Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/RQStWPOdfEl1nNtW4AqK9qoaStc.roa
File: RQStWPOdfEl1nNtW4AqK9qoaStc.roa (raw, json)
Hash identifier: FRZ9xMMrKNvldL/rpDs3mmqkH+zcJyRGfoukJLEcfUw=
Subject key identifier: 45:04:AD:58:F3:9D:7C:49:75:9C:DB:56:E0:0A:8A:F6:AA:1A:4A:D7
Certificate issuer: /CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Certificate serial: 019CC3A1D0668598EC8B2EB86CC87AA2D23C
Authority key identifier: 67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/RQStWPOdfEl1nNtW4AqK9qoaStc.roa
Signing time: Fri 06 Mar 2026 14:51:27 +0000
ROA not before: Fri 06 Mar 2026 14:51:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204085
IP address blocks: 2a14:67c3:1b0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 06:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c3:a1:d0:66:85:98:ec:8b:2e:b8:6c:c8:7a:a2:d2:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Validity
Not Before: Mar 6 14:51:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4504ad58f39d7c49759cdb56e00a8af6aa1a4ad7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:fa:e9:58:c0:7f:0a:42:9e:c9:1a:82:e6:f7:
fb:7b:a3:34:7d:25:a7:1a:bf:22:54:b5:76:96:a5:
e7:54:00:0b:1f:0d:14:e0:bf:68:48:e0:bc:0c:b2:
3a:14:b0:ee:57:0c:f2:e0:1d:56:4d:59:91:8b:52:
74:5c:83:b7:98:81:32:d5:cc:e1:b3:00:82:a1:8f:
73:47:f5:64:6d:8e:66:6a:27:36:98:a3:a0:7d:1e:
69:b7:e5:d9:48:c0:ad:75:f0:ca:2f:3d:78:3d:eb:
8f:38:34:36:f4:12:6e:6d:91:a4:6e:f7:36:97:9f:
36:31:91:7e:45:73:da:f6:65:ee:04:7f:ba:fb:ef:
91:ba:2f:d1:6e:74:20:54:3d:32:ef:63:09:5a:e9:
ce:03:25:40:51:a1:2c:79:f4:3f:fd:7b:0d:69:22:
12:6e:b7:33:34:6c:0e:30:3c:44:33:6c:f6:7d:64:
4b:22:77:7d:23:ac:e9:e7:d5:19:ae:67:0d:44:1f:
d8:1b:33:e2:d9:66:c4:06:da:8a:0e:73:1d:74:b0:
65:94:61:f0:e4:a0:b2:26:5a:ec:45:42:e1:dc:c9:
8a:e2:c3:7f:78:43:11:e6:85:77:dc:73:d7:cc:75:
d6:ed:8e:69:6d:89:77:90:53:70:42:32:fd:c9:2d:
6c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:04:AD:58:F3:9D:7C:49:75:9C:DB:56:E0:0A:8A:F6:AA:1A:4A:D7
X509v3 Authority Key Identifier:
keyid:67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/RQStWPOdfEl1nNtW4AqK9qoaStc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:67c3:1b0::/44
Signature Algorithm: sha256WithRSAEncryption
82:c2:f7:29:a3:3d:dc:2c:ce:71:fd:02:39:57:22:3d:96:38:
3f:e8:38:a5:72:be:0c:fc:32:7b:38:3e:9b:3d:5d:60:97:2b:
8d:5e:b0:30:bb:e1:70:2f:81:02:26:16:68:10:c9:83:f6:8b:
f8:c8:3d:26:5d:b5:86:d8:25:e9:d3:96:13:8e:97:f6:76:2d:
bc:70:7e:32:b0:ac:1e:a5:3b:60:8b:c1:ae:5e:3a:51:51:ce:
bb:6b:17:78:45:be:b1:95:63:e2:85:6b:d0:b3:97:e4:6f:a0:
c7:f9:9c:68:17:52:04:c1:3a:60:1d:58:e5:e0:79:9e:02:71:
74:a5:b2:cc:ff:58:fd:d2:1a:26:83:1f:1c:e4:13:42:e9:4f:
c0:27:3f:60:f7:10:f2:2b:e5:59:4f:83:4c:d7:8e:49:83:a5:
c6:5d:5b:3a:b7:5f:fc:c3:57:c5:91:65:e6:2f:43:f2:09:20:
11:dd:d8:66:3b:38:d3:88:e3:2a:4e:16:b0:16:5e:db:9b:6e:
85:b8:90:63:0f:84:cc:01:46:29:c4:b1:af:6d:5c:c3:f3:fa:
d7:6a:97:b7:05:d5:e9:9d:f0:47:a7:2e:4e:24:c4:38:e6:ae:
53:da:25:af:40:1c:e0:e1:4e:11:5b:4c:2c:21:d6:e1:ee:f3:
f0:ff:37:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 14:01:29 2026 by rpki-client