Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/1JSqjdkr1ibugucNgRC80L6U7ns.roa
File: 1JSqjdkr1ibugucNgRC80L6U7ns.roa (raw, json)
Hash identifier: lCreT5fGeDb32vOkf1mxkkU+xAQHgCc8UUsfMB7We50=
Subject key identifier: D4:94:AA:8D:D9:2B:D6:26:EE:82:E7:0D:81:10:BC:D0:BE:94:EE:7B
Certificate issuer: /CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Certificate serial: 019DAB9513B36FF375C483264E50B7FAB230
Authority key identifier: 67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/1JSqjdkr1ibugucNgRC80L6U7ns.roa
Signing time: Mon 20 Apr 2026 15:49:26 +0000
ROA not before: Mon 20 Apr 2026 15:49:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198681
IP address blocks: 2a14:67c3:1100::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 09:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ab:95:13:b3:6f:f3:75:c4:83:26:4e:50:b7:fa:b2:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Validity
Not Before: Apr 20 15:49:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d494aa8dd92bd626ee82e70d8110bcd0be94ee7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:84:84:25:ca:d5:1d:7a:7d:84:60:30:6d:4b:
39:02:84:0e:f4:89:a5:52:23:10:ff:88:b7:ba:e7:
5f:2b:f6:d5:dc:de:a2:56:27:a1:00:16:72:1f:cb:
7a:3a:51:69:19:64:e8:d5:7e:93:73:ff:a3:cb:a6:
8d:17:2e:ce:22:29:aa:76:20:2d:67:ab:59:ed:74:
ed:22:cf:75:27:5e:2e:c5:30:d3:27:42:c5:8b:04:
2a:2b:64:5d:67:7f:af:a1:a0:61:2e:1f:ce:c5:07:
7c:f0:37:6b:01:84:fb:b5:48:15:fd:25:5d:c6:57:
f4:dd:45:f3:61:47:b7:0e:56:a4:2d:3e:93:e5:9f:
32:48:e9:bc:60:4e:39:a5:6b:15:e8:25:82:66:f8:
66:ac:1b:af:91:81:8d:8c:66:57:b4:53:b1:66:92:
83:88:3f:3c:7d:21:35:7c:b3:41:a8:4f:45:74:c6:
f6:e7:e5:c0:d8:83:cf:82:1a:b3:be:d4:9f:2f:2d:
e4:e8:3f:25:87:96:cb:cc:49:df:ca:79:b3:0a:1d:
53:a5:42:7b:f2:19:ec:00:47:af:ca:6a:76:3a:6f:
e0:36:cc:68:88:ad:67:c6:a1:85:a6:84:14:3a:16:
37:be:bf:48:65:f6:fe:c1:4a:e4:fa:68:9e:1d:d2:
f9:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:94:AA:8D:D9:2B:D6:26:EE:82:E7:0D:81:10:BC:D0:BE:94:EE:7B
X509v3 Authority Key Identifier:
keyid:67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/1JSqjdkr1ibugucNgRC80L6U7ns.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:67c3:1100::/44
Signature Algorithm: sha256WithRSAEncryption
90:af:2c:60:8a:c9:a5:30:4a:b7:fb:81:49:b6:06:32:1c:89:
23:fc:7e:7a:16:43:a3:12:03:51:a3:cb:21:d0:63:6b:d2:1e:
0e:d3:b3:79:94:40:7f:88:fa:03:02:94:cc:58:d4:92:7b:a2:
9b:8b:66:02:66:96:c2:f6:46:b3:70:04:0e:ac:d5:c1:94:f1:
37:4f:68:a7:12:42:5f:e8:1d:49:c3:74:d0:4f:dc:13:c9:0f:
33:36:3c:42:71:11:9e:5e:b1:b2:24:6a:f6:2e:15:77:4a:72:
28:2a:02:f3:b5:52:87:c2:cc:fb:b9:60:8b:f5:9d:fc:56:43:
d2:c4:6f:82:cd:24:27:f4:ed:af:d7:bd:c3:ee:e7:e5:76:02:
f1:e1:34:9e:62:99:67:a0:1b:fa:c9:85:e5:59:83:0d:58:40:
01:e7:d7:c3:5f:70:56:66:22:5e:d6:fa:7c:5a:34:de:1d:c0:
bf:10:22:b5:3a:ec:bc:05:0a:4b:b7:db:14:70:08:97:96:bc:
27:db:b4:1a:5b:92:3f:22:60:5b:1e:5c:d4:ab:a8:f1:89:9a:
2e:0e:c2:9c:d4:cb:80:a4:01:4a:c3:94:22:59:61:cb:0f:35:
9a:de:49:81:3d:28:33:fb:09:8a:62:b4:9e:28:47:47:f0:7d:
56:fa:6a:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 17:03:46 2026 by rpki-client