Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/2a1e5c-1010-4098-94c9-de0c570ba850/1/IIJ2gsln0l29u6el3Eh-HktxhNU.roa
File: IIJ2gsln0l29u6el3Eh-HktxhNU.roa (raw, json)
Hash identifier: hpFkKXItKpqq2JN40ze2IGY7K6qDmlOUrlI13Wk9e4Q=
Subject key identifier: 20:82:76:82:C9:67:D2:5D:BD:BB:A7:A5:DC:48:7E:1E:4B:71:84:D5
Certificate issuer: /CN=7a8bae923305a71c526a6fcf57c29d6c16a4269e
Certificate serial: 01A0945054374EC94019AF9BD389B355D536
Authority key identifier: 7A:8B:AE:92:33:05:A7:1C:52:6A:6F:CF:57:C2:9D:6C:16:A4:26:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eouukjMFpxxSam_PV8KdbBakJp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/2a1e5c-1010-4098-94c9-de0c570ba850/1/IIJ2gsln0l29u6el3Eh-HktxhNU.roa
Signing time: Sat 12 Sep 2026 06:31:27 +0000
ROA not before: Sat 12 Sep 2026 06:31:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204936
IP address blocks: 2a10:dd40::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/2a1e5c-1010-4098-94c9-de0c570ba850/1/eouukjMFpxxSam_PV8KdbBakJp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/2a1e5c-1010-4098-94c9-de0c570ba850/1/eouukjMFpxxSam_PV8KdbBakJp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/eouukjMFpxxSam_PV8KdbBakJp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:94:50:54:37:4e:c9:40:19:af:9b:d3:89:b3:55:d5:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a8bae923305a71c526a6fcf57c29d6c16a4269e
Validity
Not Before: Sep 12 06:31:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=20827682c967d25dbdbba7a5dc487e1e4b7184d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8d:46:ab:09:d3:3c:6d:1b:cd:50:19:bd:c1:
a7:b0:f5:21:e6:30:1a:6d:fb:ce:4b:23:5d:cd:b1:
e9:13:a4:d8:95:ea:7e:18:d8:e6:0f:32:7f:c0:97:
c8:79:ec:eb:85:f8:e0:c7:39:77:9f:dc:9b:e4:87:
f6:ad:00:e7:c2:de:20:74:ba:7f:17:7d:f7:30:14:
2c:d2:5e:d2:9d:16:3e:f3:ac:dd:af:a4:ae:3d:65:
28:a8:bc:01:49:e9:7d:41:25:82:01:5c:32:5e:4e:
c0:b5:36:d3:bc:c3:1c:96:b0:5f:28:ea:cb:77:3a:
0d:13:c4:e4:15:1c:34:26:4e:c9:83:05:3d:e5:b3:
00:03:a8:00:60:20:da:48:f4:8e:ae:17:be:9b:a2:
c1:b3:ea:ef:62:e0:96:f7:8b:51:bb:31:58:ee:83:
4e:a4:4a:79:22:e9:68:50:a8:14:f5:44:1c:0f:58:
e3:dd:c5:37:bd:4a:1b:3a:03:e2:2f:97:84:e7:92:
78:fb:19:64:27:fe:9e:c2:a3:21:d5:56:45:db:84:
7a:b0:ab:19:e0:43:e3:b9:0f:ad:c8:74:eb:a5:90:
1a:c8:34:a9:ea:71:82:1d:8e:7f:6b:30:5d:4a:b2:
73:30:f9:d2:69:93:84:6a:b1:df:d6:be:0d:34:a1:
87:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:82:76:82:C9:67:D2:5D:BD:BB:A7:A5:DC:48:7E:1E:4B:71:84:D5
X509v3 Authority Key Identifier:
keyid:7A:8B:AE:92:33:05:A7:1C:52:6A:6F:CF:57:C2:9D:6C:16:A4:26:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eouukjMFpxxSam_PV8KdbBakJp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/2a1e5c-1010-4098-94c9-de0c570ba850/1/IIJ2gsln0l29u6el3Eh-HktxhNU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/2a1e5c-1010-4098-94c9-de0c570ba850/1/eouukjMFpxxSam_PV8KdbBakJp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:dd40::/29
Signature Algorithm: sha256WithRSAEncryption
2f:a5:bb:0d:1e:7e:f3:56:8a:00:9f:4c:30:9f:7d:c1:6e:27:
b9:4b:14:1b:0b:ae:d3:73:d7:dd:e7:9a:ac:9a:2c:a9:bd:04:
2c:34:79:b1:30:dc:9e:43:91:d6:a5:4e:c5:17:a4:28:b0:15:
4a:51:cb:6d:6b:de:f2:9d:66:46:fc:69:fc:ad:20:96:03:28:
ca:79:aa:b4:1a:6e:fe:9d:b3:8f:1f:d6:0d:af:77:54:7e:a3:
69:ce:eb:07:72:7e:8d:1a:75:5a:05:f6:fa:65:f4:74:01:e3:
75:28:a7:eb:87:8b:0a:a2:d0:08:67:b1:13:cd:bf:16:56:67:
be:b8:86:f7:ac:5d:10:cc:4a:6a:9c:76:ae:92:04:2d:c4:2a:
17:a5:2c:fd:ae:fd:5b:ae:ab:87:28:66:dd:49:3b:e2:4c:1c:
8e:fe:bc:a1:69:dd:70:e5:dc:e7:de:43:b7:07:91:aa:2b:73:
5d:95:c6:19:1e:f7:ea:41:72:25:ba:73:c4:23:8b:8e:b8:46:
6f:0f:3f:fa:6d:d8:0f:6f:ed:30:16:41:e6:53:a1:57:4d:bf:
fc:07:2b:8c:0e:c4:bc:40:d7:53:0a:dd:a0:15:41:c7:c9:20:
d8:db:50:33:8f:75:f3:ad:04:89:c7:31:c5:87:6d:a7:4c:35:
8b:01:be:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 18:16:19 2026 by rpki-client