Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/JYQlbQJEy0sPqACuaQ0ZNKP0_kA.roa
File: JYQlbQJEy0sPqACuaQ0ZNKP0_kA.roa (raw, json)
Hash identifier: 9Mf/IBP/vEnvOsH8GvnEXV1QapAzMWJM6lph3xsak/E=
Subject key identifier: 25:84:25:6D:02:44:CB:4B:0F:A8:00:AE:69:0D:19:34:A3:F4:FE:40
Certificate issuer: /CN=a0df7f5b6618bda23c83bed11b442041f1fb456d
Certificate serial: 019F4B2EC306CCBF0660A9AF15324F784A07
Authority key identifier: A0:DF:7F:5B:66:18:BD:A2:3C:83:BE:D1:1B:44:20:41:F1:FB:45:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oN9_W2YYvaI8g77RG0QgQfH7RW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/JYQlbQJEy0sPqACuaQ0ZNKP0_kA.roa
Signing time: Fri 10 Jul 2026 08:39:43 +0000
ROA not before: Fri 10 Jul 2026 08:39:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 147003
IP address blocks: 2a12:e100:40::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oN9_W2YYvaI8g77RG0QgQfH7RW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:4b:2e:c3:06:cc:bf:06:60:a9:af:15:32:4f:78:4a:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0df7f5b6618bda23c83bed11b442041f1fb456d
Validity
Not Before: Jul 10 08:39:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2584256d0244cb4b0fa800ae690d1934a3f4fe40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:aa:e3:4b:c7:1a:9b:a1:b0:64:ae:d1:01:95:
16:8b:c2:86:01:7c:fe:e6:0f:29:05:f0:02:a8:57:
a1:d8:d8:3a:5e:b5:d1:2e:b6:09:b6:59:76:2c:ca:
f6:20:b8:47:d5:48:e9:c4:0a:31:2c:39:c3:d6:72:
2f:d4:11:bf:d8:97:16:93:ac:97:17:6c:99:ac:8e:
75:0b:74:20:b0:55:b3:e9:b7:e9:92:50:63:fd:5f:
e1:75:10:f5:d5:54:f7:72:b4:c2:c1:e5:6e:84:1c:
d9:fe:37:c3:9f:bc:50:68:3e:97:d5:e1:21:20:a3:
11:d0:73:de:84:25:f8:ce:2a:45:ec:f8:0b:35:48:
03:9d:93:83:fe:b2:8b:de:83:c4:9a:dd:1f:21:2b:
43:0d:e2:ea:b2:a4:e2:f7:4e:36:97:7e:8d:26:92:
c4:7f:ce:50:de:2e:06:30:dc:8c:a7:39:1a:a6:90:
05:ed:bf:76:c9:51:43:50:1d:88:44:6f:c0:60:1b:
21:98:97:05:fb:33:80:8a:59:74:33:4d:dd:26:a6:
66:8e:0b:73:0b:99:0b:78:71:94:98:a4:32:b6:bd:
62:22:6f:ea:d9:4e:99:e6:47:f1:4e:19:13:c5:9a:
62:92:81:51:b8:b1:69:ff:fa:d3:2c:f3:15:b1:4e:
ea:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:84:25:6D:02:44:CB:4B:0F:A8:00:AE:69:0D:19:34:A3:F4:FE:40
X509v3 Authority Key Identifier:
keyid:A0:DF:7F:5B:66:18:BD:A2:3C:83:BE:D1:1B:44:20:41:F1:FB:45:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oN9_W2YYvaI8g77RG0QgQfH7RW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/JYQlbQJEy0sPqACuaQ0ZNKP0_kA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:e100:40::/44
Signature Algorithm: sha256WithRSAEncryption
62:8b:ed:e5:6f:e0:47:d2:2e:54:2f:6e:6d:9a:af:3c:d6:14:
de:7d:47:d3:2d:87:d9:23:35:79:e7:41:30:5a:68:80:0c:10:
d2:4f:52:0c:e4:0d:91:a9:2a:85:ba:51:e1:91:71:a7:ba:54:
e3:ca:a8:0f:76:9c:2a:a9:ff:55:1d:c3:e6:49:1f:df:83:bb:
7e:28:5e:b5:83:b6:7b:2d:76:74:a5:9c:30:40:f6:db:80:9f:
a8:1f:2b:c3:76:3e:da:51:59:ef:c6:4c:ae:4a:ec:1d:47:98:
64:3f:5e:e8:6b:5e:cf:e0:71:4a:43:4c:e4:f6:59:4a:db:7d:
39:3f:60:ea:6a:92:0c:54:a5:10:f0:bf:c2:08:70:32:1a:83:
fe:18:f8:67:3f:19:ca:37:5d:5f:84:8a:1b:a3:75:3e:02:54:
e5:24:1b:36:70:75:f3:b2:52:fc:d8:bc:80:26:b3:b9:8d:aa:
71:d6:a3:71:19:63:4d:6a:6a:ea:d1:31:68:4a:81:24:59:ac:
b1:97:fc:31:b0:cc:fc:8d:f8:8a:44:85:96:d4:bf:62:b2:a9:
d9:a5:95:c7:bf:6f:ae:1d:0e:5f:42:d3:4c:78:45:a5:43:a4:
e1:43:96:01:fe:ad:54:d6:61:70:96:bb:01:9b:7e:94:f5:7c:
95:b7:85:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:58:11 2026 by rpki-client