Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8b/067650-dd11-449f-ace3-20b6f2cd47c9/1/JJAZ-O4IJgQLGyAfc-8wTWBxykA.roa
File: JJAZ-O4IJgQLGyAfc-8wTWBxykA.roa (raw, json)
Hash identifier: YSeY7xqTEtO7PqfrAlhTz5nmFBQdhs7hiSlxvWOUhkI=
Subject key identifier: 24:90:19:F8:EE:08:26:04:0B:1B:20:1F:73:EF:30:4D:60:71:CA:40
Certificate issuer: /CN=e0527776674f9baf0bc295ed260f16b0d83b676d
Certificate serial: 01A0570889A6F83ED0BF022F01D59924472C
Authority key identifier: E0:52:77:76:67:4F:9B:AF:0B:C2:95:ED:26:0F:16:B0:D8:3B:67:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FJ3dmdPm68LwpXtJg8WsNg7Z20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/067650-dd11-449f-ace3-20b6f2cd47c9/1/JJAZ-O4IJgQLGyAfc-8wTWBxykA.roa
Signing time: Mon 31 Aug 2026 08:56:12 +0000
ROA not before: Mon 31 Aug 2026 08:56:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203024
IP address blocks: 2a0f:9800::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/067650-dd11-449f-ace3-20b6f2cd47c9/1/4FJ3dmdPm68LwpXtJg8WsNg7Z20.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/067650-dd11-449f-ace3-20b6f2cd47c9/1/4FJ3dmdPm68LwpXtJg8WsNg7Z20.mft
rsync://rpki.ripe.net/repository/DEFAULT/4FJ3dmdPm68LwpXtJg8WsNg7Z20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:57:08:89:a6:f8:3e:d0:bf:02:2f:01:d5:99:24:47:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0527776674f9baf0bc295ed260f16b0d83b676d
Validity
Not Before: Aug 31 08:56:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=249019f8ee0826040b1b201f73ef304d6071ca40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:7f:9a:e4:11:0c:78:d6:79:ee:e1:06:fc:ca:
b6:30:8f:4e:65:60:46:a9:8b:ba:de:26:be:7b:e8:
2e:3e:7e:22:75:7a:65:42:9b:1d:89:f3:0d:d9:65:
6f:8f:66:14:ed:44:c1:63:7d:12:c3:bd:60:f6:3e:
5f:b0:62:4e:70:72:0f:5c:82:bc:bf:65:ea:68:1c:
df:99:a8:fe:fc:af:8d:41:80:80:d7:b2:56:a0:a8:
46:f5:fa:28:dc:49:63:20:50:c5:7b:10:06:0b:02:
2a:a7:82:24:97:47:85:5b:17:9b:09:00:d9:26:04:
5f:17:af:78:a6:8e:40:7c:1b:37:e1:32:32:da:4a:
c3:4e:5b:4e:50:c0:c6:52:a5:4c:2c:8c:39:85:c1:
41:cc:c5:bf:9d:be:56:44:d3:eb:16:68:ae:c6:4c:
36:7e:3d:a6:4b:31:81:3d:00:14:57:b3:07:dd:32:
b4:3b:c2:56:a6:c1:56:ad:fb:2e:b4:66:a5:91:5f:
3f:3b:60:04:48:df:8d:fa:00:e1:d9:b5:d3:d0:33:
92:44:e7:08:5f:95:26:66:84:03:d8:3d:41:69:42:
fc:c6:2f:b6:e0:f5:26:f7:28:8a:70:e5:b9:44:28:
c5:e2:1c:c8:c0:ce:3a:ab:3b:43:e8:6a:9d:7a:ba:
9b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:90:19:F8:EE:08:26:04:0B:1B:20:1F:73:EF:30:4D:60:71:CA:40
X509v3 Authority Key Identifier:
keyid:E0:52:77:76:67:4F:9B:AF:0B:C2:95:ED:26:0F:16:B0:D8:3B:67:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FJ3dmdPm68LwpXtJg8WsNg7Z20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/067650-dd11-449f-ace3-20b6f2cd47c9/1/JJAZ-O4IJgQLGyAfc-8wTWBxykA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/067650-dd11-449f-ace3-20b6f2cd47c9/1/4FJ3dmdPm68LwpXtJg8WsNg7Z20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9800::/29
Signature Algorithm: sha256WithRSAEncryption
30:b6:b5:a3:40:9f:fe:83:0c:1a:c1:28:06:45:8a:33:f1:fc:
9c:e0:66:fc:ac:0b:9f:26:ab:e8:4c:53:68:da:a4:5f:46:fb:
46:e8:07:7a:bd:8f:1f:40:1c:65:6c:aa:f1:95:e7:b0:c4:71:
29:83:6d:96:51:09:66:1b:53:88:2b:8d:99:0c:71:28:a3:b0:
bc:65:31:44:a3:cc:68:51:d6:23:84:8d:7f:1c:b3:1f:34:3d:
ed:75:fe:6d:c1:96:ce:4f:7c:85:1e:0f:33:c7:c2:00:6a:de:
68:9e:08:01:42:c1:8d:c6:b1:34:38:7a:18:18:45:9b:1b:5a:
56:06:00:64:6f:9c:2c:5b:44:0d:1f:eb:21:58:0b:91:2b:af:
04:37:34:35:43:45:94:8c:db:27:b9:bc:eb:cc:71:c8:53:36:
98:ed:2c:6b:d6:c7:c1:35:4d:29:32:a2:ab:b8:1f:6d:40:5e:
cf:b5:60:6a:bd:b0:b9:fe:d5:94:2b:28:d5:6e:ad:d6:ba:89:
7e:7d:de:3b:ad:5c:a3:85:06:0c:5a:74:92:c5:06:cd:71:57:
41:4a:10:58:0e:37:52:bb:c6:fd:92:6f:de:b4:8d:a6:cf:ca:
e4:bc:49:6b:d6:9f:af:b4:68:78:ec:6f:c4:12:d9:fe:85:ff:
3c:3c:ed:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 20:11:36 2026 by rpki-client