Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/JIP6keB7F7Gm2ZlkQopa4DPs_us.roa
File: JIP6keB7F7Gm2ZlkQopa4DPs_us.roa (raw, json)
Hash identifier: jFlq3BusUmP4qYxCaXEGJylNWdexiUDC80OW6u36VHU=
Subject key identifier: 24:83:FA:91:E0:7B:17:B1:A6:D9:99:64:42:8A:5A:E0:33:EC:FE:EB
Certificate issuer: /CN=4fd642102ebdd7f2268c14c27e3ebbf26b4cafeb
Certificate serial: 019E1BFB55532D157D65ACE3433D48EC92EA
Authority key identifier: 4F:D6:42:10:2E:BD:D7:F2:26:8C:14:C2:7E:3E:BB:F2:6B:4C:AF:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T9ZCEC691_ImjBTCfj678mtMr-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/JIP6keB7F7Gm2ZlkQopa4DPs_us.roa
Signing time: Tue 12 May 2026 11:38:36 +0000
ROA not before: Tue 12 May 2026 11:38:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 2a07:e000:6::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/T9ZCEC691_ImjBTCfj678mtMr-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/T9ZCEC691_ImjBTCfj678mtMr-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/T9ZCEC691_ImjBTCfj678mtMr-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1b:fb:55:53:2d:15:7d:65:ac:e3:43:3d:48:ec:92:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fd642102ebdd7f2268c14c27e3ebbf26b4cafeb
Validity
Not Before: May 12 11:38:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2483fa91e07b17b1a6d99964428a5ae033ecfeeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ee:9c:af:23:7d:0d:78:2c:87:3d:bb:12:d4:
ab:2f:0d:fc:c3:23:63:0d:25:ad:89:8c:5a:a0:2a:
47:39:38:ff:2d:4c:94:03:81:9f:f3:49:8e:96:3e:
39:d2:41:3d:5b:c6:29:25:8b:b5:94:a6:52:3b:d4:
80:0d:ed:e3:3f:10:40:9b:14:c6:d8:e9:95:e5:ff:
94:7c:ee:a7:6d:d6:66:67:32:8f:3e:b3:25:8a:60:
c4:8d:25:8c:06:d9:39:d8:3c:54:3a:52:0c:b3:11:
4e:9f:37:18:46:39:ab:b6:18:d4:f7:4b:94:7e:b2:
b2:fd:ef:e6:81:36:e0:91:1b:50:65:cc:87:2a:fd:
18:2d:0f:e3:a6:0c:a1:04:83:28:40:6c:df:81:85:
39:8f:e3:26:2d:8b:bd:d3:8d:fc:34:79:37:d8:58:
8e:ef:3e:a6:21:14:99:24:a9:2b:f4:c5:4d:49:f8:
99:0b:6c:cf:4d:37:22:74:74:1d:26:9a:bc:b2:99:
b1:76:b4:89:e7:bd:0f:f4:aa:1b:f8:be:9c:10:f7:
98:28:c4:86:d9:bb:55:a6:fe:6b:55:07:52:09:9a:
66:cc:a5:ce:e5:75:20:6a:60:24:97:e9:63:7b:12:
58:9c:62:b4:a0:3d:f8:1b:18:0e:24:fe:cf:70:2f:
35:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:83:FA:91:E0:7B:17:B1:A6:D9:99:64:42:8A:5A:E0:33:EC:FE:EB
X509v3 Authority Key Identifier:
keyid:4F:D6:42:10:2E:BD:D7:F2:26:8C:14:C2:7E:3E:BB:F2:6B:4C:AF:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T9ZCEC691_ImjBTCfj678mtMr-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/JIP6keB7F7Gm2ZlkQopa4DPs_us.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/T9ZCEC691_ImjBTCfj678mtMr-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:e000:6::/48
Signature Algorithm: sha256WithRSAEncryption
62:10:ab:33:a5:40:cf:d7:ac:bb:ff:d7:36:8a:c1:c4:c8:a1:
fa:15:dd:64:01:81:2c:29:89:85:70:69:0d:07:d3:3c:da:26:
c9:df:40:8b:2a:ee:59:34:ed:b3:a9:ec:5e:ff:d6:f4:e9:d3:
55:4f:60:91:f3:5c:5b:80:c0:cc:a7:e3:76:c4:5d:6d:4c:fc:
c3:82:6a:46:c6:c4:36:e7:de:e7:ac:5e:8f:81:c4:d1:87:5d:
e9:3f:5e:a1:65:8d:2a:94:1e:4e:64:89:48:e9:2e:74:02:89:
84:6b:a8:ed:aa:32:a7:7e:4b:bb:8b:cc:74:c8:44:08:f0:99:
36:01:fb:bf:fd:9d:51:d0:40:96:f6:1d:d9:3a:a3:5f:13:57:
2c:dd:c5:16:b4:90:c4:e7:31:22:1e:f9:65:37:d6:bf:97:9f:
8d:4a:72:95:de:eb:2c:58:a6:44:2d:25:2d:d8:14:31:2f:f8:
b8:d8:12:79:58:a3:c0:7d:aa:57:ee:2c:0b:72:3c:59:2b:83:
fe:de:8d:8f:f9:f0:9a:06:a3:ea:8a:9b:ed:21:bb:30:65:be:
d6:bd:5e:21:55:e4:ff:e7:1d:5e:d1:84:0a:5b:75:f1:8e:c7:
71:6b:9d:7c:bd:cb:bb:79:71:47:7d:86:b2:32:0b:76:96:55:
cb:bb:f1:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:26:20 2026 by rpki-client