a:9b:07:e1:fb:26:92:2e:
76:05:25:5d:5d:24:88:9a:c8:50:9d:f8:e1:31:85:
3e:b9:90:23:71:69:75:03:7a:47:36:b2:91:1f:86:
bb:9b:3d:7d:15:f4:93:b0:af:86:d0:a5:45:e5:dd:
3e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:6F:2E:D0:37:4C:79:50:E7:CC:0B:3D:6A:3C:E4:E3:51:B1:8D:82
X509v3 Authority Key Identifier:
keyid:E1:5B:90:FF:DF:A0:AB:28:54:85:E7:84:46:B8:71:99:8B:24:DC:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VuQ_9-gqyhUheeERrhxmYsk3MA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/jG8u0DdMeVDnzAs9ajzk41GxjYI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/4VuQ_9-gqyhUheeERrhxmYsk3MA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9ac0::/29
Signature Algorithm: sha256WithRSAEncryption
b1:b9:a4:81:20:55:2e:ae:3b:21:0a:86:13:a0:cf:4f:bb:f0:
82:a1:76:a0:c7:5a:b3:5d:fa:69:58:a4:c2:87:a0:5b:29:9d:
ec:67:40:40:8e:3d:8e:bf:5a:d6:b4:b9:60:07:82:f3:2a:3e:
f3:33:ff:eb:6f:40:6c:b4:27:a2:f4:3b:df:3e:dd:0f:b6:2a:
31:39:3f:e4:83:3a:b6:a6:9e:a8:a0:e9:0c:9a:d4:35:07:4c:
bd:e4:dd:48:b9:ac:a8:a0:32:3e:43:8f:73:e4:54:3e:5e:b5:
99:e9:b1:0d:48:b6:fc:02:32:f7:9d:9f:c6:92:b4:1b:18:95:
01:f2:a7:25:ad:62:e2:6b:97:34:30:15:b3:2c:2c:c1:87:30:
e3:6a:5d:cd:10:9c:36:32:ee:0f:78:10:49:c0:14:37:8c:05:
ba:99:05:19:f5:e2:22:de:76:23:2e:40:91:75:8c:bd:4e:ac:
a1:33:0e:6e:d5:a3:4d:e1:dc:4f:c1:97:21:91:aa:c2:4b:d8:
33:a5:1f:a5:35:0e:bc:e5:2a:ca:b4:17:32:99:5f:3d:32:30:
3c:c6:fb:2e:41:42:d6:70:a8:3c:a7:d4:e4:de:51:fd:de:11:
8f:0a:0f:1b:fb:ef:68:60:ef:3a:c8:a0:78:b0:62:93:3e:47:
b6:6a:a9:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:04:05 2026 by rpki-client