Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/jeJjQTbi3buFTK0Rd0N3acScMvk.roa
File: jeJjQTbi3buFTK0Rd0N3acScMvk.roa (raw, json)
Hash identifier: konzzCvZCQAeqI0lUlmLQesMfmRzbICQy/UJADyxvc0=
Subject key identifier: 8D:E2:63:41:36:E2:DD:BB:85:4C:AD:11:77:43:77:69:C4:9C:32:F9
Certificate issuer: /CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Certificate serial: 01A0C8B0DA95CD0BAB96AF798D5F12AD5A76
Authority key identifier: 76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/jeJjQTbi3buFTK0Rd0N3acScMvk.roa
Signing time: Tue 22 Sep 2026 10:37:08 +0000
ROA not before: Tue 22 Sep 2026 10:37:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402642
IP address blocks: 2a11:4600::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 07:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:b0:da:95:cd:0b:ab:96:af:79:8d:5f:12:ad:5a:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Validity
Not Before: Sep 22 10:37:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8de2634136e2ddbb854cad1177437769c49c32f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:df:e9:4b:60:67:e2:3c:90:1d:e2:82:3b:f5:
4e:9a:3c:d7:78:ea:42:83:1e:3d:cb:36:a9:1f:27:
b3:90:4c:5e:dd:ea:cd:d6:4e:17:0f:81:f5:e1:ee:
b3:86:d2:ea:3f:02:8e:98:f9:94:37:ce:1f:2d:b1:
b6:d6:6d:f1:3b:67:54:6b:b5:f6:d0:31:6f:62:9c:
e9:19:fc:f4:d8:d5:59:e5:61:4a:9f:3f:0e:85:48:
76:77:fe:5b:6f:05:d1:fe:48:df:87:e7:d6:c1:d0:
ee:0e:27:e4:be:91:5f:e9:53:eb:53:20:f5:4e:e4:
5e:74:d6:df:49:e1:7c:05:82:be:0c:83:81:b0:57:
82:ff:76:0b:0a:8f:04:17:8c:6c:c2:49:9c:75:c5:
4a:0d:50:0e:08:a9:8b:62:91:60:ea:98:2b:15:ba:
68:84:35:f9:ea:f4:2b:82:0f:05:bd:cd:ce:a4:0a:
e2:45:c3:a3:ad:d1:0f:5c:0f:36:bf:a6:89:04:ce:
e8:76:79:35:73:f1:8f:84:d5:32:47:2e:67:15:39:
c8:50:5d:a0:74:f5:d8:1b:f6:3c:32:d4:6e:be:4a:
33:ab:d2:df:9c:ae:af:71:ba:7a:82:d4:70:0d:8c:
7c:31:07:ba:3e:30:7f:0b:52:f0:97:95:5e:f5:e5:
f1:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:E2:63:41:36:E2:DD:BB:85:4C:AD:11:77:43:77:69:C4:9C:32:F9
X509v3 Authority Key Identifier:
keyid:76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/jeJjQTbi3buFTK0Rd0N3acScMvk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:4600::/29
Signature Algorithm: sha256WithRSAEncryption
2a:75:66:6e:02:7d:53:ce:49:77:7d:81:b1:05:03:3b:d2:86:
d5:7a:e9:46:f5:a8:35:a0:69:99:f6:e8:81:7f:37:eb:2f:53:
4c:50:ad:52:53:af:a5:fa:85:29:93:26:26:b8:d2:c2:e2:e1:
86:43:e3:67:d8:19:fd:92:1c:64:d1:08:d3:a1:f1:75:29:2f:
fd:f7:77:a4:d6:a4:52:fe:c6:63:ec:f1:11:af:25:87:19:3b:
58:95:18:d8:f4:45:d0:f8:d7:6d:48:cd:2e:16:ed:e3:5c:37:
86:b3:a1:b6:da:f4:9e:b9:e9:b4:ff:94:fd:ea:68:c3:6a:f1:
2b:7f:50:4c:6e:61:3e:de:03:a8:fb:88:2a:a5:28:2c:a4:b3:
76:a5:29:61:f7:a6:a1:ac:03:14:36:d9:10:ca:38:2f:4e:0a:
05:49:90:a2:c8:18:7b:8a:f0:21:59:77:c6:c9:6f:a9:bd:4f:
c5:48:2f:e4:f6:c1:e4:f0:df:0f:2f:3b:a0:c7:23:db:fa:3c:
52:33:08:93:15:31:e1:4f:f9:b8:b4:ae:37:23:91:ea:f6:ec:
4a:11:94:64:01:bc:52:3e:86:24:67:af:96:51:f0:76:ec:91:
b8:7a:bd:30:24:36:3d:b5:55:72:6b:85:e2:9c:8a:6d:8f:09:
8d:e8:4d:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:40:49 2026 by rpki-client