Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/4oRWzcAPFbfdibvKdpEPjSNBDAA.roa
File: 4oRWzcAPFbfdibvKdpEPjSNBDAA.roa (raw, json)
Hash identifier: J+qdFZMN9uMiiMyGyAPeFvOWOhovJABzXXt2PLVpNdY=
Subject key identifier: E2:84:56:CD:C0:0F:15:B7:DD:89:BB:CA:76:91:0F:8D:23:41:0C:00
Certificate issuer: /CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Certificate serial: 019DB73E9C4BE41F3CF8EC7A9662BA5A2536
Authority key identifier: 67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/4oRWzcAPFbfdibvKdpEPjSNBDAA.roa
Signing time: Wed 22 Apr 2026 22:10:26 +0000
ROA not before: Wed 22 Apr 2026 22:10:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199277
IP address blocks: 2a14:67c3:790::/44 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Apr 2026 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b7:3e:9c:4b:e4:1f:3c:f8:ec:7a:96:62:ba:5a:25:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Validity
Not Before: Apr 22 22:10:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e28456cdc00f15b7dd89bbca76910f8d23410c00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:dd:44:e6:97:43:88:5f:26:e0:2d:a8:9e:4b:
dc:2b:fb:2d:5e:f5:11:ce:54:12:85:03:c7:6c:d7:
4f:4e:94:2b:87:15:e4:c7:80:d4:3a:52:a8:b1:88:
dd:9f:3a:b9:99:59:7c:c7:fe:07:b7:e1:0e:a4:0f:
cc:c7:b7:7e:5f:c4:b1:2b:9a:de:d1:80:94:b0:3a:
d3:4e:27:a3:97:42:f1:73:c0:eb:70:e3:25:cf:49:
af:3a:06:e9:69:d8:b6:fe:bc:1b:c7:f6:ab:c2:7a:
7f:79:b6:82:f0:fd:2b:bc:b7:45:78:39:ad:37:c1:
48:bf:d7:97:18:c4:0c:36:f1:34:de:1a:12:00:d2:
47:2a:ae:51:34:ae:31:8b:ee:78:44:be:a8:cb:c9:
09:4a:75:70:ea:7f:2e:c3:63:99:cb:fb:c8:b3:92:
ae:6b:98:81:c4:95:fe:b4:c7:3b:8f:6a:79:5b:f9:
68:ef:e8:4a:38:20:53:62:f8:60:9d:c0:62:a5:b4:
19:17:74:68:8d:de:4b:74:6f:24:a5:80:3a:4e:bf:
ff:c5:27:d0:eb:c6:40:aa:bb:83:f5:43:04:c5:0f:
00:06:9a:d3:a1:a5:17:ad:f6:90:ba:58:4c:51:c1:
1c:f3:4f:39:35:62:2f:9f:6c:21:bb:70:01:71:64:
fe:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:84:56:CD:C0:0F:15:B7:DD:89:BB:CA:76:91:0F:8D:23:41:0C:00
X509v3 Authority Key Identifier:
keyid:67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/4oRWzcAPFbfdibvKdpEPjSNBDAA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:67c3:790::/44
Signature Algorithm: sha256WithRSAEncryption
57:00:0d:b1:96:37:b3:6c:36:d3:6e:fe:9f:06:b1:6a:29:8a:
99:12:c2:d4:ef:9b:66:fd:d8:58:a3:84:29:e8:03:a4:ba:29:
c0:be:91:3d:17:b6:b0:ba:d9:a4:a1:b3:91:17:93:2a:47:97:
a0:48:64:4d:10:92:1c:36:54:12:f9:36:3e:38:c0:b2:ed:ea:
16:7b:36:ca:49:87:f7:54:b1:ee:ef:0f:27:f6:88:a7:35:2a:
52:dd:d6:c6:4a:22:97:df:5a:22:18:06:93:70:d9:2a:06:9b:
46:89:f8:40:4d:fe:9c:a2:7a:8c:50:91:46:e5:ab:f1:01:b2:
1d:ff:36:75:13:eb:40:17:ab:73:f6:a8:e8:36:97:9e:8a:ab:
4e:d7:7e:6f:aa:e6:af:5f:b3:03:6d:4f:03:4a:8c:7e:1f:e7:
87:fb:45:1b:5d:2e:ca:52:4d:f5:53:39:6a:7f:27:75:2b:c9:
11:3b:a9:69:07:28:c0:97:c7:ba:2f:6d:79:a4:a4:19:16:8a:
c7:d7:22:fc:3e:9c:c1:c2:ee:29:3d:8e:d1:2e:e8:7d:6b:aa:
aa:f6:24:90:84:45:09:e1:65:57:e6:f5:55:a2:1b:1b:9d:87:
19:0b:f7:e1:92:11:f0:f6:c7:14:bd:b1:9a:c5:87:ea:86:ab:
b3:ee:df:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 08:24:21 2026 by rpki-client