Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/jNFp8uu97p0HfNSrTxSiTKFelak.roa
File: jNFp8uu97p0HfNSrTxSiTKFelak.roa (raw, json)
Hash identifier: MfowC1d2p1Ow84C7z3He8tKQKNnjmw+gsQpMY8A2caQ=
Subject key identifier: 8C:D1:69:F2:EB:BD:EE:9D:07:7C:D4:AB:4F:14:A2:4C:A1:5E:95:A9
Certificate issuer: /CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e
Certificate serial: 01A0C97C14E687C6EDC192B86340EB67AC17
Authority key identifier: 8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/jNFp8uu97p0HfNSrTxSiTKFelak.roa
Signing time: Tue 22 Sep 2026 14:19:07 +0000
ROA not before: Tue 22 Sep 2026 14:19:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402664
IP address blocks: 2a05:e900::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.mft
rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:7c:14:e6:87:c6:ed:c1:92:b8:63:40:eb:67:ac:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e
Validity
Not Before: Sep 22 14:19:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8cd169f2ebbdee9d077cd4ab4f14a24ca15e95a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:27:9d:58:8d:8e:6d:dd:5a:77:cb:a4:69:dd:
0d:f2:b5:70:04:86:5d:c1:1c:d5:e7:30:87:9e:1d:
53:a4:9f:16:b9:99:3a:8e:e6:85:22:c3:7e:1e:ed:
d6:91:02:b0:fd:a2:28:9d:9d:81:8d:40:d4:3a:c1:
85:e2:aa:03:d0:f9:57:6a:05:b1:7f:9c:eb:65:a7:
86:51:a7:ef:ba:f7:53:e9:98:ba:8e:2a:15:7c:20:
35:11:c3:23:ed:89:70:4b:af:75:61:cb:e8:1a:19:
0a:5e:c1:7b:79:8d:ee:8d:bc:a5:58:35:72:55:b2:
8f:46:ab:12:e1:8f:d6:89:3d:f9:82:df:14:3d:5a:
ad:19:48:7d:3f:a1:3b:60:0a:96:b6:98:e9:6c:1c:
ce:a8:82:91:8b:fd:fe:31:c8:5a:88:83:ec:96:67:
55:17:8e:b1:39:b0:0f:c7:42:54:85:26:dd:31:9e:
f1:57:6b:e4:14:ee:46:c1:e6:42:91:0c:7b:fe:01:
4b:77:a4:38:a8:8a:aa:3b:75:4c:e2:ad:cb:77:58:
bd:bf:05:9a:5a:a5:25:e0:eb:5e:f4:a1:83:1e:65:
c5:1e:5b:84:73:8b:c7:b3:c9:0a:77:9e:fe:5d:8d:
bc:9d:80:a0:72:1a:52:ac:3a:17:c4:6d:d5:14:dd:
4d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:D1:69:F2:EB:BD:EE:9D:07:7C:D4:AB:4F:14:A2:4C:A1:5E:95:A9
X509v3 Authority Key Identifier:
keyid:8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/jNFp8uu97p0HfNSrTxSiTKFelak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:e900::/29
Signature Algorithm: sha256WithRSAEncryption
0c:68:7b:2e:46:a3:5d:ac:ca:9c:6a:cc:a2:57:81:fc:4c:99:
49:51:4d:ec:16:ce:cc:43:6c:c4:7a:59:d5:4f:db:4a:51:35:
5c:05:b0:d6:5b:d5:6c:93:0d:d6:22:bc:6e:99:bc:36:bd:d6:
d0:43:10:cb:0a:7a:8d:38:7f:fd:4e:f6:d6:03:b6:38:40:c4:
20:d0:9b:28:72:e6:3e:c5:95:bb:1d:a9:80:6d:11:20:d9:75:
c0:25:8a:a6:a7:22:7a:d3:f5:75:56:97:dd:0c:1b:a5:c4:c8:
13:6a:95:ea:77:96:de:9f:b1:d0:ed:3f:0b:56:3a:10:17:1c:
a5:19:42:35:a6:0b:a0:dc:1f:de:5e:4f:d1:7a:e0:68:c4:ac:
00:87:82:5f:a1:c2:7b:d9:90:0b:a3:c5:e7:d2:30:64:7a:f0:
7d:93:34:69:52:4a:73:d6:2f:50:a8:17:0c:dc:07:ba:6a:0e:
11:ad:5b:8f:ef:e6:75:2c:70:49:d0:4f:16:45:95:93:80:10:
c5:90:b3:1f:70:26:76:c9:6c:a0:58:7a:9f:16:ec:57:fa:ca:
5f:39:55:1b:89:4e:43:1e:3e:80:d6:ef:9c:f3:74:ad:fe:3e:
59:cd:a2:a2:54:12:02:f8:d1:eb:4d:5b:03:02:39:67:ef:74:
6f:2c:66:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:09:27 2026 by rpki-client