Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/JcePCXWu8_9ZZzjxfVygKM8dWzw.roa
File: JcePCXWu8_9ZZzjxfVygKM8dWzw.roa (raw, json)
Hash identifier: 0S4YgLpuoSBRqOUxV6YpZdqEiuMF4cz82gQj2otpNQw=
Subject key identifier: 25:C7:8F:09:75:AE:F3:FF:59:67:38:F1:7D:5C:A0:28:CF:1D:5B:3C
Certificate issuer: /CN=f00bdcc444173f5994de34a3bf63f3ad9764c6d1
Certificate serial: 019ECB8A8783FC35BD09A60E0C5ABCDE8304
Authority key identifier: F0:0B:DC:C4:44:17:3F:59:94:DE:34:A3:BF:63:F3:AD:97:64:C6:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8AvcxEQXP1mU3jSjv2PzrZdkxtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/JcePCXWu8_9ZZzjxfVygKM8dWzw.roa
Signing time: Mon 15 Jun 2026 13:48:33 +0000
ROA not before: Mon 15 Jun 2026 13:48:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219431
IP address blocks: 2a10:ab80:3ef::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/8AvcxEQXP1mU3jSjv2PzrZdkxtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/8AvcxEQXP1mU3jSjv2PzrZdkxtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8AvcxEQXP1mU3jSjv2PzrZdkxtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:cb:8a:87:83:fc:35:bd:09:a6:0e:0c:5a:bc:de:83:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f00bdcc444173f5994de34a3bf63f3ad9764c6d1
Validity
Not Before: Jun 15 13:48:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=25c78f0975aef3ff596738f17d5ca028cf1d5b3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:6d:46:4a:ba:c6:32:bd:fb:ec:89:78:9f:45:
8e:ef:f2:9d:11:9e:a8:4f:0e:9b:e1:f3:ba:4e:58:
8e:e7:1f:c7:f0:54:f5:6a:b3:d7:31:c6:e5:a6:e1:
13:5b:d6:f5:f7:07:6b:e6:4b:97:50:0d:61:e4:f6:
1c:36:f1:fa:85:59:a4:92:10:6e:fd:3e:01:5f:ca:
55:cf:40:b2:6a:eb:8f:c5:cd:1c:af:22:d0:d6:b8:
75:b4:65:82:9c:54:ff:1b:af:ff:18:98:c1:a5:55:
40:3b:ad:9a:81:98:ff:71:a5:de:c0:5e:c4:32:25:
c9:0c:37:da:ed:5d:47:35:13:03:8e:75:51:2a:9c:
d6:2c:6e:a0:36:71:12:6f:a7:26:46:4a:a9:3f:ca:
78:a3:d9:c2:ca:95:0f:8e:8d:95:c0:a8:32:42:47:
2f:3c:a5:1c:b5:35:e4:a6:c3:8e:c7:43:d1:0e:4f:
83:d2:cb:9f:3e:c4:68:fa:e7:84:8f:67:ac:fb:b9:
2c:c6:4e:a7:5f:57:c4:4b:ea:00:a1:9b:f0:2b:d8:
a4:69:69:6c:69:fd:d9:bf:e1:d1:94:15:3e:8f:22:
7d:51:9f:47:52:17:2d:84:a6:04:b3:d1:02:27:9d:
3d:cf:90:d1:4a:35:f5:52:ca:5a:74:fb:83:fd:fd:
b4:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:C7:8F:09:75:AE:F3:FF:59:67:38:F1:7D:5C:A0:28:CF:1D:5B:3C
X509v3 Authority Key Identifier:
keyid:F0:0B:DC:C4:44:17:3F:59:94:DE:34:A3:BF:63:F3:AD:97:64:C6:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8AvcxEQXP1mU3jSjv2PzrZdkxtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/JcePCXWu8_9ZZzjxfVygKM8dWzw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/8AvcxEQXP1mU3jSjv2PzrZdkxtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:ab80:3ef::/48
Signature Algorithm: sha256WithRSAEncryption
50:30:d9:47:bb:83:da:d4:fb:96:08:bb:bc:8b:f2:5c:c1:f9:
5c:60:ad:d4:7c:06:2a:83:a5:68:30:4c:9e:9e:72:ef:a8:1d:
17:ff:a4:65:43:f4:cb:aa:6c:6a:84:51:9b:9e:c4:b4:28:bc:
8c:89:b2:a7:06:22:93:c8:64:0d:9d:ed:45:ad:9d:b9:82:22:
1a:b7:87:3f:6d:f7:6a:2c:ba:d5:1b:13:b0:ea:a9:4a:c2:db:
a7:c4:e3:f1:73:c0:a9:65:9d:6c:4a:cb:c6:ee:59:56:62:fc:
08:09:2a:fe:27:ca:b7:cb:e7:2a:a6:a2:9b:f5:51:cf:f4:fe:
a6:26:d8:39:dc:54:6f:1e:72:3d:42:3c:ab:f4:a6:0b:2e:23:
07:6e:56:a8:08:c9:35:6e:57:27:0d:f5:5e:d1:b8:14:7e:76:
2e:8b:4e:83:a0:f5:1c:d5:b9:1a:a2:ba:4a:62:ae:9d:bd:27:
41:98:f7:fc:22:e3:c9:d3:14:a6:16:0a:9a:fb:cc:41:e2:2d:
cb:4f:fd:48:85:44:02:c6:b5:0f:09:c0:49:7b:c3:2d:23:5a:
99:04:ec:42:1f:8b:b5:44:f2:1a:e4:b4:f4:bd:c9:2b:36:67:
0a:63:3d:b7:12:d2:32:de:d5:a7:80:b4:32:df:cd:a8:a1:0e:
fd:42:ea:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:30:27 2026 by rpki-client