Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/JtO7qR3b0Sbf_bMm2ZZf38XlgW0.roa
File: JtO7qR3b0Sbf_bMm2ZZf38XlgW0.roa (raw, json)
Hash identifier: Xv7/+jGUByuWwIlTxgEz+e13PVfFQwso8wA5vIJGZu0=
Subject key identifier: 26:D3:BB:A9:1D:DB:D1:26:DF:FD:B3:26:D9:96:5F:DF:C5:E5:81:6D
Certificate issuer: /CN=aff6f85aad101c456c1ac9a01a7192fc5788e92c
Certificate serial: 01A0A741E1C53E603BAC08C173B83DF49639
Authority key identifier: AF:F6:F8:5A:AD:10:1C:45:6C:1A:C9:A0:1A:71:92:FC:57:88:E9:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/JtO7qR3b0Sbf_bMm2ZZf38XlgW0.roa
Signing time: Tue 15 Sep 2026 22:48:27 +0000
ROA not before: Tue 15 Sep 2026 22:48:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 4181
IP address blocks: 2.57.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.mft
rsync://rpki.ripe.net/repository/DEFAULT/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a7:41:e1:c5:3e:60:3b:ac:08:c1:73:b8:3d:f4:96:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aff6f85aad101c456c1ac9a01a7192fc5788e92c
Validity
Not Before: Sep 15 22:48:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=26d3bba91ddbd126dffdb326d9965fdfc5e5816d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:02:1e:85:b4:21:bd:02:e1:6e:ef:8c:66:12:
4b:1a:59:eb:ac:d1:73:62:6e:b4:1d:3d:e4:89:5d:
a3:99:a1:b3:ca:e0:80:cc:90:f4:70:63:cb:ec:31:
7d:44:44:b4:2a:da:79:d9:e6:98:d4:1a:1e:41:0b:
42:b6:39:8e:27:ad:d1:ed:12:64:ad:96:1e:11:6c:
3e:44:6d:08:9a:8d:54:42:ad:f1:6c:e2:a1:1b:91:
ff:de:5e:2e:77:e4:5a:b5:ae:ee:77:95:48:c0:af:
35:84:50:f0:d1:1e:05:6d:d3:e7:69:67:d6:bf:c0:
41:30:2c:00:6a:6e:79:0c:1b:39:85:57:16:d2:6b:
e3:47:a8:e7:db:5f:3b:4e:73:25:4a:35:d0:09:27:
7f:87:b0:9d:01:68:0b:ec:9c:9f:9c:25:b7:15:fd:
63:d3:43:d2:26:3b:c8:4d:1d:36:3d:9c:f8:47:86:
e7:a2:7d:92:a1:c5:46:49:d5:68:7d:4d:4c:04:95:
95:f8:18:ea:14:33:be:1d:1e:5e:7b:f9:85:7d:64:
15:2f:aa:26:1d:7b:93:a6:fb:bb:56:f6:66:6e:b3:
31:0a:df:f2:47:33:ed:30:9b:74:21:52:06:55:06:
ad:e0:be:16:92:30:de:11:51:db:7b:f7:2a:60:94:
bd:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:D3:BB:A9:1D:DB:D1:26:DF:FD:B3:26:D9:96:5F:DF:C5:E5:81:6D
X509v3 Authority Key Identifier:
keyid:AF:F6:F8:5A:AD:10:1C:45:6C:1A:C9:A0:1A:71:92:FC:57:88:E9:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/JtO7qR3b0Sbf_bMm2ZZf38XlgW0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.68.0/24
Signature Algorithm: sha256WithRSAEncryption
56:22:af:22:bf:d8:0b:f3:f3:3c:3a:b0:f2:ec:df:74:6d:63:
98:a5:1c:83:ba:a4:62:60:b4:c4:49:c4:8a:9d:70:8f:80:1a:
40:6c:f2:52:0b:d3:a0:ae:b5:75:0c:71:d3:84:2f:4d:32:ca:
0e:58:69:57:65:ee:96:a2:2c:58:b2:09:fc:b6:6f:e7:5b:67:
a1:93:26:1c:40:16:f9:ff:4d:2b:ff:b3:57:aa:11:66:03:5c:
6e:ab:15:ff:66:6c:aa:77:af:b9:3d:27:43:ce:79:3b:5c:95:
77:24:8a:a2:bd:9d:ec:c6:25:9c:02:97:3f:45:10:75:7c:9d:
80:c2:07:79:ea:4c:6b:67:18:5c:1c:67:6c:31:6c:82:99:bb:
c3:ac:f7:e8:59:92:0c:9d:92:74:27:e5:7f:c7:bf:db:53:4a:
1a:08:e4:3f:45:9c:eb:70:bb:c3:76:1a:25:62:b6:f2:36:98:
15:3d:4b:99:25:b9:72:c6:b3:fc:6f:1e:35:61:c6:cc:68:a2:
4b:92:63:6f:a6:a7:07:82:6a:93:92:73:7a:75:01:cc:af:b8:
87:3f:7d:a8:f5:d7:61:5f:05:a8:31:7f:d0:8d:54:d4:ca:01:
ab:f6:02:f9:a5:1f:d0:78:cc:08:34:1d:97:a7:44:0b:a5:27:
79:80:9c:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 11:49:36 2026 by rpki-client