Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/ff14DQFiZOIXm5LBnSQa55NiXrY.roa
File: ff14DQFiZOIXm5LBnSQa55NiXrY.roa (raw, json)
Hash identifier: +obUB5tEpYF5SJAxvSj2WjyGRG18QvvfQ96XDRdipXM=
Subject key identifier: 7D:FD:78:0D:01:62:64:E2:17:9B:92:C1:9D:24:1A:E7:93:62:5E:B6
Certificate issuer: /CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Certificate serial: 019FF17BD311DFD01E7E6EE1C2D9D1D60BA6
Authority key identifier: 67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/ff14DQFiZOIXm5LBnSQa55NiXrY.roa
Signing time: Tue 11 Aug 2026 15:40:51 +0000
ROA not before: Tue 11 Aug 2026 15:40:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206129
IP address blocks: 2a14:67c1:a180::/44 maxlen: 56
2a14:67c3:1870::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 20:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f1:7b:d3:11:df:d0:1e:7e:6e:e1:c2:d9:d1:d6:0b:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Validity
Not Before: Aug 11 15:40:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7dfd780d016264e2179b92c19d241ae793625eb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:b8:90:3c:e2:9b:a5:5d:e6:0c:73:69:52:f5:
63:94:a8:0e:63:b3:d2:df:b1:8a:89:84:9d:73:36:
99:0d:4a:38:16:8d:97:3d:5f:51:0d:a8:38:65:e6:
53:d6:72:4f:e6:5d:33:0b:18:49:d0:d3:02:6c:07:
2a:02:9a:e1:70:63:3e:88:fa:20:c7:05:0f:cb:cf:
de:14:2e:5e:3d:e0:51:3e:50:a3:2f:11:61:da:05:
da:ed:db:b7:a9:fd:11:46:f2:50:15:78:0e:49:57:
d3:c4:49:04:23:7c:4f:44:9c:b3:ad:a6:72:52:ca:
53:22:50:4b:91:a7:62:06:74:58:7f:31:2f:d7:a1:
75:c2:30:c5:e2:4e:32:70:cb:0e:8b:7f:7d:74:16:
d1:26:47:6f:5c:7b:31:11:31:6e:3e:5f:c1:1a:4f:
22:13:95:53:82:ac:72:b1:f7:ba:d1:eb:ef:b7:1f:
0f:12:c8:7e:09:54:5a:3b:a6:9a:5a:31:b0:c6:8f:
5d:a1:d8:27:7f:c0:17:c5:55:17:e1:d3:fa:1b:40:
0a:a9:5c:b8:dd:cb:80:b6:35:3f:1e:0f:13:18:27:
5a:4c:61:b3:3f:11:fb:9a:a3:9f:d1:6c:d0:10:11:
46:88:01:8c:4a:28:49:e5:eb:58:79:2e:b0:ad:d5:
0b:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:FD:78:0D:01:62:64:E2:17:9B:92:C1:9D:24:1A:E7:93:62:5E:B6
X509v3 Authority Key Identifier:
keyid:67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/ff14DQFiZOIXm5LBnSQa55NiXrY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:67c1:a180::/44
2a14:67c3:1870::/44
Signature Algorithm: sha256WithRSAEncryption
2e:f5:45:56:5b:d2:81:4d:fc:1d:a4:df:f9:e1:88:ae:6d:0f:
5b:6c:b3:ad:eb:b0:ae:29:b4:36:19:e4:84:1e:61:43:bf:1d:
e9:f4:39:15:84:3c:9d:05:25:58:64:d7:17:07:aa:a9:32:7c:
48:8a:0b:4d:e4:33:f7:3e:27:e0:22:85:d8:86:bf:40:17:0a:
d8:fd:64:1d:28:18:38:13:6a:ea:74:50:2c:44:3c:12:98:3b:
86:49:73:9c:3a:b1:04:70:52:1d:31:62:4c:d6:a1:89:73:ce:
b4:6c:c1:0f:fa:47:4f:3f:90:32:6d:dd:75:03:a3:01:a8:8f:
5e:c8:cb:ec:95:3d:fc:95:b6:fb:28:15:4b:e7:2f:7d:96:80:
ba:70:e3:d1:9b:ea:26:cd:12:4d:28:2a:f5:d1:1b:5e:52:91:
52:10:ee:83:b9:9a:e6:26:95:3d:e0:53:0c:7f:0f:ae:c4:0a:
ff:d1:e4:4c:f5:5c:7e:e4:19:5d:b8:21:e7:44:9a:af:47:ce:
05:1f:28:64:f0:04:3c:18:39:74:74:6b:05:b6:9d:51:0a:36:
f1:9f:c0:70:dd:c2:fb:26:ef:46:44:08:e2:65:72:47:cb:c3:
df:58:19:fa:a4:ad:bc:ab:c8:40:f6:bb:72:5c:f5:ca:59:0f:
03:60:c4:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 07:29:44 2026 by rpki-client