Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/7872e4-2f36-4df3-ba73-347e4752e3e1/1/J__T5-RaWiidTGfsx3Bz5OB7Ax0.roa
File: J__T5-RaWiidTGfsx3Bz5OB7Ax0.roa (raw, json)
Hash identifier: 9rcHA6YsVht5FpBD34N2HuiPufLi4hvOJBRxEbLFAAk=
Subject key identifier: 27:FF:D3:E7:E4:5A:5A:28:9D:4C:67:EC:C7:70:73:E4:E0:7B:03:1D
Certificate issuer: /CN=4cdd63b4212c89a2016fae62517a186c95077d9f
Certificate serial: 019F65D7256D1B1EF2F7C22F5626FED41688
Authority key identifier: 4C:DD:63:B4:21:2C:89:A2:01:6F:AE:62:51:7A:18:6C:95:07:7D:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TN1jtCEsiaIBb65iUXoYbJUHfZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/7872e4-2f36-4df3-ba73-347e4752e3e1/1/J__T5-RaWiidTGfsx3Bz5OB7Ax0.roa
Signing time: Wed 15 Jul 2026 12:53:46 +0000
ROA not before: Wed 15 Jul 2026 12:53:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13030
IP address blocks: 62.129.136.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/7872e4-2f36-4df3-ba73-347e4752e3e1/1/TN1jtCEsiaIBb65iUXoYbJUHfZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/7872e4-2f36-4df3-ba73-347e4752e3e1/1/TN1jtCEsiaIBb65iUXoYbJUHfZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/TN1jtCEsiaIBb65iUXoYbJUHfZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:65:d7:25:6d:1b:1e:f2:f7:c2:2f:56:26:fe:d4:16:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cdd63b4212c89a2016fae62517a186c95077d9f
Validity
Not Before: Jul 15 12:53:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=27ffd3e7e45a5a289d4c67ecc77073e4e07b031d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:53:bc:a6:06:2f:f2:5e:bd:bf:11:f9:0e:9d:
95:5c:cf:e7:01:58:a0:2c:4b:32:ad:68:be:ef:d3:
c5:cf:f5:87:52:6e:d5:df:52:12:c3:e0:e4:04:94:
74:d4:34:e5:15:bb:ee:e5:b2:01:1e:12:38:a3:32:
ef:e3:5c:56:84:cc:9a:d9:13:11:f3:25:97:79:95:
24:19:cc:9b:45:79:72:4b:47:d6:7a:23:4b:06:f6:
d6:32:6f:9b:47:bb:d2:c6:ba:5e:b7:88:fe:8b:b0:
89:d5:bb:ab:f7:77:18:54:4a:61:33:54:a9:34:7c:
60:c2:8e:1a:ac:57:2b:a9:1d:90:15:b2:7f:72:08:
40:52:94:1d:62:bb:4a:6f:e9:29:17:8d:5b:5c:e0:
33:14:fc:05:a4:f2:9b:a8:cb:8c:f8:af:d2:4a:c9:
28:d8:ff:d9:03:d3:50:90:f8:b1:80:c9:9a:2d:75:
ab:98:88:a9:64:85:42:7c:74:bd:11:8f:ee:f7:a7:
f6:af:27:b5:aa:79:0d:fb:1a:c3:10:d4:ca:7f:8a:
b6:00:4a:86:e9:4e:f3:a5:11:95:7d:71:bd:b9:01:
23:7f:4e:25:cd:eb:f5:3f:aa:5f:18:3f:83:17:a6:
35:04:b2:42:7d:4a:90:04:bd:cf:46:8e:90:69:18:
9d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:FF:D3:E7:E4:5A:5A:28:9D:4C:67:EC:C7:70:73:E4:E0:7B:03:1D
X509v3 Authority Key Identifier:
keyid:4C:DD:63:B4:21:2C:89:A2:01:6F:AE:62:51:7A:18:6C:95:07:7D:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TN1jtCEsiaIBb65iUXoYbJUHfZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/7872e4-2f36-4df3-ba73-347e4752e3e1/1/J__T5-RaWiidTGfsx3Bz5OB7Ax0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/7872e4-2f36-4df3-ba73-347e4752e3e1/1/TN1jtCEsiaIBb65iUXoYbJUHfZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.129.136.0/23
Signature Algorithm: sha256WithRSAEncryption
c9:90:ab:2e:55:76:d1:9b:4e:15:61:89:d5:19:e7:00:51:f3:
e6:e4:3d:6a:58:95:fc:4b:56:58:d4:8f:cc:b8:e4:de:0a:6f:
df:a3:93:cb:a1:83:0a:db:87:39:04:ed:55:22:a9:46:ba:23:
23:07:70:1f:d3:f8:e7:74:78:c8:fc:90:f6:78:b5:dd:b1:d9:
d4:85:ac:e8:87:1e:ca:8c:b8:ec:dc:d2:1c:f5:e7:9a:81:07:
e0:2b:4f:37:60:4b:a0:d7:77:f6:a5:73:cc:ac:f1:0f:d4:f2:
ab:77:bb:4d:e2:5a:9e:3a:b8:63:7f:1b:30:84:54:3e:ed:c4:
49:52:25:da:e5:c8:7d:1d:8a:0e:76:64:00:0b:46:91:9a:f7:
9b:ee:5c:e0:b1:3d:5a:10:a2:2b:74:5d:81:fb:17:dc:89:9e:
13:85:cb:86:84:7d:db:33:5e:27:f3:0d:49:3c:d7:30:e6:f1:
49:06:9e:a4:80:f8:73:21:49:51:9a:95:c7:4c:14:1f:0e:df:
ab:a4:6b:97:0a:12:64:e7:0e:8c:9f:d2:e3:df:43:ef:03:17:
3c:e1:69:6a:ae:d9:c6:73:d7:d5:8e:f9:45:93:9c:0a:56:65:
cd:c9:83:02:78:bc:08:a0:a3:37:76:03:b0:3e:99:d8:81:99:
d9:eb:73:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:45:24 2026 by rpki-client