Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/JvxlDZVo3kDjpCcTuH9rQo7wYxc.roa
File: JvxlDZVo3kDjpCcTuH9rQo7wYxc.roa (raw, json)
Hash identifier: 60TmXCWov36c+x54dXI2m7Kjji7w3A2ev0Z1f/72VRg=
Subject key identifier: 26:FC:65:0D:95:68:DE:40:E3:A4:27:13:B8:7F:6B:42:8E:F0:63:17
Certificate issuer: /CN=756127c6cd4e35d98f0a4ba362ce273164971942
Certificate serial: 01A0A91B33DEE60CADD6ABE3D0CC63A284B7
Authority key identifier: 75:61:27:C6:CD:4E:35:D9:8F:0A:4B:A3:62:CE:27:31:64:97:19:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dWEnxs1ONdmPCkujYs4nMWSXGUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/JvxlDZVo3kDjpCcTuH9rQo7wYxc.roa
Signing time: Wed 16 Sep 2026 07:25:27 +0000
ROA not before: Wed 16 Sep 2026 07:25:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210447
IP address blocks: 2a04:ac01:b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/dWEnxs1ONdmPCkujYs4nMWSXGUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/dWEnxs1ONdmPCkujYs4nMWSXGUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dWEnxs1ONdmPCkujYs4nMWSXGUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 13:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a9:1b:33:de:e6:0c:ad:d6:ab:e3:d0:cc:63:a2:84:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=756127c6cd4e35d98f0a4ba362ce273164971942
Validity
Not Before: Sep 16 07:25:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=26fc650d9568de40e3a42713b87f6b428ef06317
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8c:31:84:94:1a:db:88:39:25:ba:e8:09:29:
3b:dc:5b:36:a6:ac:71:b3:24:1b:b3:1a:f5:ed:23:
9e:c3:8b:ba:ae:6c:b5:7d:b2:a4:a0:86:ad:d0:66:
83:3b:51:cb:de:c7:87:8c:6f:47:3a:9d:55:43:56:
a5:0b:86:00:17:a9:e6:09:8c:b9:50:f3:4e:97:ac:
09:66:1f:3b:c5:ee:5b:66:76:56:2d:2b:34:9c:df:
dd:d4:53:a8:18:df:fd:25:08:0c:0b:a4:b1:1e:58:
af:82:64:29:9f:98:a1:27:1e:06:b0:73:44:2f:f8:
24:6d:cb:f5:ef:50:7f:16:bd:28:f3:41:5a:d8:c9:
90:c6:ca:fc:bf:39:15:38:92:e1:e2:c4:de:5e:62:
7a:2c:d9:d7:25:cd:dd:ef:f1:2f:48:4f:dd:7f:b7:
9f:f7:fa:eb:4f:94:f6:33:ca:79:7a:ea:13:61:1f:
ad:4f:3e:a2:25:ed:cf:46:ed:88:b6:4f:52:e7:83:
3c:81:78:19:ac:68:12:2e:24:85:8e:4f:3d:d6:ae:
75:72:05:a6:48:f3:46:da:f8:57:63:23:6b:3a:c0:
b6:df:c5:37:4e:20:cd:e0:6e:35:67:81:14:d0:13:
54:ba:45:14:b7:29:13:99:b2:50:8c:68:b6:9a:d9:
4e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:FC:65:0D:95:68:DE:40:E3:A4:27:13:B8:7F:6B:42:8E:F0:63:17
X509v3 Authority Key Identifier:
keyid:75:61:27:C6:CD:4E:35:D9:8F:0A:4B:A3:62:CE:27:31:64:97:19:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dWEnxs1ONdmPCkujYs4nMWSXGUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/JvxlDZVo3kDjpCcTuH9rQo7wYxc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/dWEnxs1ONdmPCkujYs4nMWSXGUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:ac01:b::/48
Signature Algorithm: sha256WithRSAEncryption
5e:6b:4c:29:50:13:21:96:05:3f:03:36:e8:78:ab:01:22:11:
b1:c9:7d:53:1d:1f:cc:31:74:8e:53:1c:ac:4c:95:e5:cc:13:
20:81:5d:3c:35:27:4a:29:1c:5a:8a:eb:1f:e5:b1:91:24:23:
7a:b2:ab:03:a9:54:9b:62:3d:8b:1a:c8:e7:23:d3:bf:19:c8:
e8:11:d0:e2:c1:75:22:34:89:24:10:d0:c6:ce:c0:ad:49:8a:
00:3b:06:80:59:74:44:88:38:d7:87:28:cd:91:05:8f:38:50:
28:0e:2f:67:63:6b:89:61:57:f1:84:b5:38:0b:66:be:3e:68:
09:91:4c:79:c3:d6:ae:cd:18:41:77:cf:ed:37:40:ba:ab:05:
cd:ba:dd:af:fb:bc:60:81:ed:64:2e:5f:36:0b:22:8f:09:57:
49:2a:af:18:a2:c5:b9:b8:11:2d:9e:71:81:71:ea:b8:81:8a:
c1:be:64:43:64:2a:ab:a9:da:d7:39:73:1a:4d:71:c0:f6:4a:
9e:11:d3:0a:34:d3:c5:a7:66:06:e1:72:6e:38:c7:21:0e:18:
37:3e:ca:4a:4d:c4:2a:18:72:03:9a:b5:de:1f:a5:62:5e:20:
ec:df:3f:60:e8:7a:2e:ca:7f:5b:69:9b:a5:af:47:31:b0:3d:
47:8a:52:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:32:19 2026 by rpki-client