Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/jfJeqaf8F9qxqJv9BDU4nT9KLmM.roa
File: jfJeqaf8F9qxqJv9BDU4nT9KLmM.roa (raw, json)
Hash identifier: KuKgnJpwgTdWsYofrGka8om1CxXqSrXWrgBzMLNV/sU=
Subject key identifier: 8D:F2:5E:A9:A7:FC:17:DA:B1:A8:9B:FD:04:35:38:9D:3F:4A:2E:63
Certificate issuer: /CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Certificate serial: 019EBDBC40FB0C69ADC30E04D01DECF99941
Authority key identifier: 56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/jfJeqaf8F9qxqJv9BDU4nT9KLmM.roa
Signing time: Fri 12 Jun 2026 21:28:11 +0000
ROA not before: Fri 12 Jun 2026 21:28:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6517
IP address blocks: 2a10:fa81:b00::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bd:bc:40:fb:0c:69:ad:c3:0e:04:d0:1d:ec:f9:99:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Validity
Not Before: Jun 12 21:28:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8df25ea9a7fc17dab1a89bfd0435389d3f4a2e63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:29:48:df:48:dc:3c:60:d4:c9:3d:36:0e:70:
e3:4c:b0:b4:b8:e0:a3:60:eb:a8:9a:9f:1d:f9:38:
9a:57:b0:a2:27:7c:82:cb:8d:ed:2f:90:fc:63:49:
de:6c:48:27:97:c9:a0:06:74:db:b9:d4:a0:65:f6:
d7:22:bc:db:dd:06:03:81:ae:f3:84:61:48:c9:89:
b9:b5:c9:75:96:71:86:4b:b4:2f:ab:3a:f6:8c:46:
cd:e8:bc:8a:bd:f1:00:ea:87:95:1c:b9:75:65:1e:
fd:50:a1:c5:75:cf:f1:b3:3e:ed:67:38:c9:0a:48:
3b:16:4b:b4:8b:53:72:91:8e:a0:4d:52:55:62:14:
cc:d8:86:f8:a3:b3:7c:ab:5d:7a:5d:7d:9a:c8:1d:
22:49:f2:a4:2a:b6:b3:9e:97:67:85:42:06:b9:be:
39:44:46:d2:64:8a:2f:10:a5:91:03:bf:e5:9a:f6:
a7:f3:8f:3c:48:5d:73:84:04:44:2e:37:31:13:f1:
36:64:1c:a4:15:51:7b:eb:7b:e0:a1:01:32:dd:bd:
1e:ea:ae:62:48:21:46:9e:af:d3:24:f6:7d:16:53:
1f:bc:e4:ff:ab:7f:23:88:94:5e:38:d8:81:10:24:
5c:d5:9d:73:1f:79:c7:c5:90:33:a6:be:70:e9:5c:
9d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:F2:5E:A9:A7:FC:17:DA:B1:A8:9B:FD:04:35:38:9D:3F:4A:2E:63
X509v3 Authority Key Identifier:
keyid:56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/jfJeqaf8F9qxqJv9BDU4nT9KLmM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:fa81:b00::/40
Signature Algorithm: sha256WithRSAEncryption
44:88:a5:94:5a:6e:03:8a:1b:e2:54:2c:4b:59:10:c6:29:fa:
46:90:f8:90:e6:41:d9:c4:d5:71:9f:49:24:4a:2b:ce:30:5e:
77:0f:66:74:c6:13:9d:f8:59:09:05:93:3b:2a:ec:ce:eb:33:
de:c6:ef:0f:bd:95:ee:18:26:0f:f6:ee:e2:dc:33:75:fc:b0:
d9:9e:84:f4:54:66:5c:89:c1:86:8a:c4:18:cc:e7:00:02:58:
fe:6d:fa:20:30:04:9d:3a:fd:7c:16:cd:39:ad:70:00:2b:83:
e1:04:95:1a:78:ee:7d:71:68:93:ac:5c:d3:3f:f8:86:9e:06:
f9:70:39:3c:c3:a0:f5:75:87:9d:5c:5b:dd:c5:56:60:3d:ce:
a1:fa:4a:ee:ea:86:65:0b:b7:cf:bf:c4:2a:03:63:a7:50:a3:
ad:ed:48:51:cf:fd:b9:b3:5f:a8:d0:b1:44:36:f1:7e:e5:5e:
68:3a:d5:2a:fc:6d:8e:8e:17:4f:fa:ce:b4:2d:01:ca:2b:ee:
69:52:72:7c:46:4d:21:18:06:84:99:a0:33:a3:85:8a:51:c4:
2f:9f:c6:dc:3a:86:c9:b7:a7:aa:d7:61:9a:e6:bf:ce:05:00:
3f:bd:55:d8:a6:b9:c5:cd:87:90:57:95:ea:34:57:46:14:5d:
06:3a:16:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:28:16 2026 by rpki-client