Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/a5d286-8670-47e4-97b4-24cf8a61d7e8/1/o-jkiuXknvAWJgTD7XTOry_H1e4.roa
File: o-jkiuXknvAWJgTD7XTOry_H1e4.roa (raw, json)
Hash identifier: lQp7LfhTDlpGVCOzj7Xj8AVeLXwLI+WwNznC1UJADMY=
Subject key identifier: A3:E8:E4:8A:E5:E4:9E:F0:16:26:04:C3:ED:74:CE:AF:2F:C7:D5:EE
Certificate issuer: /CN=8a28ff310da7df8309cfab4dcf9a235842b60872
Certificate serial: 019D49D6C7FD2444F3BA4001D0FD6DBF9B7E
Authority key identifier: 8A:28:FF:31:0D:A7:DF:83:09:CF:AB:4D:CF:9A:23:58:42:B6:08:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iij_MQ2n34MJz6tNz5ojWEK2CHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/a5d286-8670-47e4-97b4-24cf8a61d7e8/1/o-jkiuXknvAWJgTD7XTOry_H1e4.roa
Signing time: Wed 01 Apr 2026 16:18:25 +0000
ROA not before: Wed 01 Apr 2026 16:18:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214569
IP address blocks: 151.216.1.0/24 maxlen: 24
212.47.35.0/24 maxlen: 24
2a06:b700::/48 maxlen: 48
2a06:b700:1::/48 maxlen: 48
2a06:b700:2::/48 maxlen: 48
2a06:b700:a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/a5d286-8670-47e4-97b4-24cf8a61d7e8/1/iij_MQ2n34MJz6tNz5ojWEK2CHI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/a5d286-8670-47e4-97b4-24cf8a61d7e8/1/iij_MQ2n34MJz6tNz5ojWEK2CHI.mft
rsync://rpki.ripe.net/repository/DEFAULT/iij_MQ2n34MJz6tNz5ojWEK2CHI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:49:d6:c7:fd:24:44:f3:ba:40:01:d0:fd:6d:bf:9b:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a28ff310da7df8309cfab4dcf9a235842b60872
Validity
Not Before: Apr 1 16:18:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a3e8e48ae5e49ef0162604c3ed74ceaf2fc7d5ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a4:22:5a:f4:e9:8a:91:64:c7:e9:7f:b5:91:
84:94:91:31:aa:fa:a8:c3:1a:f5:a3:dc:71:53:7e:
0e:21:8b:1b:73:0e:26:36:9e:24:87:7c:c3:79:d8:
b3:18:69:40:73:63:53:fe:e5:6c:12:1b:94:60:32:
65:8d:bb:e4:2d:96:5f:e6:d2:da:39:5e:17:64:b1:
bb:c0:bf:69:f3:63:d1:81:0d:be:5b:04:ac:b0:1a:
de:e5:cf:e4:0b:d0:2d:b6:54:a2:30:6d:ba:37:d8:
17:20:c1:8e:88:86:36:29:44:57:bb:50:77:ce:28:
1a:8d:3d:b3:b9:0e:4f:b3:4a:5c:6b:72:d4:fe:09:
8f:aa:b0:d8:39:12:d1:6e:24:c4:01:89:f7:65:62:
47:40:94:86:9c:86:1c:62:56:43:40:e5:65:1c:22:
a8:d9:25:7f:1d:e9:a7:08:02:3d:cb:70:2b:83:75:
df:71:21:ec:d8:42:c1:be:47:d3:7e:89:6c:72:43:
89:16:d8:f7:48:bb:18:00:17:81:ee:40:14:83:af:
77:78:a3:a1:c7:91:06:cc:20:16:87:9a:7c:1e:b8:
c1:d1:39:6e:90:cc:ab:91:d2:ac:5e:a9:2d:75:96:
04:b3:55:de:2d:88:28:bd:17:c3:fc:1c:57:8b:8f:
ea:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:E8:E4:8A:E5:E4:9E:F0:16:26:04:C3:ED:74:CE:AF:2F:C7:D5:EE
X509v3 Authority Key Identifier:
keyid:8A:28:FF:31:0D:A7:DF:83:09:CF:AB:4D:CF:9A:23:58:42:B6:08:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iij_MQ2n34MJz6tNz5ojWEK2CHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a5d286-8670-47e4-97b4-24cf8a61d7e8/1/o-jkiuXknvAWJgTD7XTOry_H1e4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a5d286-8670-47e4-97b4-24cf8a61d7e8/1/iij_MQ2n34MJz6tNz5ojWEK2CHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.1.0/24
212.47.35.0/24
IPv6:
2a06:b700::-2a06:b700:2:ffff:ffff:ffff:ffff:ffff
2a06:b700:a::/48
Signature Algorithm: sha256WithRSAEncryption
23:f2:fc:e5:22:ef:b4:45:c7:70:37:94:3e:d1:99:3f:14:e8:
23:49:ce:2a:2f:0a:22:03:9b:48:1b:d3:8f:1f:c0:a2:3a:9b:
5d:d1:b6:b7:9c:3a:ba:05:6b:f4:ce:11:6c:c0:dd:9b:e5:cd:
78:3d:21:9b:c0:da:2f:60:51:ba:e0:48:cd:47:bd:f6:df:65:
ed:52:4c:d4:92:24:6e:6e:16:12:f0:50:57:77:b6:4e:1f:99:
09:55:95:e3:5d:65:4c:55:2b:9a:e2:24:a4:52:56:13:af:1f:
dc:af:c5:f1:5d:a9:e1:23:65:9b:9c:cf:bd:36:cd:c5:23:33:
f2:aa:f3:2f:04:71:f9:8c:cf:a4:b7:3f:21:b7:36:c2:54:3d:
1e:63:5c:f7:e3:72:bc:31:f9:12:7f:17:56:bd:ed:37:0b:cc:
8d:e0:81:46:6a:ae:fb:a6:b3:81:d2:06:37:82:5a:f7:a9:a2:
b8:93:2a:91:f8:c2:29:00:86:f2:4b:ea:06:3b:3a:3a:03:2f:
c4:b1:cd:9d:39:e4:4a:5f:2a:bd:32:7a:2a:e6:33:02:04:41:
1f:72:80:84:c6:8c:4a:e2:41:f8:08:c6:1c:53:a6:f2:7d:68:
b4:fa:96:4f:30:b2:29:11:20:d9:01:5e:03:ad:9b:b3:4d:e6:
c7:c1:10:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:12:23 2026 by rpki-client