Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/7jqtu-nC9ptf8FIYJqDg1Su1dIY.roa
File: 7jqtu-nC9ptf8FIYJqDg1Su1dIY.roa (raw, json)
Hash identifier: DR0iA/SPX7y6ML1NvRHwgdJUSyq0dx/KI/Jk0oocC1U=
Subject key identifier: EE:3A:AD:BB:E9:C2:F6:9B:5F:F0:52:18:26:A0:E0:D5:2B:B5:74:86
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 01A0C8B0D70F8512B5ABADB86A8C53D4551B
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/7jqtu-nC9ptf8FIYJqDg1Su1dIY.roa
Signing time: Tue 22 Sep 2026 10:37:07 +0000
ROA not before: Tue 22 Sep 2026 10:37:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48274
IP address blocks: 2a0f:3440::/29 maxlen: 29
2a0f:34c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:b0:d7:0f:85:12:b5:ab:ad:b8:6a:8c:53:d4:55:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Sep 22 10:37:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ee3aadbbe9c2f69b5ff0521826a0e0d52bb57486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:87:43:16:63:08:3e:00:24:bb:8a:d1:23:89:
87:4e:70:8b:05:c7:3e:39:eb:ba:19:2e:2c:be:84:
b4:5b:a8:ff:62:34:fa:a9:fe:40:d1:4d:c6:f2:0e:
79:99:2d:ee:e7:cd:43:0f:97:ff:d3:2c:84:66:5f:
4b:e5:10:36:e7:1f:87:3f:30:a6:53:3a:55:de:1e:
25:0b:f2:d3:c2:30:c8:88:c6:62:a2:16:2c:af:f5:
c8:d2:87:d6:b6:44:31:58:29:c1:7c:a7:8e:d0:51:
8b:59:cc:59:24:09:0c:44:01:f9:b2:01:54:22:7e:
db:fa:5a:fb:c0:7b:1d:0a:71:13:26:3e:f6:13:f5:
cd:12:18:83:6d:8b:bf:1a:b3:5b:d9:40:11:a2:54:
be:6c:89:04:46:3f:f9:58:fa:92:38:a3:e2:6c:e3:
6f:68:6a:95:89:0b:48:48:fc:93:fd:3f:eb:b9:f2:
0c:60:36:ab:e3:dc:bb:29:8f:e4:71:cd:10:ec:fb:
dc:a6:5d:4b:2d:93:39:95:5e:39:81:6c:f5:c6:da:
df:f1:3f:e7:33:f4:e7:65:fb:f3:07:77:27:ff:40:
28:f8:d5:73:4e:3e:f8:ee:b8:35:5f:d7:56:0f:f6:
fd:64:d9:13:6c:b0:f0:a8:cb:66:25:50:e8:f6:77:
12:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:3A:AD:BB:E9:C2:F6:9B:5F:F0:52:18:26:A0:E0:D5:2B:B5:74:86
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/7jqtu-nC9ptf8FIYJqDg1Su1dIY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:3440::/29
2a0f:34c0::/29
Signature Algorithm: sha256WithRSAEncryption
10:7f:2a:2c:2f:2f:1b:21:a1:0e:42:b5:7b:94:7c:4a:43:b4:
0f:6e:ee:43:61:a6:94:42:34:88:17:99:c1:17:59:d2:ea:17:
5b:7b:b9:5d:3a:dc:a1:0a:9d:1c:1e:2f:d2:2c:79:76:be:a8:
ce:fc:84:26:fd:17:ed:7d:06:61:85:59:97:04:9d:69:75:82:
b5:47:08:67:75:32:a3:f0:cd:65:e8:d8:31:ce:b4:a7:f3:28:
94:4f:e8:fc:34:88:28:b5:20:c5:35:bb:cd:3e:4d:d4:56:93:
bf:1c:2c:a9:0f:bc:87:69:57:79:d4:b3:f9:b0:5e:e2:41:a5:
c4:3f:60:96:1a:60:92:5c:25:cc:0b:f4:17:99:1e:a2:0c:f2:
12:85:c1:0d:9c:9a:d5:c5:1b:2e:bd:e4:88:c5:e5:b1:6d:02:
32:fd:ca:a2:c5:3f:63:b2:fd:3f:76:88:39:fe:63:09:a5:c4:
1d:54:dc:23:b3:fc:57:2d:b2:a7:6a:fc:43:14:64:42:ba:16:
4c:23:95:0d:cb:e8:ea:e6:b0:c4:e5:1e:5d:f0:1e:5c:e7:15:
c9:f4:be:f0:7f:29:ea:a1:a5:8d:d9:87:81:46:55:45:ac:bc:
66:7f:0c:68:cb:ff:bc:06:6d:7e:48:a2:72:5a:e8:95:1f:58:
9e:18:37:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 00:13:06 2026 by rpki-client