Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/JqXUASPPuW-ZfKTLfRfljZRf9XU.roa
File: JqXUASPPuW-ZfKTLfRfljZRf9XU.roa (raw, json)
Hash identifier: I5gEJMjSP0YMaRxmxOj3bGD0h9cUs6Al0Xe+ib9ew3A=
Subject key identifier: 26:A5:D4:01:23:CF:B9:6F:99:7C:A4:CB:7D:17:E5:8D:94:5F:F5:75
Certificate issuer: /CN=706d3abbb478b74ef2adef9bb7c4336e34111d51
Certificate serial: 01A0C85F5AAD5CDBA626BC50BF45E7351832
Authority key identifier: 70:6D:3A:BB:B4:78:B7:4E:F2:AD:EF:9B:B7:C4:33:6E:34:11:1D:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cG06u7R4t07yre-bt8QzbjQRHVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/JqXUASPPuW-ZfKTLfRfljZRf9XU.roa
Signing time: Tue 22 Sep 2026 09:08:07 +0000
ROA not before: Tue 22 Sep 2026 09:08:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402604
IP address blocks: 2a11:1900::/29 maxlen: 29
2a11:e500::/29 maxlen: 29
2a12:3100::/29 maxlen: 29
2a12:5180::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cG06u7R4t07yre-bt8QzbjQRHVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 06:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:5f:5a:ad:5c:db:a6:26:bc:50:bf:45:e7:35:18:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=706d3abbb478b74ef2adef9bb7c4336e34111d51
Validity
Not Before: Sep 22 09:08:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=26a5d40123cfb96f997ca4cb7d17e58d945ff575
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:79:64:cd:10:dc:d5:21:22:6a:2c:8f:0c:d3:
08:d0:03:1a:c4:d1:0f:a6:a5:c1:54:6c:39:2f:29:
68:84:41:e7:c7:47:2a:3d:ee:8e:3c:31:35:55:45:
10:20:90:92:e1:bf:4a:a0:5a:bc:20:af:38:9b:cc:
92:6d:db:98:2f:64:f6:dc:06:d8:aa:ae:3c:b1:34:
3e:d3:0f:34:76:07:c8:52:77:2c:29:52:e7:e4:ad:
4a:0e:75:56:33:7f:2c:51:6f:60:16:45:9e:12:4e:
f4:cf:02:78:c1:e4:f7:a6:bd:5f:d8:5a:47:d6:6d:
1a:b3:32:e9:d2:20:2c:52:4f:d0:fb:18:db:08:ca:
da:34:7f:cf:db:a1:80:1d:c0:c4:5c:88:75:49:3b:
a4:44:53:50:6a:49:78:da:71:0a:fe:01:0d:3f:13:
ed:16:a2:2a:43:9e:8c:b0:d7:b7:4f:22:fd:e3:0c:
93:d9:e9:6e:b8:5f:0d:36:8f:7c:8c:a2:e4:4a:28:
e2:13:fa:9f:6f:21:12:41:cc:3b:94:c7:23:d8:49:
c9:9c:fd:85:2c:1e:9a:f6:2e:cd:ce:2b:d0:db:58:
41:f9:3f:40:03:ef:c9:4b:09:69:be:1c:c0:98:7c:
e6:8c:c0:47:0c:cc:8a:7f:e5:59:f9:e8:17:4e:b9:
d9:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:A5:D4:01:23:CF:B9:6F:99:7C:A4:CB:7D:17:E5:8D:94:5F:F5:75
X509v3 Authority Key Identifier:
keyid:70:6D:3A:BB:B4:78:B7:4E:F2:AD:EF:9B:B7:C4:33:6E:34:11:1D:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cG06u7R4t07yre-bt8QzbjQRHVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/JqXUASPPuW-ZfKTLfRfljZRf9XU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:1900::/29
2a11:e500::/29
2a12:3100::/29
2a12:5180::/29
Signature Algorithm: sha256WithRSAEncryption
29:96:32:c8:80:a3:c4:4b:65:e0:21:a6:9c:85:03:64:bc:b4:
08:9c:6a:7b:f0:87:ce:42:35:a1:aa:bb:95:39:eb:8f:d2:84:
8a:70:3b:b2:21:5a:0b:06:aa:ba:4e:43:f6:ab:eb:cd:c6:f3:
d2:b4:01:83:fc:69:57:17:1a:a5:93:4c:39:f0:ba:c8:5d:01:
7d:58:20:af:8f:eb:f7:d7:2a:8b:12:8a:6e:49:69:4c:2d:01:
8a:29:8b:e9:da:5f:1e:46:48:56:d9:5d:73:b1:71:52:10:f6:
79:c1:f7:a6:84:ee:8b:10:0a:2a:42:b0:3a:53:41:8c:15:d3:
ba:9e:bb:de:24:dd:38:f7:85:98:b8:ca:99:c0:26:23:e3:47:
45:c6:89:f3:8a:ee:bd:a0:10:f8:62:4f:fe:70:e0:03:4c:64:
38:4f:c6:d2:0c:4e:2f:28:23:c4:49:81:40:e0:19:3a:18:0d:
0b:cf:28:79:9d:0f:ff:9d:29:81:f1:a5:d2:28:cb:01:1d:34:
29:66:d3:6c:67:4e:78:11:ce:88:11:14:29:b8:1e:12:52:9d:
12:62:8f:6f:dd:19:46:70:b7:f7:f8:64:9a:6a:b0:c8:12:12:
f9:43:6f:d4:89:e9:e6:54:52:bf:70:f9:d6:d1:26:71:d0:3f:
27:04:14:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 13:03:09 2026 by rpki-client