Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nljobsnijders/Af5Z3fGjApzd6ABRUbfgesL76xc.roa
File: Af5Z3fGjApzd6ABRUbfgesL76xc.roa (raw, json)
Hash identifier: L0Oq8d1G27Uuk06PEOv9WThZnzYqH/Sxfm+hCtY9DlU=
Subject key identifier: 01:FE:59:DD:F1:A3:02:9C:DD:E8:00:51:51:B7:E0:7A:C2:FB:EB:17
Certificate issuer: /CN=caa805dbac364749b9b115590ab6ef0f970cdbd8
Certificate serial: 026A2A
Authority key identifier: CA:A8:05:DB:AC:36:47:49:B9:B1:15:59:0A:B6:EF:0F:97:0C:DB:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yqgF26w2R0m5sRVZCrbvD5cM29g.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/Af5Z3fGjApzd6ABRUbfgesL76xc.roa
Signing time: Fri 27 Mar 2026 20:45:51 +0000
ROA not before: Fri 27 Mar 2026 20:45:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 2a0e:b240::/29 maxlen: 29
Validation: OK
Signature path: rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/yqgF26w2R0m5sRVZCrbvD5cM29g.crl
rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/yqgF26w2R0m5sRVZCrbvD5cM29g.mft
rsync://rpki.ripe.net/repository/DEFAULT/yqgF26w2R0m5sRVZCrbvD5cM29g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Mar 2026 15:57:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 158250 (0x26a2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caa805dbac364749b9b115590ab6ef0f970cdbd8
Validity
Not Before: Mar 27 20:45:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=01FE59DDF1A3029CDDE8005151B7E07AC2FBEB17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:22:1e:43:08:01:07:65:30:d3:82:ba:ce:f5:
a9:58:ed:63:01:40:ff:4c:65:cc:94:06:b4:10:04:
01:d4:50:19:8d:17:1f:59:a0:4f:7a:a7:d3:11:92:
31:b1:23:6b:22:b2:9e:69:76:a3:62:a7:37:91:bc:
9a:f6:fb:15:c4:54:ca:11:50:b3:0a:fe:57:61:dc:
43:70:56:a7:6c:16:97:e5:e4:15:99:f2:12:3f:de:
4b:c0:34:ca:94:8a:6c:7d:f1:1e:4c:6f:a3:14:3d:
bc:4b:3f:bf:81:04:f9:84:6a:e4:af:06:57:40:c7:
42:8d:5c:72:40:25:c7:08:83:3c:ec:aa:cc:d2:d1:
6a:ab:70:6d:32:bc:14:68:28:63:90:f7:db:4b:e7:
cf:60:2b:52:83:3b:52:df:c2:5c:b0:93:49:b0:ee:
5c:da:d9:be:2d:35:7a:e3:14:61:62:d5:4b:c5:c3:
24:29:3f:18:27:41:c4:1f:d8:83:fd:a9:65:15:c9:
b7:45:68:01:fb:89:3d:9a:5f:86:c1:f3:19:ce:86:
2e:ac:61:61:f5:8c:7a:33:c7:d8:f3:dd:d8:cb:2d:
a6:b1:e4:5c:69:7c:d5:21:ce:4b:9a:cf:51:10:f1:
28:b8:85:ad:e8:45:54:62:a7:43:c0:06:56:61:42:
50:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:FE:59:DD:F1:A3:02:9C:DD:E8:00:51:51:B7:E0:7A:C2:FB:EB:17
X509v3 Authority Key Identifier:
keyid:CA:A8:05:DB:AC:36:47:49:B9:B1:15:59:0A:B6:EF:0F:97:0C:DB:D8
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/yqgF26w2R0m5sRVZCrbvD5cM29g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yqgF26w2R0m5sRVZCrbvD5cM29g.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/Af5Z3fGjApzd6ABRUbfgesL76xc.roa
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b240::/29
Signature Algorithm: sha256WithRSAEncryption
38:86:f5:57:3b:a1:33:51:82:fe:41:5b:79:0b:d8:b1:f4:2f:
36:12:e8:08:d5:22:e5:ca:2e:ca:fc:61:37:45:4c:fa:c5:cc:
f4:ed:11:f0:9f:39:14:39:7a:24:ee:1e:ac:06:b7:67:2f:e4:
70:45:b6:97:f7:23:04:0e:5b:70:a2:ff:9f:e0:30:2d:ea:3e:
c0:e7:4e:52:63:55:37:d2:1a:0e:8c:56:be:93:f2:31:0d:87:
20:14:9f:5a:2d:ef:84:1b:1f:52:4f:17:99:b4:89:ad:63:ad:
5b:84:f8:1e:a4:f2:8d:4a:1a:e2:de:93:38:92:30:64:75:6f:
de:2f:ff:4e:f9:cf:2f:13:66:ad:a1:1d:f5:ed:c8:4f:c9:1a:
e8:e6:f2:2b:35:7d:c4:75:0b:95:f5:e0:b2:07:a7:ca:4c:11:
a8:d1:08:8f:20:22:7e:83:fd:d0:a6:d3:a6:cc:b9:3b:61:3e:
3c:a0:a5:69:61:cf:64:e9:05:98:cc:0e:b9:39:1a:73:47:36:
73:ca:e0:6c:f0:43:4c:da:59:81:16:0e:5b:a6:1c:0b:8b:11:
d6:68:99:95:0f:73:0d:c5:96:c0:eb:fe:69:39:ec:a5:96:4e:
1c:07:b0:9a:35:86:f4:82:dd:04:cd:73:e3:49:c3:c2:c3:3f:
6f:9c:9b:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:05:58 2026 by rpki-client