Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/ahtNFMd3uoZF0xCdEKJQxwfL2e8.roa
File: ahtNFMd3uoZF0xCdEKJQxwfL2e8.roa (raw, json)
Hash identifier: t8XbVZoMk7VDVrYCXoGc8z2gM8EgaEIP0QYQdN8stl4=
Subject key identifier: 6A:1B:4D:14:C7:77:BA:86:45:D3:10:9D:10:A2:50:C7:07:CB:D9:EF
Certificate issuer: /CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Certificate serial: 01A0579673735E135B3F72EF7DED6E5E6E7A
Authority key identifier: 67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/ahtNFMd3uoZF0xCdEKJQxwfL2e8.roa
Signing time: Mon 31 Aug 2026 11:31:12 +0000
ROA not before: Mon 31 Aug 2026 11:31:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207075
IP address blocks: 2a14:67c1:a130::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 11:31:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:57:96:73:73:5e:13:5b:3f:72:ef:7d:ed:6e:5e:6e:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Validity
Not Before: Aug 31 11:31:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a1b4d14c777ba8645d3109d10a250c707cbd9ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:89:54:60:13:33:1e:bc:6f:f7:cc:61:59:99:
6e:be:bd:fc:c0:09:3f:a6:79:97:64:56:61:cc:9c:
d4:7a:68:b5:3e:d3:9b:a0:1b:84:f3:c4:9e:9e:8b:
89:9a:b0:1e:78:3d:99:ad:2f:a3:62:8f:74:b4:13:
ac:9a:59:64:7b:bc:b8:10:1f:9c:85:c1:c3:81:a0:
be:eb:10:b4:56:5d:45:0a:ae:20:9d:b6:0d:95:17:
4e:62:66:d7:33:67:a5:e5:7d:d8:72:98:9d:c4:a7:
04:fc:d5:0f:32:d2:ab:a7:5e:92:65:4c:35:78:c2:
90:1b:8a:2a:29:8b:3e:b3:2e:6f:a3:a3:e6:b1:1e:
83:c9:2b:b9:b1:55:98:4c:6d:51:5e:c6:a3:09:66:
c9:15:ab:ee:02:85:1d:f0:b8:e8:a0:0a:f3:3e:1e:
14:58:66:a8:6a:29:de:7c:1b:98:54:79:d7:f7:9e:
5c:2c:a5:af:7b:62:4a:70:1f:ba:23:63:f5:1d:26:
ef:9c:46:57:b0:58:4f:bf:13:be:aa:b1:e6:e4:8e:
28:36:7c:6e:db:9c:5b:61:ae:7e:ab:eb:29:9f:da:
51:e8:52:3d:58:06:59:d3:66:3e:12:24:e3:d5:89:
d9:42:fd:2a:02:6b:72:54:63:84:3f:5b:48:2e:d3:
8f:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:1B:4D:14:C7:77:BA:86:45:D3:10:9D:10:A2:50:C7:07:CB:D9:EF
X509v3 Authority Key Identifier:
keyid:67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/ahtNFMd3uoZF0xCdEKJQxwfL2e8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:67c1:a130::/44
Signature Algorithm: sha256WithRSAEncryption
b5:62:f1:e7:45:fa:f6:3f:81:1e:e4:93:11:aa:44:f0:e4:ca:
d0:ba:ea:91:dc:28:6f:23:74:d3:15:5e:08:60:19:92:33:11:
43:88:83:ef:23:ac:7d:40:f2:5e:b9:f9:6f:17:06:a0:8a:64:
96:b7:73:26:03:3c:dc:f1:78:8c:35:0e:17:98:13:68:b9:9b:
7c:63:00:d6:cd:38:d3:48:36:2b:dc:dd:c5:7f:45:1a:46:7a:
28:8b:74:6a:00:02:bb:88:d6:d9:a3:37:a8:c9:13:40:8e:e8:
5b:9e:06:bd:4c:fc:6b:a8:8d:aa:52:93:88:f4:ce:fa:be:a5:
93:63:07:72:67:43:05:ab:86:0c:e4:7a:8e:1b:bb:31:a6:db:
c2:45:f4:e6:01:31:36:31:33:91:f7:c6:ba:f0:cb:85:44:00:
3b:b9:93:1a:20:cb:61:9c:bc:45:1e:19:15:85:13:7b:07:6e:
fa:a5:4e:ca:08:3c:e9:0d:4f:ae:45:c9:50:ec:96:cd:15:07:
22:a9:c3:76:33:b5:07:36:07:35:09:06:a9:ce:ce:83:7c:e9:
4e:08:f4:0f:bb:0b:b0:29:f2:81:45:9e:76:19:b7:ee:ae:ca:
f9:37:f3:1a:27:86:bc:a3:89:00:10:91:5b:9f:f7:f7:ad:27:
f5:01:46:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 16:51:49 2026 by rpki-client