Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/_84PP1x8rYcjcajAHOiLM2ZVrc4.roa
File: _84PP1x8rYcjcajAHOiLM2ZVrc4.roa (raw, json)
Hash identifier: YS+4Ti7x+DQ2Gq5vMY+Yjn9pH+SYBC9u7rMZS05+lXU=
Subject key identifier: FF:CE:0F:3F:5C:7C:AD:87:23:71:A8:C0:1C:E8:8B:33:66:55:AD:CE
Certificate issuer: /CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Certificate serial: 019F45B16FA9240533DAA0A7FA8300F2F5A2
Authority key identifier: 67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/_84PP1x8rYcjcajAHOiLM2ZVrc4.roa
Signing time: Thu 09 Jul 2026 07:04:44 +0000
ROA not before: Thu 09 Jul 2026 07:04:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212194
IP address blocks: 2a14:67c4::/40 maxlen: 48
2a14:67c6::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 Jul 2026 07:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:45:b1:6f:a9:24:05:33:da:a0:a7:fa:83:00:f2:f5:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Validity
Not Before: Jul 9 07:04:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ffce0f3f5c7cad872371a8c01ce88b336655adce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:85:75:d5:cf:48:8c:01:b0:a0:80:eb:31:27:
8c:0a:3e:70:cf:0f:87:8c:42:ae:d0:74:1f:fa:6d:
ed:26:8e:d5:c4:a2:41:06:8e:b4:38:38:59:41:c2:
6c:0a:86:a1:16:e6:10:f4:98:04:b4:7e:9b:5b:67:
cb:fd:a2:ef:00:18:82:96:c3:5a:6e:9d:3d:7b:37:
c3:60:52:5c:b5:27:9b:5d:f2:38:bb:cd:ca:12:40:
73:12:88:b4:e7:0e:44:d3:3c:56:db:ef:f6:7f:39:
ab:19:a0:4c:30:86:16:0e:96:36:94:58:bb:7e:2c:
4d:3c:96:ba:e8:e6:38:70:2f:df:59:0d:87:53:fd:
0f:22:f6:a3:b4:5a:35:a1:9f:fe:a6:b8:98:c7:a5:
08:b2:3c:53:6a:a7:5b:9b:c9:06:5f:c1:80:6f:4a:
00:6b:4d:d5:16:b9:01:ff:ab:5a:4f:24:69:37:22:
07:b5:c9:b6:2f:62:a2:aa:75:4f:2a:23:8f:24:10:
42:be:00:7e:79:cc:1b:52:32:c3:8e:cb:04:62:23:
f9:c2:cc:64:cc:a4:65:ea:42:65:60:21:a7:13:65:
6a:cf:b9:03:a1:fe:ba:b1:6a:3a:8e:3f:7f:d8:14:
8a:78:02:e9:65:80:9d:5f:ab:58:05:c4:d7:01:6d:
a8:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:CE:0F:3F:5C:7C:AD:87:23:71:A8:C0:1C:E8:8B:33:66:55:AD:CE
X509v3 Authority Key Identifier:
keyid:67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/_84PP1x8rYcjcajAHOiLM2ZVrc4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:67c4::/40
2a14:67c6::/32
Signature Algorithm: sha256WithRSAEncryption
78:2f:1a:7b:4d:8d:64:06:94:47:32:9f:ee:b9:c5:63:70:9a:
f8:75:ac:3b:cf:c8:f4:7c:73:3a:ca:f5:96:04:e9:b7:58:72:
a2:3e:69:74:c2:40:bc:b7:9d:5c:b6:0f:f5:bc:4d:af:3b:8e:
4c:97:db:c9:7a:d8:27:72:1e:91:e1:b9:bd:79:7a:c0:67:cf:
c7:91:8d:1e:40:0c:c1:19:98:f2:08:f6:16:8f:73:aa:6c:55:
5a:1d:fe:41:9e:e3:e2:5f:db:c0:03:7a:e4:8b:c4:a7:db:01:
59:c0:1e:ae:85:22:31:9e:91:91:38:11:d9:20:16:9d:ab:7a:
83:42:8a:ce:7f:69:68:01:0f:b7:bb:92:80:22:92:34:b5:b8:
02:9c:62:f1:b0:7a:46:a2:bd:16:41:0f:4a:6b:b4:f5:91:74:
f1:0d:c3:11:2a:43:a1:76:12:7d:88:24:74:14:a0:ec:41:8b:
4e:36:c2:ce:a0:95:77:e7:a8:73:92:9b:7c:4f:34:59:a6:26:
b6:ab:a9:0d:48:00:78:01:42:be:21:41:1b:86:93:46:3b:b4:
71:75:c9:9b:af:18:c3:ad:77:71:bf:fd:dd:a7:96:54:2a:7a:
b2:f1:ea:44:d0:7d:75:15:e4:ce:d1:15:1e:76:0b:3e:06:77:
5f:af:e2:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 15 13:40:47 2026 by rpki-client