Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/fJS637JzUY9ugv22p8_OUjWaiaw.roa
File: fJS637JzUY9ugv22p8_OUjWaiaw.roa (raw, json)
Hash identifier: 0k+9V5c/ReVam6mmzzfcrumGw60s8Iaw9s34MK/6hIU=
Subject key identifier: 7C:94:BA:DF:B2:73:51:8F:6E:82:FD:B6:A7:CF:CE:52:35:9A:89:AC
Certificate issuer: /CN=b27261d715348bfd73ce9dbb72488656993ba2f1
Certificate serial: 019E7AAF450D7DB5B738F877DA087CD32199
Authority key identifier: B2:72:61:D7:15:34:8B:FD:73:CE:9D:BB:72:48:86:56:99:3B:A2:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/snJh1xU0i_1zzp27ckiGVpk7ovE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/fJS637JzUY9ugv22p8_OUjWaiaw.roa
Signing time: Sat 30 May 2026 20:59:27 +0000
ROA not before: Sat 30 May 2026 20:59:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49863
IP address blocks: 2a0e:e6c0:c000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.mft
rsync://rpki.ripe.net/repository/DEFAULT/snJh1xU0i_1zzp27ckiGVpk7ovE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:7a:af:45:0d:7d:b5:b7:38:f8:77:da:08:7c:d3:21:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b27261d715348bfd73ce9dbb72488656993ba2f1
Validity
Not Before: May 30 20:59:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7c94badfb273518f6e82fdb6a7cfce52359a89ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:8e:9f:6e:69:19:6e:53:05:bc:e6:c6:be:7f:
72:2c:7c:fe:7a:6b:06:f5:3c:db:f6:85:32:7b:c6:
88:42:e0:d2:a0:b0:0d:b3:8e:0e:81:d3:79:06:71:
d3:e9:df:62:93:a1:44:9f:5a:de:be:6c:85:c1:39:
55:e1:81:1b:f6:f8:ae:93:46:30:31:93:96:76:36:
e8:28:ea:a6:33:7f:e3:12:12:31:ab:fc:85:de:a4:
de:07:a0:bb:d1:62:50:54:f6:5d:11:8c:80:50:ea:
a0:c8:0c:c7:8c:4d:b3:f9:5a:69:ce:d0:96:55:d4:
40:24:42:6f:06:8b:7b:d4:3c:ed:56:e9:5d:23:79:
6a:a2:ba:43:91:5d:22:0a:c5:77:ce:8a:b9:42:64:
ef:72:9d:17:7b:6c:83:a1:58:af:bc:ad:d4:64:06:
6e:fc:b8:5f:0b:af:ab:d0:1b:e0:d2:f8:fc:c0:16:
6b:2b:bd:80:36:2f:c2:bc:40:ec:c1:3e:d2:64:86:
7a:55:76:d1:54:55:98:a9:d5:33:3b:92:7d:da:a4:
1d:a2:e9:4f:50:9e:b5:df:95:c6:a3:ce:ff:03:15:
b0:8b:06:34:43:e0:22:73:a1:db:ec:bf:73:5b:5f:
28:2d:e9:a6:5b:49:57:d2:b2:41:85:44:30:aa:fb:
f0:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:94:BA:DF:B2:73:51:8F:6E:82:FD:B6:A7:CF:CE:52:35:9A:89:AC
X509v3 Authority Key Identifier:
keyid:B2:72:61:D7:15:34:8B:FD:73:CE:9D:BB:72:48:86:56:99:3B:A2:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/snJh1xU0i_1zzp27ckiGVpk7ovE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/fJS637JzUY9ugv22p8_OUjWaiaw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:e6c0:c000::/36
Signature Algorithm: sha256WithRSAEncryption
0a:f7:6a:b1:07:dd:bd:9f:38:1d:e1:58:af:65:2c:18:26:88:
90:ab:4f:b4:18:be:c4:f1:e5:c6:9c:1b:97:9b:cd:27:4c:14:
78:79:46:89:ca:af:ea:a6:a1:ef:33:1c:bd:ff:83:1f:6b:f8:
2a:55:ff:e7:a4:64:fa:a6:6b:c6:f1:f3:d4:f9:7c:1e:2c:58:
95:19:bb:47:86:16:05:bc:e5:69:b3:97:2e:88:02:66:74:de:
da:a4:01:7e:e6:b0:79:96:2e:fa:d5:81:ae:f9:26:16:6c:14:
ee:e1:a6:b6:9a:cf:9d:3d:f2:9b:37:57:2c:3a:18:60:6d:a7:
ac:af:09:ec:c6:05:13:69:62:ca:51:3b:72:fb:6c:5d:50:c4:
ed:59:3a:3d:bc:74:0b:c9:1d:c7:d0:94:dc:7e:65:c9:0f:34:
43:9e:97:01:64:57:00:d0:2c:c1:bc:d1:d7:d0:72:e5:6f:b6:
d5:6e:95:2a:60:d3:31:5b:b6:bb:f7:9b:54:50:ac:d6:62:ed:
98:73:1e:c9:e0:9d:47:d1:e7:ec:c4:1f:2b:28:d0:da:d0:3f:
fe:8e:48:ce:07:dc:21:55:b0:bf:17:f6:01:fe:4f:b5:0f:c3:
e5:85:33:49:6a:8f:a7:9a:7c:ff:d2:d6:7b:3f:c7:9b:ab:fc:
42:69:cc:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:34:09 2026 by rpki-client