Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/2JMy7iBr39ecMR0kF37TqYdF7DY.roa
File: 2JMy7iBr39ecMR0kF37TqYdF7DY.roa (raw, json)
Hash identifier: dY1ug32MFlCyDJyTCs89Gqhh3HKTA3SVtQa6zGzToJI=
Subject key identifier: D8:93:32:EE:20:6B:DF:D7:9C:31:1D:24:17:7E:D3:A9:87:45:EC:36
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 019DE3969518172982B523730FC899434115
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/2JMy7iBr39ecMR0kF37TqYdF7DY.roa
Signing time: Fri 01 May 2026 12:49:49 +0000
ROA not before: Fri 01 May 2026 12:49:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199243
IP address blocks: 2a0c:9a40:d500::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 13:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:e3:96:95:18:17:29:82:b5:23:73:0f:c8:99:43:41:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: May 1 12:49:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d89332ee206bdfd79c311d24177ed3a98745ec36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2f:21:61:d7:b9:69:5b:3e:cf:ab:6c:4b:57:
a1:3d:56:95:d6:55:60:26:9e:a6:fa:03:29:ee:63:
a7:f6:b1:29:99:08:68:ec:3c:ea:49:64:06:ae:9f:
3a:88:f0:cf:f3:be:6f:55:d6:10:51:b7:13:61:5f:
b6:b2:62:46:51:5c:b3:38:29:42:1c:e1:34:09:16:
bf:a2:60:d7:0a:6a:9a:04:73:5a:e2:54:e8:74:a5:
1e:f4:fc:d6:b1:ef:fa:92:b0:03:88:5c:9c:d2:bf:
e1:2c:5d:06:98:ed:3d:4b:e4:de:9b:56:69:bf:50:
5b:f0:95:b7:4a:ee:55:8b:0d:0d:9a:65:62:a2:d6:
7b:69:4f:51:fc:1f:36:f0:83:ec:f5:72:0e:76:47:
a8:b4:ae:e0:67:38:44:5b:e0:06:38:f3:03:9f:56:
81:05:7b:43:ce:ee:18:6c:bb:f7:b3:f9:c1:43:cf:
fa:ae:40:37:3e:63:51:a0:b3:79:7b:be:a5:bd:3f:
8a:04:e7:98:54:e9:8d:5a:a4:cb:85:81:b7:5b:0b:
c7:88:03:fd:b6:bf:db:10:84:2e:35:50:83:3b:2e:
b5:4e:af:b9:3e:ed:c6:c0:ef:6e:70:ad:1b:fa:c6:
69:07:ca:be:2a:15:9b:a8:48:f5:91:e1:2b:35:63:
e1:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:93:32:EE:20:6B:DF:D7:9C:31:1D:24:17:7E:D3:A9:87:45:EC:36
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/2JMy7iBr39ecMR0kF37TqYdF7DY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:d500::/40
Signature Algorithm: sha256WithRSAEncryption
7b:cf:04:04:c9:b7:56:ec:26:9a:19:fd:38:68:e3:10:c6:ac:
bb:9d:bd:21:c2:fd:3b:7f:b5:24:76:08:29:ae:30:15:0f:de:
31:af:b4:b5:96:29:8b:8b:11:61:f5:2e:c4:60:1f:bc:1d:e1:
f2:0b:c0:e5:3b:dc:b6:5e:b4:81:14:fb:fe:98:f5:0f:eb:58:
3b:d5:a6:3b:6b:75:9e:66:f1:e8:0c:e4:bd:1a:09:64:8c:77:
71:f3:e9:71:44:d9:bb:08:f6:72:6b:c7:14:3a:d4:41:af:97:
94:ad:12:1d:d5:e3:e9:65:8c:7c:e5:0e:ae:45:2b:ad:12:1e:
7e:09:d5:4d:a9:b0:58:b1:72:7c:ad:41:97:d1:9e:65:19:9c:
67:a2:1b:a0:75:2b:d2:85:15:1a:db:d3:89:27:96:ec:fc:31:
a0:2b:08:13:03:a8:7c:14:69:8b:de:3e:53:cb:6a:79:c3:db:
ce:02:81:b9:bd:12:5f:a5:67:6c:99:25:08:59:2f:c4:72:2a:
1d:3c:19:ee:4e:c3:8c:9b:eb:e1:35:5d:e2:2d:c4:db:95:c1:
84:8c:13:84:5f:22:22:62:05:6f:1a:8a:0f:88:e0:7f:44:fc:
4c:23:aa:34:3b:bf:7f:8d:fb:32:3a:2d:5f:76:de:f8:af:54:
69:a7:1d:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:39:06 2026 by rpki-client