Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/JauiIPMakXs-XxyLaWxO0rjIw8E.roa
File: JauiIPMakXs-XxyLaWxO0rjIw8E.roa (raw, json)
Hash identifier: iXxbDtozEsteNQ9atnfu+OC8ptchPtG62ieHNq3ckVI=
Subject key identifier: 25:AB:A2:20:F3:1A:91:7B:3E:5F:1C:8B:69:6C:4E:D2:B8:C8:C3:C1
Certificate issuer: /CN=8daf61f6608f9a9eac14b18224854807bcdc1324
Certificate serial: 019DD32EB4475C0F9AC767657F6A5417E949
Authority key identifier: 8D:AF:61:F6:60:8F:9A:9E:AC:14:B1:82:24:85:48:07:BC:DC:13:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/JauiIPMakXs-XxyLaWxO0rjIw8E.roa
Signing time: Tue 28 Apr 2026 08:22:26 +0000
ROA not before: Tue 28 Apr 2026 08:22:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47263
IP address blocks: 2a09:9340:1800::/37 maxlen: 37
2a09:9340:1803::/48 maxlen: 48
2a09:9340:1806::/48 maxlen: 48
2a09:9340:180a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d3:2e:b4:47:5c:0f:9a:c7:67:65:7f:6a:54:17:e9:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8daf61f6608f9a9eac14b18224854807bcdc1324
Validity
Not Before: Apr 28 08:22:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=25aba220f31a917b3e5f1c8b696c4ed2b8c8c3c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b9:54:8d:d4:c6:09:06:96:ec:9f:5f:49:15:
3b:9d:b8:b1:b2:d9:5c:81:94:02:45:43:98:86:ae:
56:62:e6:8a:2d:6b:8c:3f:09:7f:71:ca:1e:06:33:
ca:21:40:ab:ea:90:4a:5c:03:33:30:89:f2:13:f8:
a0:8b:de:37:a3:da:c0:1a:66:65:72:29:46:b2:5a:
a8:20:5f:e1:6e:57:2c:23:f5:9a:7a:60:80:35:8a:
7d:03:8c:09:b4:7d:a2:78:ea:3b:6c:cc:e3:57:a9:
ef:c1:da:94:9a:ad:3a:6f:14:1f:6e:40:f0:c4:d3:
d6:55:47:62:45:e2:5c:01:58:b3:bf:09:51:b7:16:
58:d9:ad:85:26:13:32:35:7d:b7:32:a3:de:ac:a8:
44:f5:14:43:a0:bc:6f:37:8a:f8:d4:fc:79:26:9a:
d8:94:99:49:b7:e3:70:16:be:67:af:f3:a1:3c:91:
80:db:91:6e:ae:04:6c:f3:7c:c4:38:35:2c:57:25:
29:ba:f0:48:46:37:c1:33:1c:02:8a:34:d7:6b:9e:
56:63:a8:26:e0:cc:ff:ce:9a:a4:90:54:f1:c1:73:
76:99:01:e4:11:87:07:a4:dd:39:b3:7c:f8:77:78:
25:9d:b2:34:64:bd:11:5b:d5:85:55:fd:2d:6c:98:
b6:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:AB:A2:20:F3:1A:91:7B:3E:5F:1C:8B:69:6C:4E:D2:B8:C8:C3:C1
X509v3 Authority Key Identifier:
keyid:8D:AF:61:F6:60:8F:9A:9E:AC:14:B1:82:24:85:48:07:BC:DC:13:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/JauiIPMakXs-XxyLaWxO0rjIw8E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:9340:1800::/37
Signature Algorithm: sha256WithRSAEncryption
82:7e:a1:7a:63:40:87:5e:23:d9:c9:63:29:11:42:bb:1d:e1:
cf:22:81:9c:13:a1:07:25:60:9c:16:16:1e:34:ea:97:bb:91:
97:f1:a8:c4:14:2a:48:fe:7c:51:66:93:27:92:a6:0f:68:b3:
58:fd:a7:1c:8b:ee:0f:a1:af:4d:0c:4e:2a:f4:49:fe:8b:a4:
12:6b:99:f6:73:6c:1c:41:31:4e:4b:a0:50:22:69:e9:38:74:
46:b5:7d:62:6f:f5:00:c6:d0:e2:cc:37:89:0d:cd:9b:a0:63:
9b:d5:68:14:27:1b:84:dc:cc:b3:54:be:2a:aa:10:fd:33:f5:
fe:02:1e:90:ab:13:0c:da:25:f8:ed:65:03:5a:5f:a4:14:b7:
10:c5:1c:9a:05:41:b8:6b:83:83:2c:21:29:df:f7:c8:d5:0e:
20:62:3e:b7:a3:73:3c:36:f7:c0:bb:29:97:25:88:35:9a:a6:
01:69:81:c7:9a:24:c7:7f:0d:b3:8a:e7:0f:69:93:ca:13:e9:
0c:37:38:72:51:59:3c:e7:77:62:7d:07:2b:be:28:d0:65:9d:
32:0c:ef:e3:a1:77:a4:62:97:5c:ef:fe:8c:73:f7:05:d7:5a:
ec:06:97:e4:5e:7e:e7:df:ce:77:7d:64:2f:12:d2:33:65:6b:
fc:10:bd:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:56:25 2026 by rpki-client