Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/JuX1_oQdQQlBpU0uPBnvcWB93j8.roa
File: JuX1_oQdQQlBpU0uPBnvcWB93j8.roa (raw, json)
Hash identifier: FZzogSqVxmvRLnflYQZMrGV7lYMhQxxacof5gMp7tHc=
Subject key identifier: 26:E5:F5:FE:84:1D:41:09:41:A5:4D:2E:3C:19:EF:71:60:7D:DE:3F
Certificate issuer: /CN=756127c6cd4e35d98f0a4ba362ce273164971942
Certificate serial: 019F2368F76BFC94733A03ADD738B72E1EFE
Authority key identifier: 75:61:27:C6:CD:4E:35:D9:8F:0A:4B:A3:62:CE:27:31:64:97:19:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dWEnxs1ONdmPCkujYs4nMWSXGUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/JuX1_oQdQQlBpU0uPBnvcWB93j8.roa
Signing time: Thu 02 Jul 2026 15:18:29 +0000
ROA not before: Thu 02 Jul 2026 15:18:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51783
IP address blocks: 2a04:ac00:3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/dWEnxs1ONdmPCkujYs4nMWSXGUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/dWEnxs1ONdmPCkujYs4nMWSXGUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dWEnxs1ONdmPCkujYs4nMWSXGUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:f7:6b:fc:94:73:3a:03:ad:d7:38:b7:2e:1e:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=756127c6cd4e35d98f0a4ba362ce273164971942
Validity
Not Before: Jul 2 15:18:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=26e5f5fe841d410941a54d2e3c19ef71607dde3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e2:37:ea:17:d7:72:95:f0:fd:35:ae:92:ef:
cc:1b:ef:fc:d3:99:dc:fa:3d:56:1d:f3:72:99:7c:
34:d3:2e:de:9c:1e:41:e2:2b:b7:92:24:a7:55:f8:
25:87:77:a3:6f:6d:62:11:c7:ab:f4:5a:3a:8e:79:
e5:83:de:b7:27:9c:6d:51:70:42:13:91:cd:86:5d:
b3:d9:1c:9f:e7:6f:08:9c:64:8d:f3:26:9e:5c:84:
a4:84:33:36:3e:c4:fc:77:d9:35:9e:70:9e:2b:40:
10:75:83:91:93:2c:aa:cb:5a:90:4d:b0:54:dd:f0:
a2:53:9f:4a:c6:93:84:b8:30:23:d5:ef:e8:f5:e7:
f0:92:3c:03:53:bf:f9:58:87:97:cd:90:e9:a0:86:
55:19:0c:8a:7c:b9:a0:88:0a:97:39:5b:e4:3e:2b:
56:61:88:d4:8e:38:30:75:76:c6:60:ac:cc:5c:6a:
e3:e0:c0:12:c2:70:3c:32:b3:b4:f2:f4:b4:9b:0a:
ad:7f:b5:53:5e:5f:1e:ef:e4:58:6f:35:f0:84:cd:
e3:ee:cb:fd:07:75:c0:3a:6e:91:f9:3f:3c:00:8e:
b2:3d:74:8a:e4:8b:68:f3:29:fd:d0:00:65:64:88:
8c:a3:b0:71:da:e5:84:6f:91:1f:c9:f4:b2:c8:0a:
2a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:E5:F5:FE:84:1D:41:09:41:A5:4D:2E:3C:19:EF:71:60:7D:DE:3F
X509v3 Authority Key Identifier:
keyid:75:61:27:C6:CD:4E:35:D9:8F:0A:4B:A3:62:CE:27:31:64:97:19:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dWEnxs1ONdmPCkujYs4nMWSXGUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/JuX1_oQdQQlBpU0uPBnvcWB93j8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/dWEnxs1ONdmPCkujYs4nMWSXGUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:ac00:3::/48
Signature Algorithm: sha256WithRSAEncryption
1c:6b:f4:51:b4:7c:92:d3:41:2a:67:c0:bf:81:e4:c2:fc:d3:
a5:62:47:22:fc:7c:40:df:74:58:c2:68:41:1a:a9:55:a7:73:
d7:76:d0:7a:33:2e:0b:4b:8a:5c:ed:cc:62:0f:84:40:f3:03:
d4:74:39:e5:9d:23:70:04:90:cb:81:79:f2:9c:23:86:de:97:
8c:ce:64:e0:2a:a0:0f:2f:43:7e:64:a8:fa:1f:2d:b7:e0:94:
1e:cc:f8:62:49:55:ff:d9:df:27:85:d9:e2:2a:c7:05:b7:74:
d6:54:b2:3a:f6:3d:ef:ce:b7:be:38:ab:96:4a:9b:48:a4:22:
77:a3:f1:7b:11:a8:6b:46:45:c1:26:50:4e:be:3c:06:84:a9:
63:1f:58:e3:f0:76:18:ca:4e:ff:53:bf:69:df:fb:83:46:24:
b4:b0:49:89:af:74:75:05:6d:4f:9f:8e:1e:86:02:f3:57:85:
3e:d5:30:e2:e2:8b:07:64:0f:9f:34:e3:1f:91:74:00:5c:8e:
9e:38:e2:19:d4:20:1b:93:fa:ab:3e:40:18:d9:c7:a6:4d:0e:
ad:38:80:24:ce:97:45:0c:f6:23:52:94:55:0c:6b:d8:d6:39:
3a:d1:24:00:01:d9:e0:9f:2a:94:05:42:5f:9b:4f:44:25:5c:
40:aa:70:4c
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZ8jaPdr/JRzOgOt1zi3Lh7+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1NjEyN2M2Y2Q0ZTM1ZDk4ZjBhNGJhMzYyY2UyNzMxNjQ5
NzE5NDIwHhcNMjYwNzAyMTUxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNmU1ZjVmZTg0MWQ0MTA5NDFhNTRkMmUzYzE5ZWY3MTYwN2RkZTNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+I36hfXcpXw/TWuku/MG+/805nc
+j1WHfNymXw00y7enB5B4iu3kiSnVfglh3ejb21iEcer9Fo6jnnlg963J5xtUXBC
E5HNhl2z2Ryf528InGSN8yaeXISkhDM2PsT8d9k1nnCeK0AQdYORkyyqy1qQTbBU
3fCiU59KxpOEuDAj1e/o9efwkjwDU7/5WIeXzZDpoIZVGQyKfLmgiAqXOVvkPitW
YYjUjjgwdXbGYKzMXGrj4MASwnA8MrO08vS0mwqtf7VTXl8e7+RYbzXwhM3j7sv9
B3XAOm6R+T88AI6yPXSK5Ito8yn90ABlZIiMo7Bx2uWEb5EfyfSyyAoqCQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFCbl9f6EHUEJQaVNLjwZ73Fgfd4/MB8GA1UdIwQY
MBaAFHVhJ8bNTjXZjwpLo2LOJzFklxlCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFdFbnhzMU9OZG1QQ2t1allzNG5NV1NYR1VJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8zNDY1ZjMtMDNjMi00ZWFhLWE2NzQt
ODg2MmI1MTczMTdjLzEvSnVYMV9vUWRRUWxCcFUwdVBCbnZjV0I5M2o4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS8zNDY1ZjMtMDNjMi00ZWFhLWE2NzQtODg2MmI1MTczMTdj
LzEvZFdFbnhzMU9OZG1QQ2t1allzNG5NV1NYR1VJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgSsAAAD
MA0GCSqGSIb3DQEBCwUAA4IBAQAca/RRtHyS00EqZ8C/geTC/NOlYkci/HxA33RY
wmhBGqlVp3PXdtB6My4LS4pc7cxiD4RA8wPUdDnlnSNwBJDLgXnynCOG3peMzmTg
KqAPL0N+ZKj6Hy234JQezPhiSVX/2d8nhdniKscFt3TWVLI69j3vzre+OKuWSptI
pCJ3o/F7EahrRkXBJlBOvjwGhKljH1jj8HYYyk7/U79p3/uDRiS0sEmJr3R1BW1P
n44ehgLzV4U+1TDi4osHZA+fNOMfkXQAXI6eOOIZ1CAbk/qrPkAY2cemTQ6tOIAk
zpdFDPYjUpRVDGvY1jk60SQAAdngnyqUBUJfm09EJVxAqnBM
-----END CERTIFICATE-----
Generated at Fri Jul 24 20:46:50 2026 by rpki-client