Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/3a3b2c-76b9-49b4-8218-d12f1e2456ba/1/JY1qhMWeHgfaGacafAu9A8pqPOU.roa
File: JY1qhMWeHgfaGacafAu9A8pqPOU.roa (raw, json)
Hash identifier: vSlOo61MyUjunpp23wCdHaI75o9KFjuwDlia3rSNbp8=
Subject key identifier: 25:8D:6A:84:C5:9E:1E:07:DA:19:A7:1A:7C:0B:BD:03:CA:6A:3C:E5
Certificate issuer: /CN=d8394a7a7b85e5b67845b8907150285b71cd5e95
Certificate serial: 019F2369242904C50EF322EA879A67ED4482
Authority key identifier: D8:39:4A:7A:7B:85:E5:B6:78:45:B8:90:71:50:28:5B:71:CD:5E:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2DlKenuF5bZ4RbiQcVAoW3HNXpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/3a3b2c-76b9-49b4-8218-d12f1e2456ba/1/JY1qhMWeHgfaGacafAu9A8pqPOU.roa
Signing time: Thu 02 Jul 2026 15:18:40 +0000
ROA not before: Thu 02 Jul 2026 15:18:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 789
IP address blocks: 134.158.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/3a3b2c-76b9-49b4-8218-d12f1e2456ba/1/2DlKenuF5bZ4RbiQcVAoW3HNXpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/3a3b2c-76b9-49b4-8218-d12f1e2456ba/1/2DlKenuF5bZ4RbiQcVAoW3HNXpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2DlKenuF5bZ4RbiQcVAoW3HNXpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 15:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:24:29:04:c5:0e:f3:22:ea:87:9a:67:ed:44:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8394a7a7b85e5b67845b8907150285b71cd5e95
Validity
Not Before: Jul 2 15:18:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=258d6a84c59e1e07da19a71a7c0bbd03ca6a3ce5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:30:40:e4:cf:c3:48:f8:36:a8:41:88:9d:b1:
fd:17:19:a3:20:ab:30:1c:7f:6f:89:e8:4c:12:5e:
8b:dc:fc:d7:6a:62:3a:df:9e:df:84:ec:8e:93:50:
49:30:aa:b7:72:98:c7:e8:0f:f1:9e:49:99:ca:7b:
0e:e6:43:a6:a4:ff:70:26:33:7c:e0:7a:ee:16:2b:
25:ac:86:00:7f:58:20:0f:11:8c:71:17:ea:20:7a:
c0:93:a3:41:b7:0b:ad:50:d2:61:92:13:8f:d3:4b:
79:c1:a2:57:71:3f:34:0d:83:ff:17:11:c3:0c:c4:
ed:6d:15:ad:05:5c:ff:4c:f8:ed:ad:87:0b:2e:4f:
9b:09:8c:23:e5:ed:d3:c9:11:f9:df:ce:c7:a0:f1:
4c:3e:bb:31:d1:0c:18:4d:51:07:c1:63:95:0f:9f:
26:1e:2c:26:a4:45:3f:5c:06:30:a0:03:0f:85:a8:
71:68:b0:12:74:5a:2e:ad:38:e1:0c:71:9d:51:5c:
83:e7:02:09:90:9f:c1:21:20:f2:eb:dd:7c:88:d0:
ec:80:45:e1:1e:96:90:44:0f:f6:15:2b:f7:1b:74:
2f:52:86:dc:e7:0d:34:1e:42:90:3f:67:d8:71:b0:
5e:07:3c:2d:49:1a:27:53:03:22:02:8c:f2:9a:60:
66:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:8D:6A:84:C5:9E:1E:07:DA:19:A7:1A:7C:0B:BD:03:CA:6A:3C:E5
X509v3 Authority Key Identifier:
keyid:D8:39:4A:7A:7B:85:E5:B6:78:45:B8:90:71:50:28:5B:71:CD:5E:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2DlKenuF5bZ4RbiQcVAoW3HNXpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/3a3b2c-76b9-49b4-8218-d12f1e2456ba/1/JY1qhMWeHgfaGacafAu9A8pqPOU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/3a3b2c-76b9-49b4-8218-d12f1e2456ba/1/2DlKenuF5bZ4RbiQcVAoW3HNXpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
134.158.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2f:a2:d0:19:be:d9:3e:98:bb:e9:59:70:b8:30:27:37:42:ad:
13:b7:52:99:3c:a3:34:e7:35:88:b9:11:b1:ee:7c:07:85:eb:
cf:06:6e:9b:6d:c9:6c:b6:68:e9:00:0e:58:6d:33:97:b3:f0:
d9:43:3f:0e:7a:ac:e3:dc:8e:55:44:d8:c7:0e:42:6a:ee:cd:
41:ea:63:90:59:85:13:71:03:cc:48:bf:8a:e1:6d:e3:d8:13:
90:0f:0a:eb:00:ef:24:87:04:44:37:c1:d3:f2:88:ae:e5:e8:
12:32:b6:c8:65:af:6b:18:f5:14:b9:78:e4:ad:e8:62:50:b8:
38:a3:2d:ad:cc:b8:8f:6d:81:7a:a8:f0:7c:8e:26:59:9a:5c:
21:bb:03:d6:22:d7:8d:98:2b:78:06:fa:3b:0c:76:fb:f8:c7:
f6:f5:6b:6c:bf:e9:87:66:d3:3c:14:10:25:b8:8e:04:1e:d9:
7f:ca:c1:28:77:2c:56:f7:b9:1b:ea:b7:9a:07:ea:85:e5:76:
3f:a3:e8:bd:61:94:64:f3:ba:06:4b:52:e4:23:39:f8:75:74:
4e:38:c1:d4:9d:1f:23:af:0f:fc:4c:0d:d5:fd:94:96:55:22:
2f:64:6c:c2:6d:09:2b:1a:e8:70:6c:ae:b7:a1:26:ee:81:67:
30:d9:2f:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:28:39 2026 by rpki-client