Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/5qU3CmxsrVojrONIADDBC4cBc9M.roa
File: 5qU3CmxsrVojrONIADDBC4cBc9M.roa (raw, json)
Hash identifier: ZmDpPJAi999id6NEkr9sXnfYFXqr+BS2Kb/dM8LJWBg=
Subject key identifier: E6:A5:37:0A:6C:6C:AD:5A:23:AC:E3:48:00:30:C1:0B:87:01:73:D3
Certificate issuer: /CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Certificate serial: 019E692A6D7E714AA28071BCA33212B9886C
Authority key identifier: 67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/5qU3CmxsrVojrONIADDBC4cBc9M.roa
Signing time: Wed 27 May 2026 11:20:48 +0000
ROA not before: Wed 27 May 2026 11:20:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214931
IP address blocks: 2a14:67c1:c700::/40 maxlen: 48
2a14:67c1:c702::/48 maxlen: 48
2a14:67c1:c703::/48 maxlen: 48
2a14:67c1:c704::/48 maxlen: 48
2a14:67c1:c705::/48 maxlen: 48
2a14:67c1:c706::/48 maxlen: 48
2a14:67c3:a0::/44 maxlen: 44
2a14:67c3:a1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 09:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:69:2a:6d:7e:71:4a:a2:80:71:bc:a3:32:12:b9:88:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Validity
Not Before: May 27 11:20:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e6a5370a6c6cad5a23ace3480030c10b870173d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:84:40:28:d7:f1:34:45:0b:a6:0d:ec:42:85:
35:e6:93:eb:c0:a1:20:9b:a2:a8:66:9f:ad:6f:fc:
5e:b2:e1:4b:b0:f1:59:4a:ec:2a:c2:94:4f:fb:75:
92:91:22:47:74:68:4c:07:40:b7:26:fd:a7:96:e6:
8c:11:ec:cf:64:bc:b2:71:6f:56:1e:7d:62:cb:d8:
78:11:38:28:04:6d:ef:39:92:56:1e:d8:01:bf:b3:
81:f1:49:cb:41:01:00:54:25:65:9c:68:32:0e:d8:
2a:1e:c5:7b:3a:4b:47:95:9b:31:e1:f8:9d:db:e4:
3a:23:a8:ad:ff:05:bb:d8:b7:b8:74:ff:97:25:84:
44:6e:aa:35:53:ff:d3:c4:a6:24:9b:3f:fe:d8:4a:
b4:c7:a7:60:e7:da:8f:4a:49:06:c7:12:ce:2a:73:
50:2e:cd:70:c8:4e:63:1a:3c:a9:ad:5c:4e:34:e8:
aa:0a:b8:39:b6:47:82:9e:14:0b:8f:70:53:a4:02:
e1:65:3d:ae:59:42:63:8c:39:44:9d:08:8b:f5:42:
a4:38:cd:c6:33:82:42:8e:e5:35:52:95:21:06:b0:
60:10:65:60:dd:70:05:2a:89:c9:3a:a9:04:1c:0e:
ce:e3:fc:b5:1e:0b:bc:8f:d3:51:2d:22:28:2d:b3:
36:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:A5:37:0A:6C:6C:AD:5A:23:AC:E3:48:00:30:C1:0B:87:01:73:D3
X509v3 Authority Key Identifier:
keyid:67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/5qU3CmxsrVojrONIADDBC4cBc9M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:67c1:c700::/40
2a14:67c3:a0::/44
Signature Algorithm: sha256WithRSAEncryption
15:97:69:c0:ed:6a:e3:4d:52:0a:1c:59:8c:d1:e7:d3:01:38:
07:c3:f7:29:84:0a:b3:3f:40:12:e4:a6:54:86:c8:db:df:c1:
d5:73:45:20:a6:a9:e0:d5:d8:3b:54:73:bf:4f:25:c2:f6:44:
ae:ed:42:59:ff:fe:1b:4a:36:5a:2f:30:d5:8c:45:ac:6d:96:
9f:3a:f6:da:e6:96:9f:22:16:12:9c:48:54:cf:00:62:c7:2a:
fe:4f:87:d1:a6:79:7f:7a:74:44:4a:42:fa:f6:f5:5c:aa:46:
cc:04:2c:92:e7:2f:87:d7:2c:b3:d2:7d:5f:41:b0:c8:38:9f:
3c:a6:82:0a:ce:f6:d6:64:b9:2d:37:4b:e0:c7:b6:b5:84:95:
6c:c0:6d:b5:4a:78:83:88:dc:3b:4b:b9:f0:bc:47:19:f9:5e:
03:10:99:b1:27:c5:19:77:e1:b7:cb:3d:6c:1d:a1:8e:46:c0:
5b:46:9a:2b:86:3a:ab:0b:b5:3c:64:f6:02:80:18:cb:64:0f:
bb:01:20:dd:18:d4:6b:82:49:25:81:9e:34:ea:b8:7f:01:d1:
44:56:2f:00:8f:e5:7c:8f:40:2a:7e:07:81:22:56:db:00:1b:
b6:8e:25:62:05:33:08:e7:df:4c:b8:ca:b9:e1:91:4d:7c:3f:
98:3d:20:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 16:44:53 2026 by rpki-client