Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/JBKG2fPxha4I8eVa__ciDh4peDo.roa
File: JBKG2fPxha4I8eVa__ciDh4peDo.roa (raw, json)
Hash identifier: 0ESzwcVpkMcL4vVEqYna3uF1a7dneXlkBnlxJhgD8vY=
Subject key identifier: 24:12:86:D9:F3:F1:85:AE:08:F1:E5:5A:FF:F7:22:0E:1E:29:78:3A
Certificate issuer: /CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Certificate serial: 01A0C8B0D77E9360DF42C68DDE69904D8CA9
Authority key identifier: 76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/JBKG2fPxha4I8eVa__ciDh4peDo.roa
Signing time: Tue 22 Sep 2026 10:37:07 +0000
ROA not before: Tue 22 Sep 2026 10:37:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401293
IP address blocks: 2a11:8580::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 13:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:b0:d7:7e:93:60:df:42:c6:8d:de:69:90:4d:8c:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Validity
Not Before: Sep 22 10:37:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=241286d9f3f185ae08f1e55afff7220e1e29783a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:12:d9:51:b7:58:01:d8:90:b7:0b:ef:f3:b2:
b5:f9:52:2b:c6:0f:e0:86:10:8a:8e:30:41:32:fa:
e5:9b:cc:15:00:c4:bf:8d:6c:94:30:70:6a:0f:28:
25:51:0e:22:68:cc:6a:00:0d:50:08:ed:9d:45:0f:
a7:e1:63:92:25:c9:b8:d4:57:85:f7:c2:21:23:35:
d7:04:a1:a0:86:4b:97:11:8e:70:48:c9:46:a6:48:
82:b3:2f:9d:1a:40:81:de:5f:92:b7:d3:36:75:a9:
9a:0c:73:d7:21:cd:61:90:5a:80:59:8d:28:40:f9:
62:b2:82:a0:a1:39:58:7a:ca:f5:5d:cd:1c:4d:d0:
16:2d:9d:02:b4:6c:9c:2b:a8:ce:90:c2:fb:07:99:
e3:f3:e9:e3:33:09:2a:13:72:77:31:8a:01:02:d6:
d8:35:d1:2a:f8:76:96:1e:8e:20:ef:21:3b:aa:a1:
86:58:68:c7:70:9b:48:2f:07:dd:0d:c8:7f:2a:f2:
02:34:b2:42:78:74:44:83:4d:98:79:4a:f0:f8:03:
c8:ee:b6:93:f6:4f:bd:37:a0:fa:e5:68:93:84:f9:
5d:9a:8d:ce:e6:ad:5a:f8:92:95:da:4f:23:75:da:
f6:9d:b2:37:8b:12:59:1e:cf:a5:6f:2c:9e:c3:4b:
9e:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:12:86:D9:F3:F1:85:AE:08:F1:E5:5A:FF:F7:22:0E:1E:29:78:3A
X509v3 Authority Key Identifier:
keyid:76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/JBKG2fPxha4I8eVa__ciDh4peDo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:8580::/29
Signature Algorithm: sha256WithRSAEncryption
04:54:78:aa:ab:b1:a8:7b:a9:b0:17:9b:72:2b:49:45:d1:6e:
a9:4c:3a:1d:c5:4c:2f:a3:2b:3a:0b:39:ad:63:2d:b9:a3:e8:
61:6e:41:3e:92:f5:7e:34:0a:9d:aa:df:ad:ad:2b:37:c4:52:
e7:f9:76:29:b5:b9:9b:f6:4c:ae:4c:f4:5e:71:db:7e:af:ba:
67:c4:ad:fe:e8:4f:53:0c:c5:0c:04:13:81:9e:38:d0:58:b6:
72:e7:e7:af:cf:57:67:01:b5:94:ad:5c:98:98:b5:d9:0f:cf:
51:39:d6:c9:fb:26:cb:62:91:ab:7c:0a:f6:a8:7b:c8:e0:05:
68:0b:f4:52:89:80:d3:08:95:35:3c:97:16:15:83:f7:88:74:
e6:c3:e2:6d:63:31:e4:e8:81:e3:87:a9:58:33:ea:b0:7d:85:
40:2d:ed:cd:f0:e9:8d:91:4b:a8:25:22:0c:fa:6b:14:5a:bf:
d7:94:fb:9c:6f:1c:e7:f8:22:0b:61:8c:dd:1c:c9:3f:36:f3:
18:0d:ae:6a:12:4a:04:1a:f9:99:bd:73:9a:65:31:87:13:26:
58:a6:cd:6f:ec:6f:5a:08:41:f7:ec:79:5f:f1:9c:78:f7:40:
d8:3c:01:07:6e:b5:1e:36:da:1e:1c:18:88:9e:81:db:13:7b:
6c:fc:d3:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:18:32 2026 by rpki-client