Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/jbJUVujrg2PU0D29HECHyETh4cM.roa
File: jbJUVujrg2PU0D29HECHyETh4cM.roa (raw, json)
Hash identifier: XmeVs8S/a79P4Yn1qsB5ouTEAVLUeyK69Swn/pWk84c=
Subject key identifier: 8D:B2:54:56:E8:EB:83:63:D4:D0:3D:BD:1C:40:87:C8:44:E1:E1:C3
Certificate issuer: /CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Certificate serial: 019E086C52B78A27F9AA35D76A01C8CC1CC9
Authority key identifier: 67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/jbJUVujrg2PU0D29HECHyETh4cM.roa
Signing time: Fri 08 May 2026 16:29:37 +0000
ROA not before: Fri 08 May 2026 16:29:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214481
IP address blocks: 2a14:67c3:2ac::/48 maxlen: 48
2a14:67c3:2af::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:51:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:08:6c:52:b7:8a:27:f9:aa:35:d7:6a:01:c8:cc:1c:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Validity
Not Before: May 8 16:29:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8db25456e8eb8363d4d03dbd1c4087c844e1e1c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:53:4a:e6:61:22:0b:77:3a:a0:63:52:7b:0f:
ec:fa:0c:ab:f3:0e:1a:41:1d:38:a3:6b:59:42:08:
00:0e:1a:b0:0e:b8:06:c3:ff:02:c3:ed:4f:0c:33:
00:fd:25:de:bc:e8:b5:9c:05:13:64:ca:e2:9a:4a:
fb:14:89:c0:b6:14:b7:a7:5d:14:58:3e:29:b7:d3:
7f:0a:49:93:cd:c6:f4:eb:9e:b8:e2:ec:57:b4:61:
ad:d1:07:42:05:9b:77:c8:8f:ed:22:04:18:f4:2a:
33:12:10:a2:6d:05:29:a1:82:32:93:f7:9a:fa:ff:
71:7c:5d:05:90:65:dc:af:b8:9b:c4:2e:38:4d:d3:
f8:00:39:9e:19:e0:fa:87:d0:4f:61:ca:64:4e:27:
21:b9:a4:f5:4f:c7:af:79:41:a2:1a:f7:ad:8c:90:
30:4e:f0:0b:4a:b8:7c:0f:7f:fa:d3:2a:05:13:7b:
8d:21:f8:be:0e:16:6d:53:c5:e9:0c:68:01:ff:75:
39:eb:8d:9d:29:91:1b:41:68:b3:1c:34:1e:df:0b:
6e:07:6a:0e:55:ab:76:6a:c9:4f:3e:16:2c:e0:d3:
dd:b6:8e:a6:f5:84:44:e6:64:53:ec:5f:dd:49:7d:
71:c5:59:21:0e:16:df:e6:d9:e3:1a:a2:1e:aa:a9:
50:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:B2:54:56:E8:EB:83:63:D4:D0:3D:BD:1C:40:87:C8:44:E1:E1:C3
X509v3 Authority Key Identifier:
keyid:67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/jbJUVujrg2PU0D29HECHyETh4cM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:67c3:2ac::/48
2a14:67c3:2af::/48
Signature Algorithm: sha256WithRSAEncryption
39:33:52:db:8b:81:92:72:68:65:56:9b:d0:dc:ec:cb:a5:80:
d1:33:ac:58:61:8f:31:61:14:90:ab:62:3b:54:86:14:33:39:
2e:47:a2:fa:56:f5:10:a1:6d:4a:53:77:bd:5b:b1:99:c3:5d:
6f:ea:f0:a2:50:fd:a6:1c:e0:31:1b:4a:ec:d3:85:16:2e:3b:
8c:8d:ea:93:2e:da:e5:a0:2f:b0:29:10:f4:2b:a2:73:06:b0:
d9:9b:ed:bf:d4:51:6e:95:59:7f:9e:26:d6:8f:b0:18:fc:64:
ff:c3:f0:ed:c2:79:3f:95:17:ca:ca:92:b3:58:86:e6:f4:67:
c9:15:bb:2d:b2:d9:a8:4c:24:15:85:46:1b:07:bb:33:76:fb:
d8:ad:30:fe:0c:78:c9:c3:cc:a2:24:98:3d:46:7d:7b:6b:2b:
99:f3:a3:08:28:3c:26:98:78:9f:68:d7:6f:cf:f7:fe:7c:28:
37:ae:3f:de:e6:f9:dd:6e:e3:c4:94:0f:71:db:15:d2:78:62:
18:c0:46:de:bf:cb:3e:f9:ea:a5:0a:32:a0:57:90:a1:7b:18:
c5:d2:0e:db:b7:ff:fe:ff:6b:51:9b:36:b4:36:9d:8e:70:b0:
53:83:87:71:31:30:fd:6d:9f:a4:c3:7b:2e:3e:a4:e1:a0:8a:
3c:5b:79:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:16:21 2026 by rpki-client