Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/4YvdbEb6x6Ykwmp0oCwu8l1C22c.roa
File: 4YvdbEb6x6Ykwmp0oCwu8l1C22c.roa (raw, json)
Hash identifier: ysCI7umCJpbNO0gyqDeOxrUOYmCHfFZXEjW/d1dgKBE=
Subject key identifier: E1:8B:DD:6C:46:FA:C7:A6:24:C2:6A:74:A0:2C:2E:F2:5D:42:DB:67
Certificate issuer: /CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Certificate serial: 019C14D3CC8CEBBBCC9810955224ADECDF4A
Authority key identifier: 67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/4YvdbEb6x6Ykwmp0oCwu8l1C22c.roa
Signing time: Sat 31 Jan 2026 16:12:30 +0000
ROA not before: Sat 31 Jan 2026 16:12:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396982
IP address blocks: 2a14:67c2:577::/48 maxlen: 48
2a14:67c2:1020::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 23 Feb 2026 14:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:14:d3:cc:8c:eb:bb:cc:98:10:95:52:24:ad:ec:df:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Validity
Not Before: Jan 31 16:12:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e18bdd6c46fac7a624c26a74a02c2ef25d42db67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:ad:34:be:e6:c7:4a:55:5d:d5:71:54:df:7c:
7d:70:0b:b5:5e:d6:01:04:57:ec:3e:f8:4d:01:13:
00:fc:be:18:84:da:8a:b7:8a:ba:2b:d9:b8:b4:ce:
69:00:ee:03:2f:c0:1c:4a:48:cc:e4:3e:6b:9c:0c:
35:33:6c:ac:ed:a7:b9:ad:91:cd:29:b7:f6:54:8c:
ab:64:32:59:07:4d:5c:79:04:8c:99:6d:6a:8d:9c:
5d:c8:dc:56:91:3e:31:8d:01:64:90:e7:6d:68:a6:
b2:65:1e:f1:19:be:44:5d:05:f8:a4:79:a3:df:17:
40:00:5d:84:9c:31:e5:42:39:43:38:1c:1d:fd:55:
45:fb:a1:11:c5:f2:0a:eb:7c:24:3b:cc:2f:fe:73:
bf:71:1c:29:cf:8d:e0:83:a4:5a:86:22:a4:5e:f1:
ab:ad:fb:56:19:1c:21:e6:9a:14:1e:aa:24:5e:89:
0a:d0:3e:34:2d:cd:32:c3:c5:4d:f6:06:ad:73:75:
4a:d9:5e:d1:af:17:37:c0:d0:51:4b:45:94:82:49:
b2:e0:cc:83:04:98:37:6f:80:b1:0f:59:1b:2e:e5:
c2:c9:17:54:28:36:8c:ce:13:8a:88:21:93:cd:3d:
2b:55:cf:6f:b3:f9:01:78:e4:0a:97:1b:9f:71:27:
f4:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:8B:DD:6C:46:FA:C7:A6:24:C2:6A:74:A0:2C:2E:F2:5D:42:DB:67
X509v3 Authority Key Identifier:
keyid:67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/4YvdbEb6x6Ykwmp0oCwu8l1C22c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:67c2:577::/48
2a14:67c2:1020::/48
Signature Algorithm: sha256WithRSAEncryption
5d:33:eb:b7:e3:05:b3:79:75:d6:43:ad:b4:86:11:db:6c:84:
c7:87:58:ce:c6:26:ca:5c:75:93:12:fd:95:98:20:7c:17:f4:
66:fe:42:ab:95:27:bb:36:9b:0a:a4:de:5f:7d:d6:c1:06:1f:
a0:02:67:83:4a:e4:e0:d9:45:a5:92:6f:b0:92:2c:a3:46:c3:
40:30:fd:01:c7:7e:ee:ca:dd:e5:cd:37:5e:4a:cc:f2:ce:bb:
d3:c5:50:26:dd:e4:c5:d2:ef:53:be:6b:53:a7:37:ee:ec:e2:
a8:ab:64:37:c7:cc:0e:db:02:e1:59:85:ec:c5:63:d9:8a:99:
14:21:45:35:26:9e:e8:35:5f:a5:d3:a7:7a:93:3a:66:c2:2e:
e9:b4:c9:c0:3c:19:87:0d:d8:8d:15:58:3b:83:71:39:19:7e:
51:df:1d:c9:02:d9:8b:28:68:6d:0a:40:2e:04:83:c2:4f:40:
a5:70:91:20:11:a6:04:ef:7c:4b:97:c7:46:47:79:9a:a8:f8:
a1:4d:ca:b3:2d:18:05:06:49:e3:90:d4:9d:88:3a:4a:1b:6e:
60:10:fe:3c:d3:d0:62:8c:65:4e:15:51:29:d2:e9:28:22:c1:
f0:49:b7:f5:62:2a:85:2a:ff:f1:97:79:b5:ca:bb:38:bd:b0:
83:6b:e8:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 22 22:01:01 2026 by rpki-client