Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/f5KHhqZhZ9oONYdvnLGUlgYqz98.roa
File: f5KHhqZhZ9oONYdvnLGUlgYqz98.roa (raw, json)
Hash identifier: 5G13y+PSo5+6s5dpLSeVxRG9Ei/gnDknxIJxf1Oe3uE=
Subject key identifier: 7F:92:87:86:A6:61:67:DA:0E:35:87:6F:9C:B1:94:96:06:2A:CF:DF
Certificate issuer: /CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Certificate serial: 019E8D7220E5FE795DA56E300BA763AFCBC9
Authority key identifier: 67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/f5KHhqZhZ9oONYdvnLGUlgYqz98.roa
Signing time: Wed 03 Jun 2026 12:25:27 +0000
ROA not before: Wed 03 Jun 2026 12:25:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31898
IP address blocks: 2a14:67c1:a123::/48 maxlen: 48
2a14:67c1:a129::/48 maxlen: 48
2a14:67c1:b147::/48 maxlen: 48
2a14:67c1:c220::/44 maxlen: 44
2a14:67c1:c300::/40 maxlen: 48
2a14:67c1:c700::/48 maxlen: 48
2a14:67c1:c701::/48 maxlen: 48
2a14:67c2:3f0::/48 maxlen: 48
2a14:67c2:3f1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 09:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8d:72:20:e5:fe:79:5d:a5:6e:30:0b:a7:63:af:cb:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Validity
Not Before: Jun 3 12:25:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7f928786a66167da0e35876f9cb19496062acfdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b2:5a:f3:51:ed:e1:66:dc:1f:98:35:8d:f6:
7a:96:82:ed:9c:80:75:d8:a7:93:7f:77:29:a2:7a:
af:e8:b6:4d:be:bc:b0:23:c2:35:c5:3e:60:ee:c8:
19:76:c5:82:7c:6b:e0:98:42:4c:29:3d:03:bd:22:
b7:ab:38:6c:db:c1:a6:33:df:48:99:8d:76:f3:64:
9f:dd:e9:ab:70:c0:4f:69:39:e3:38:2c:31:a6:36:
9f:8e:45:11:04:2a:75:ce:86:42:17:1e:b5:51:5e:
ca:95:c3:d4:df:ff:db:16:be:8e:7c:18:d3:38:c7:
a4:b9:b5:1c:2b:0d:1d:cf:28:8f:5a:67:02:b6:46:
2a:8b:ab:01:33:8f:31:29:8d:37:c6:f4:33:a6:45:
6f:e9:03:83:83:11:de:b1:a5:ef:02:a0:37:bd:b4:
14:dd:09:2a:ad:15:4b:c6:aa:d1:65:54:98:f4:60:
15:3c:aa:c8:9c:6b:b2:68:91:24:0f:3f:1c:18:a2:
0e:17:52:dc:17:ac:0e:19:53:26:bb:8d:10:e3:20:
60:38:bd:4e:22:67:da:22:dc:e0:3a:1b:05:92:15:
fb:46:dc:1c:e5:89:dc:f2:8e:93:3e:30:3e:ef:98:
1a:1e:2e:e2:dc:6c:32:2b:16:f9:54:0c:17:de:51:
bc:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:92:87:86:A6:61:67:DA:0E:35:87:6F:9C:B1:94:96:06:2A:CF:DF
X509v3 Authority Key Identifier:
keyid:67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/f5KHhqZhZ9oONYdvnLGUlgYqz98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:67c1:a123::/48
2a14:67c1:a129::/48
2a14:67c1:b147::/48
2a14:67c1:c220::/44
2a14:67c1:c300::/40
2a14:67c1:c700::/47
2a14:67c2:3f0::/47
Signature Algorithm: sha256WithRSAEncryption
67:f0:d2:2d:6d:83:93:24:01:69:f2:4d:26:1e:27:09:98:e0:
db:48:7f:87:e4:96:d8:d8:82:f8:d7:86:e4:50:76:1e:0a:b6:
75:14:b8:63:6e:a3:37:5e:3f:d4:f1:33:99:b7:fd:34:52:c6:
e9:ee:1b:8d:6d:41:bf:b8:a6:14:10:0e:90:58:00:ca:0b:02:
6e:56:29:04:88:4d:da:69:05:fd:95:04:71:d1:2f:f1:04:5b:
5d:6d:9e:e9:f4:3e:4c:14:de:22:9a:8b:7f:81:9e:35:45:6a:
1a:8c:13:d9:0f:cf:fa:84:ef:87:77:21:ac:68:30:ff:46:3e:
50:47:2f:d2:ef:56:4e:f0:b9:f6:1f:70:bb:55:c3:f3:d3:f9:
b4:29:6f:cd:b4:d1:52:8f:d7:43:fe:88:d7:57:eb:88:26:b7:
f6:5c:31:71:ae:59:7a:37:f9:c5:33:6e:b7:41:6c:89:e2:f8:
33:b0:b4:3e:c7:dc:5a:de:bc:ff:5a:28:19:e6:77:1c:22:d8:
de:12:51:07:e5:4a:24:a8:38:91:d5:6b:cf:2d:0c:50:ff:28:
90:e4:2e:28:d3:12:04:0a:4c:92:df:d0:5a:8b:d9:8a:94:08:
dd:ab:15:ed:5c:03:d4:c0:1c:8f:07:21:ec:7e:3c:82:46:13:
eb:ec:de:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 16:46:41 2026 by rpki-client