Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/jcRnGzty5tFJLCYMbqQ9KAoJt0M.roa
File: jcRnGzty5tFJLCYMbqQ9KAoJt0M.roa (raw, json)
Hash identifier: a1X93SlCywmHujOimn+Po6M7RMMfbT2R8166ZJ7vS9o=
Subject key identifier: 8D:C4:67:1B:3B:72:E6:D1:49:2C:26:0C:6E:A4:3D:28:0A:09:B7:43
Certificate issuer: /CN=80ffd9df456adbe3b1e661ee15626865fe1688c8
Certificate serial: 019F129844EFEA7F83183CEC574A5FAB53F1
Authority key identifier: 80:FF:D9:DF:45:6A:DB:E3:B1:E6:61:EE:15:62:68:65:FE:16:88:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/jcRnGzty5tFJLCYMbqQ9KAoJt0M.roa
Signing time: Mon 29 Jun 2026 08:56:36 +0000
ROA not before: Mon 29 Jun 2026 08:56:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61992
IP address blocks: 2a14:e900::/29 maxlen: 48
2a14:e900:22::/48 maxlen: 48
2a14:e900:1000::/48 maxlen: 48
2a14:e900:2030::/48 maxlen: 48
2a14:e900:2100::/48 maxlen: 48
2a14:e900:9000::/48 maxlen: 48
2a14:e900:9105::/48 maxlen: 48
2a14:e900:9120::/48 maxlen: 48
2a14:e900:9200::/44 maxlen: 44
2a14:e900:9201::/48 maxlen: 48
2a14:e900:9202::/48 maxlen: 48
2a14:e900:9203::/48 maxlen: 48
2a14:e900:9204::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.mft
rsync://rpki.ripe.net/repository/DEFAULT/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:98:44:ef:ea:7f:83:18:3c:ec:57:4a:5f:ab:53:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80ffd9df456adbe3b1e661ee15626865fe1688c8
Validity
Not Before: Jun 29 08:56:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8dc4671b3b72e6d1492c260c6ea43d280a09b743
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:25:8d:78:11:61:f6:d3:bf:55:ea:a2:48:ec:
b8:63:e4:bc:81:f4:d5:d5:df:43:f7:0c:12:eb:c7:
84:b3:b3:6c:1c:ab:6c:22:f2:e5:ac:83:a1:2d:47:
7d:16:5f:7a:56:7e:98:b5:42:ef:41:6b:f7:96:33:
8a:54:d2:35:0c:b1:55:49:04:be:a1:dc:b7:d8:42:
4d:54:a8:dc:a8:67:c5:6f:e8:bf:5a:13:6e:9c:9d:
0f:ff:10:38:f7:e9:76:39:68:1c:40:0c:87:4b:58:
db:df:5e:b2:a6:7e:e1:9a:d9:88:8d:32:3d:a9:81:
4c:d3:63:3d:63:bb:0e:bd:7b:59:2c:66:d8:21:2c:
8e:b0:83:1a:12:01:72:46:db:e0:d7:fa:f4:c8:ea:
26:78:22:a4:97:2a:50:07:e9:1c:57:f8:17:a3:c9:
3b:b5:37:b9:2a:75:38:2e:b3:00:43:25:62:ac:57:
a3:9b:f2:43:66:95:2e:da:41:17:ee:39:e3:37:1c:
7f:c0:16:9d:6a:71:7a:ce:75:9e:ee:07:f9:22:ed:
6f:63:2e:2f:dc:8d:f7:3d:48:ce:42:7e:dd:27:43:
91:af:d2:f0:6e:87:aa:74:59:85:08:be:c4:df:ee:
21:2f:c3:79:3d:73:3e:56:3e:69:70:45:56:a1:df:
b2:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:C4:67:1B:3B:72:E6:D1:49:2C:26:0C:6E:A4:3D:28:0A:09:B7:43
X509v3 Authority Key Identifier:
keyid:80:FF:D9:DF:45:6A:DB:E3:B1:E6:61:EE:15:62:68:65:FE:16:88:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/jcRnGzty5tFJLCYMbqQ9KAoJt0M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:e900::/29
Signature Algorithm: sha256WithRSAEncryption
21:2e:0c:b1:43:22:f8:5f:bc:b1:5a:a2:e1:a2:68:9f:64:54:
0e:44:db:52:61:c9:bb:ac:b0:51:67:38:83:d0:94:b2:c6:99:
e3:ec:0c:30:59:3e:98:a1:4e:ab:c3:45:02:19:5b:91:91:3b:
e7:dd:c7:5e:cc:b0:9b:a8:72:df:60:09:70:f5:94:fa:35:b8:
42:e9:28:64:a8:f2:01:89:95:2a:c3:d2:63:76:3d:b6:5c:91:
96:a3:7e:e0:ef:b4:7a:d9:f5:62:8e:b4:a5:3e:24:59:4a:a7:
b0:1a:75:e3:e2:f8:81:c1:3f:f8:3c:b1:3c:bf:14:c0:e7:9f:
4c:d8:f3:f7:43:8d:70:59:13:64:69:21:fc:71:af:b8:47:86:
26:7c:d6:f1:fe:91:cb:c7:7d:f5:fe:f7:ea:1e:0d:5c:a5:8a:
3d:06:2c:00:9f:ad:ae:d1:7c:2b:7b:e0:c1:88:37:14:3c:78:
9f:cf:8d:c1:03:d3:6d:4f:bd:1b:27:c1:92:e9:41:84:6f:ed:
23:4e:4c:f1:7c:f6:63:57:c3:56:fd:09:d6:4c:eb:04:fb:e5:
5c:7b:25:94:7c:29:95:02:1c:76:85:ce:36:7d:95:40:17:90:
9a:f1:70:2b:e1:3a:b5:df:1a:42:de:94:18:6f:ba:39:17:f6:
ab:5f:5c:b9
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZ8SmETv6n+DGDzsV0pfq1PxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwZmZkOWRmNDU2YWRiZTNiMWU2NjFlZTE1NjI2ODY1ZmUx
Njg4YzgwHhcNMjYwNjI5MDg1NjM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZGM0NjcxYjNiNzJlNmQxNDkyYzI2MGM2ZWE0M2QyODBhMDliNzQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2iWNeBFh9tO/VeqiSOy4Y+S8gfTV
1d9D9wwS68eEs7NsHKtsIvLlrIOhLUd9Fl96Vn6YtULvQWv3ljOKVNI1DLFVSQS+
ody32EJNVKjcqGfFb+i/WhNunJ0P/xA49+l2OWgcQAyHS1jb316ypn7hmtmIjTI9
qYFM02M9Y7sOvXtZLGbYISyOsIMaEgFyRtvg1/r0yOomeCKklypQB+kcV/gXo8k7
tTe5KnU4LrMAQyVirFejm/JDZpUu2kEX7jnjNxx/wBadanF6znWe7gf5Iu1vYy4v
3I33PUjOQn7dJ0ORr9LwboeqdFmFCL7E3+4hL8N5PXM+Vj5pcEVWod+yMQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFI3EZxs7cubRSSwmDG6kPSgKCbdDMB8GA1UdIwQY
MBaAFID/2d9FatvjseZh7hViaGX+FojIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1BfWjMwVnEyLU94NW1IdUZXSm9aZjRXaU1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi85MDBjZWYtNjQ4MS00ZmY4LThlMDQt
M2NiOGQ4MTdlMDI3LzEvamNSbkd6dHk1dEZKTENZTWJxUTlLQW9KdDBNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi85MDBjZWYtNjQ4MS00ZmY4LThlMDQtM2NiOGQ4MTdlMDI3
LzEvZ1BfWjMwVnEyLU94NW1IdUZXSm9aZjRXaU1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhTpADAN
BgkqhkiG9w0BAQsFAAOCAQEAIS4MsUMi+F+8sVqi4aJon2RUDkTbUmHJu6ywUWc4
g9CUssaZ4+wMMFk+mKFOq8NFAhlbkZE7593HXsywm6hy32AJcPWU+jW4QukoZKjy
AYmVKsPSY3Y9tlyRlqN+4O+0etn1Yo60pT4kWUqnsBp14+L4gcE/+DyxPL8UwOef
TNjz90ONcFkTZGkh/HGvuEeGJnzW8f6Ry8d99f736h4NXKWKPQYsAJ+trtF8K3vg
wYg3FDx4n8+NwQPTbU+9GyfBkulBhG/tI05M8Xz2Y1fDVv0J1kzrBPvlXHsllHwp
lQIcdoXONn2VQBeQmvFwK+E6td8aQt6UGG+6ORf2q19cuQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 23:32:59 2026 by rpki-client