Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/qV4niuwb5yjAa_U2mXjUO5-yY2M.roa
File: qV4niuwb5yjAa_U2mXjUO5-yY2M.roa (raw, json)
Hash identifier: 7N7aYnanUHf9oPTBSfb5ILVAWi2eEXr31dbcWhzZbbI=
Subject key identifier: A9:5E:27:8A:EC:1B:E7:28:C0:6B:F5:36:99:78:D4:3B:9F:B2:63:63
Certificate issuer: /CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Certificate serial: 019FF17BD24792A59ED917F53F865298A0A5
Authority key identifier: 67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/qV4niuwb5yjAa_U2mXjUO5-yY2M.roa
Signing time: Tue 11 Aug 2026 15:40:51 +0000
ROA not before: Tue 11 Aug 2026 15:40:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200558
IP address blocks: 2a14:67c2:c000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 20:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f1:7b:d2:47:92:a5:9e:d9:17:f5:3f:86:52:98:a0:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Validity
Not Before: Aug 11 15:40:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a95e278aec1be728c06bf5369978d43b9fb26363
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:24:90:9b:ca:b8:eb:c3:b6:d3:7e:84:4b:fe:
53:e9:d3:5a:5d:5b:27:59:2f:84:a7:eb:61:67:7f:
e7:e5:5b:0e:b2:54:62:3f:5b:61:7c:4a:fe:96:0f:
4f:ec:a0:24:d2:05:41:6a:dc:eb:ad:32:e2:9f:80:
ce:bc:ae:d6:c0:5f:90:7d:d9:02:89:90:9e:7e:d3:
4a:70:4d:7b:70:b5:b5:f2:61:ec:dc:6c:a9:57:e1:
e1:83:c0:3c:51:3e:95:94:ee:c4:72:f5:57:7e:b0:
ca:cc:d4:f1:36:15:0a:d3:7b:05:2f:06:db:c4:fa:
fd:ea:e9:64:23:10:66:d4:47:68:13:ca:6f:e8:40:
4a:70:6e:62:35:fd:93:80:92:e8:b5:ad:f8:61:7c:
91:d6:a4:02:2c:14:04:db:8c:2f:5a:22:b4:33:ea:
cf:8e:27:1b:40:36:20:41:1c:63:58:02:a3:0e:8c:
e5:71:eb:51:9c:4d:9a:d3:73:b2:cd:b1:47:00:7e:
18:ed:5d:16:9d:cf:6f:29:54:c8:92:b2:0f:a9:ac:
0a:56:16:bf:5a:fb:85:d6:56:eb:a4:80:92:5b:81:
14:c4:ad:34:15:b0:46:d3:40:db:f5:53:f0:a1:02:
d3:56:d0:52:d9:31:e4:03:60:23:a9:8d:81:30:c4:
4f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:5E:27:8A:EC:1B:E7:28:C0:6B:F5:36:99:78:D4:3B:9F:B2:63:63
X509v3 Authority Key Identifier:
keyid:67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/qV4niuwb5yjAa_U2mXjUO5-yY2M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:67c2:c000::/40
Signature Algorithm: sha256WithRSAEncryption
20:0f:4d:27:fd:c1:70:f8:d3:1f:15:b7:66:0b:fb:64:f2:0f:
bd:47:78:88:90:90:89:fb:3b:d5:22:37:7a:fd:69:cc:f9:39:
ce:e2:61:e6:c2:4d:f5:52:56:9c:23:c9:84:84:6a:2a:83:bd:
9d:d7:33:a1:c1:bc:23:cb:df:f6:2e:a2:39:6d:55:97:e3:1c:
ec:f3:84:3e:7f:52:84:85:ef:a6:78:e4:00:dd:f6:e3:f0:19:
71:42:cc:c0:fc:46:51:39:c4:92:11:63:82:9d:12:bb:57:1f:
a8:a3:bd:64:11:f9:a7:db:fc:bf:98:21:fa:7f:9c:04:df:bb:
40:c9:a9:e2:50:b6:86:d0:9a:0a:ed:41:91:94:69:a4:8d:ac:
cb:e4:bb:cc:7e:c3:b6:85:db:2e:31:c0:7f:42:0b:7b:5b:40:
54:28:a4:69:01:f1:39:4d:a6:5a:c3:72:2b:13:a8:a6:c0:1b:
ed:5d:03:d1:33:00:72:96:be:24:a3:ba:cd:30:24:ae:3d:46:
25:1b:3d:14:8e:f7:41:c1:88:5a:98:72:c9:d5:dd:32:21:33:
18:ce:cf:6a:d1:26:01:b5:91:14:86:bf:dc:3e:28:e3:7d:b5:
74:ae:74:45:c9:56:18:ae:aa:6d:84:c8:6c:c1:4f:dc:eb:2b:
9b:4c:ef:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 07:29:48 2026 by rpki-client