Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/1j-0fRD2UKFFOwRpmh3BdgzS-KY.roa
File: 1j-0fRD2UKFFOwRpmh3BdgzS-KY.roa (raw, json)
Hash identifier: J/OpGEjDOcAf1NYGQDPN+Up9rV3l4EiqrJmyP7OZ814=
Subject key identifier: D6:3F:B4:7D:10:F6:50:A1:45:3B:04:69:9A:1D:C1:76:0C:D2:F8:A6
Certificate issuer: /CN=fe8199e8345567d8516b788fe2e1d397e27c73a4
Certificate serial: 019DFD9E9A0A36BDA843BE6BC476C8E4603C
Authority key identifier: FE:81:99:E8:34:55:67:D8:51:6B:78:8F:E2:E1:D3:97:E2:7C:73:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/1j-0fRD2UKFFOwRpmh3BdgzS-KY.roa
Signing time: Wed 06 May 2026 14:08:42 +0000
ROA not before: Wed 06 May 2026 14:08:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197706
IP address blocks: 2a05:e9c0:9200::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:fd:9e:9a:0a:36:bd:a8:43:be:6b:c4:76:c8:e4:60:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe8199e8345567d8516b788fe2e1d397e27c73a4
Validity
Not Before: May 6 14:08:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d63fb47d10f650a1453b04699a1dc1760cd2f8a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ba:f8:e4:cb:06:f9:79:38:24:02:68:87:50:
4d:99:e7:af:b6:90:62:43:cb:9a:63:e2:60:55:61:
25:c6:f1:28:50:3d:b4:e2:43:6a:1d:62:5b:30:f1:
b8:72:b8:cc:06:cb:23:e6:e9:38:bb:6e:33:51:fe:
80:2c:94:42:65:6f:fa:ac:71:06:db:1c:53:36:0b:
bd:6d:af:a9:4e:72:7c:75:13:66:92:81:c6:9e:4b:
b2:d3:2c:ca:f7:f8:8d:13:37:e5:10:b4:5e:47:71:
37:63:71:be:b0:16:f2:f4:dd:87:d7:63:5f:72:fe:
8e:17:65:b2:79:84:66:73:e5:22:e7:3b:bb:d9:46:
1e:d2:84:05:18:c2:23:79:16:6f:5d:f7:82:92:21:
83:89:39:ad:8f:cc:7d:df:24:1d:8d:aa:1b:95:d8:
8e:ef:ab:c8:0f:92:ce:3c:b4:e4:57:02:dd:ad:6e:
04:18:9e:bb:54:85:24:be:67:37:3f:8a:f4:51:9a:
08:cf:fc:9d:b9:ef:0f:65:77:ad:03:e4:03:31:72:
df:54:17:74:24:db:03:1b:f3:8b:15:8a:80:ce:bd:
ac:37:a0:ed:41:81:14:a0:13:6c:d2:5f:55:87:48:
ed:ba:44:59:7b:f9:5c:38:df:e5:b5:97:e6:95:b9:
90:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:3F:B4:7D:10:F6:50:A1:45:3B:04:69:9A:1D:C1:76:0C:D2:F8:A6
X509v3 Authority Key Identifier:
keyid:FE:81:99:E8:34:55:67:D8:51:6B:78:8F:E2:E1:D3:97:E2:7C:73:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/1j-0fRD2UKFFOwRpmh3BdgzS-KY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:e9c0:9200::/40
Signature Algorithm: sha256WithRSAEncryption
24:65:56:25:d6:fc:99:00:99:66:ad:8e:0a:86:39:27:aa:30:
d3:a7:25:9b:af:e0:3e:68:98:59:95:23:f8:02:6b:b5:a4:05:
ba:3a:35:d4:45:da:70:c5:18:62:09:8c:25:37:05:18:86:77:
0e:97:5d:7f:4b:d9:9a:dc:68:e3:c0:eb:e7:5c:67:46:4d:7e:
87:40:18:9f:6c:f9:b3:9a:00:79:c4:4e:70:a4:0f:6a:f6:45:
c6:69:c2:9b:85:49:7b:fb:5a:e2:94:f9:50:c0:ce:22:e2:c5:
f4:aa:a0:6c:7c:44:32:cd:70:e4:a8:6e:42:3e:04:a4:47:a2:
67:03:cb:a1:e1:fe:71:99:87:6a:60:32:6f:95:ea:77:9e:ed:
d5:11:ca:3b:ac:cf:2e:57:6f:13:b5:c4:c7:6b:cf:86:42:36:
9c:cd:c8:2f:c3:08:ba:d2:76:1e:38:d5:5d:5e:ba:88:e4:ce:
9c:53:fc:69:a3:53:19:17:bf:86:56:68:0c:38:35:59:e2:34:
e1:2c:de:c7:12:d9:d4:3f:45:43:9d:83:bb:83:a4:81:66:8f:
17:dd:4c:8b:e6:bd:84:76:d0:36:ab:ff:1e:d7:1d:56:94:68:
ac:a0:3d:0e:f3:85:cf:ff:48:f5:b5:3d:32:89:80:30:92:0b:
24:a1:21:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:36:02 2026 by rpki-client