Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/jJalTDXzcGnXaC43q3HOWyaoCcA.roa
File: jJalTDXzcGnXaC43q3HOWyaoCcA.roa (raw, json)
Hash identifier: wrmOGmqc8X96HBOnr3StO0326vNLYoG7N707gY1wcjw=
Subject key identifier: 8C:96:A5:4C:35:F3:70:69:D7:68:2E:37:AB:71:CE:5B:26:A8:09:C0
Certificate issuer: /CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Certificate serial: 01A1171E564495F2EDDA9A4452231B160515
Authority key identifier: 56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/jJalTDXzcGnXaC43q3HOWyaoCcA.roa
Signing time: Wed 07 Oct 2026 16:07:06 +0000
ROA not before: Wed 07 Oct 2026 16:07:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219480
IP address blocks: 2a10:fa80:13::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 06:05:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:17:1e:56:44:95:f2:ed:da:9a:44:52:23:1b:16:05:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Validity
Not Before: Oct 7 16:07:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8c96a54c35f37069d7682e37ab71ce5b26a809c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ff:03:e1:d0:19:a0:ff:a0:78:7e:0d:9a:56:
10:a2:0b:fb:4b:58:cb:1c:3c:79:26:60:60:4e:1b:
04:b0:97:94:97:2f:e5:24:f3:89:9b:4d:87:36:49:
f5:0a:dd:79:b1:4f:09:f5:01:e9:04:80:4d:76:a0:
49:c3:9f:af:6a:83:f8:bb:91:a0:34:3d:d3:b4:7f:
d5:c1:2e:f9:82:09:d6:5a:34:55:56:d9:cd:71:3e:
cb:96:b0:bc:22:5d:24:6c:82:41:57:eb:7d:53:32:
c6:65:a5:9e:4d:c6:71:85:28:0c:f0:3d:1f:9d:06:
a2:f3:90:70:77:88:6e:d0:3d:85:16:46:dc:0c:d0:
b4:9c:fc:cc:dc:e7:ca:4d:14:b5:3f:26:8e:1f:c0:
e2:d4:78:8d:95:16:6e:8d:f6:e5:7d:7e:05:25:3f:
3b:1f:29:8f:a6:70:83:33:20:fe:01:e2:35:01:88:
61:c1:04:07:ca:85:f3:c8:4a:54:3d:d3:cb:32:fb:
d2:70:c8:bd:77:83:0d:2f:7f:aa:b9:65:ef:d3:ec:
d5:20:04:ad:b3:9a:6d:8b:6d:c4:c0:10:d2:0d:8e:
33:cb:1a:7a:7e:2c:3a:24:6f:6d:da:d8:7a:70:c3:
a5:fe:c8:54:df:df:a1:3f:bb:5b:c4:72:13:39:61:
ba:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:96:A5:4C:35:F3:70:69:D7:68:2E:37:AB:71:CE:5B:26:A8:09:C0
X509v3 Authority Key Identifier:
keyid:56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/jJalTDXzcGnXaC43q3HOWyaoCcA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:fa80:13::/48
Signature Algorithm: sha256WithRSAEncryption
21:56:c7:ec:5f:50:85:f3:90:3e:ab:8c:bc:b4:79:74:75:46:
f3:6d:42:7c:c6:df:83:7d:53:c6:e8:f7:62:c6:95:f9:4b:72:
b7:7c:3f:69:04:8e:3e:ce:b4:e3:ee:dc:71:0f:c4:9a:76:40:
20:e9:bb:c3:9b:eb:b8:c7:85:67:ad:a1:f1:3c:9d:ce:1e:43:
e5:5c:db:76:40:81:91:54:8a:73:34:4f:4d:3d:82:30:06:c7:
3c:bc:5b:47:a0:f4:1d:3b:07:73:32:c4:75:39:74:95:01:2c:
30:38:04:e2:8a:e0:77:5f:64:ab:c5:6b:a1:79:2d:83:22:3a:
b5:19:8f:71:9e:ba:2b:f5:1a:51:9d:26:d6:3c:49:3d:14:82:
63:01:c5:63:25:62:23:98:76:57:e7:61:c2:4d:15:a1:cd:4c:
d5:06:8d:9b:fb:45:77:de:28:68:32:06:9c:bb:89:7d:72:52:
ea:28:61:06:54:2d:4d:16:a0:e1:32:41:39:66:75:57:3d:a9:
fc:f1:2d:4e:f2:be:f8:e2:0f:f8:e7:22:29:e3:e0:e4:11:d8:
88:5e:08:c6:1a:d2:af:36:17:0c:d4:b4:27:66:43:57:2a:22:
a3:68:6f:18:57:d2:86:ad:94:04:3b:65:ed:34:0a:7b:e9:a5:
6c:c1:f2:57
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAaEXHlZElfLt2ppEUiMbFgUVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2NTliMGJhODQwN2JlMTFjZmM5MTFiZDMxZWQxNDBjZDFj
NjA0NmMwHhcNMjYxMDA3MTYwNzA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4Yzk2YTU0YzM1ZjM3MDY5ZDc2ODJlMzdhYjcxY2U1YjI2YTgwOWMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkv8D4dAZoP+geH4NmlYQogv7S1jL
HDx5JmBgThsEsJeUly/lJPOJm02HNkn1Ct15sU8J9QHpBIBNdqBJw5+vaoP4u5Gg
ND3TtH/VwS75ggnWWjRVVtnNcT7LlrC8Il0kbIJBV+t9UzLGZaWeTcZxhSgM8D0f
nQai85Bwd4hu0D2FFkbcDNC0nPzM3OfKTRS1PyaOH8Di1HiNlRZujfblfX4FJT87
HymPpnCDMyD+AeI1AYhhwQQHyoXzyEpUPdPLMvvScMi9d4MNL3+quWXv0+zVIASt
s5pti23EwBDSDY4zyxp6fiw6JG9t2th6cMOl/shU39+hP7tbxHITOWG6BQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFIyWpUw183Bp12guN6txzlsmqAnAMB8GA1UdIwQY
MBaAFFZZsLqEB74Rz8kRvTHtFAzRxgRsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVmxtd3VvUUh2aEhQeVJHOU1lMFVETkhHQkd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9kZDhlMzEtMDBiNS00MjEyLTllMDEt
MjM5NGM2NjAwMDIyLzEvakphbFREWHpjR25YYUM0M3EzSE9XeWFvQ2NBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi9kZDhlMzEtMDBiNS00MjEyLTllMDEtMjM5NGM2NjAwMDIy
LzEvVmxtd3VvUUh2aEhQeVJHOU1lMFVETkhHQkd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhD6gAAT
MA0GCSqGSIb3DQEBCwUAA4IBAQAhVsfsX1CF85A+q4y8tHl0dUbzbUJ8xt+DfVPG
6PdixpX5S3K3fD9pBI4+zrTj7txxD8SadkAg6bvDm+u4x4VnraHxPJ3OHkPlXNt2
QIGRVIpzNE9NPYIwBsc8vFtHoPQdOwdzMsR1OXSVASwwOATiiuB3X2SrxWuheS2D
Ijq1GY9xnror9RpRnSbWPEk9FIJjAcVjJWIjmHZX52HCTRWhzUzVBo2b+0V33iho
Mgacu4l9clLqKGEGVC1NFqDhMkE5ZnVXPan88S1O8r744g/45yIp4+DkEdiIXgjG
GtKvNhcM1LQnZkNXKiKjaG8YV9KGrZQEO2XtNAp76aVswfJX
-----END CERTIFICATE-----
Generated at Mon Oct 12 15:26:52 2026 by rpki-client