Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/v1upfQdVTxCRdjKLXVzlw6kMYc8.roa
File: v1upfQdVTxCRdjKLXVzlw6kMYc8.roa (raw, json)
Hash identifier: mzeZJNhPefRN7ZXYtEHR2Gz9u8kqJ+LI47ywNLOQeiQ=
Subject key identifier: BF:5B:A9:7D:07:55:4F:10:91:76:32:8B:5D:5C:E5:C3:A9:0C:61:CF
Certificate issuer: /CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Certificate serial: 019FF1823A74B808F5B2F30A0D61AF5A7176
Authority key identifier: 67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/v1upfQdVTxCRdjKLXVzlw6kMYc8.roa
Signing time: Tue 11 Aug 2026 15:47:51 +0000
ROA not before: Tue 11 Aug 2026 15:47:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8075
IP address blocks: 2a14:67c2:510::/48 maxlen: 48
2a14:67c2:575::/48 maxlen: 48
2a14:67c3:140::/44 maxlen: 44
2a14:67c3:50f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f1:82:3a:74:b8:08:f5:b2:f3:0a:0d:61:af:5a:71:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Validity
Not Before: Aug 11 15:47:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bf5ba97d07554f109176328b5d5ce5c3a90c61cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:7e:3b:55:34:07:43:aa:b7:79:41:4c:eb:f3:
43:57:9d:0a:ef:87:25:79:d6:5e:61:2a:3c:00:d1:
c3:49:58:aa:f9:b7:9d:83:44:97:ef:8b:98:ad:0f:
0b:88:21:2d:1d:f2:fc:66:ad:e7:48:e8:c9:c9:f7:
fa:c7:fc:30:88:4c:f2:85:28:36:55:40:28:0d:98:
ef:8f:42:e4:21:48:4f:80:97:2b:96:7f:3b:79:9e:
e2:1e:e4:a7:d5:84:a3:42:46:44:45:dc:1d:68:0c:
5d:5e:24:42:9d:91:58:08:07:d0:33:0f:9c:65:7b:
54:33:35:12:fb:9c:7c:71:7b:26:37:ff:ef:c5:3e:
74:97:c7:a4:1c:2a:c0:d9:a7:97:27:aa:e0:c8:b9:
72:20:90:5d:ad:6f:1b:6f:22:2a:75:15:3d:c7:d4:
bc:e1:42:d7:65:31:1d:b2:13:06:27:36:74:fd:37:
0b:68:15:c3:6c:fb:10:e5:42:d2:ea:e1:7f:86:4d:
f7:6f:c7:37:3b:ed:09:f1:92:b7:00:d5:cc:ba:1b:
84:df:5b:aa:b5:af:2d:f3:53:dd:96:ab:2f:9e:ed:
66:69:02:3d:35:e2:50:b5:ca:2c:85:22:4f:43:c2:
f4:f7:20:24:5b:0a:98:19:e6:1c:31:ec:cd:bd:92:
bc:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:5B:A9:7D:07:55:4F:10:91:76:32:8B:5D:5C:E5:C3:A9:0C:61:CF
X509v3 Authority Key Identifier:
keyid:67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/v1upfQdVTxCRdjKLXVzlw6kMYc8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:67c2:510::/48
2a14:67c2:575::/48
2a14:67c3:140::/44
2a14:67c3:50f::/48
Signature Algorithm: sha256WithRSAEncryption
71:49:ba:b0:90:2b:71:8c:a5:13:42:28:28:a8:6a:45:c9:a6:
61:24:07:54:2e:db:37:d4:4a:c9:fc:25:cd:06:b3:1d:47:0a:
e5:da:94:55:d5:f8:41:b8:8d:4d:51:84:c2:cf:97:aa:47:65:
10:b5:ff:29:ee:5b:04:40:83:4b:c5:bd:2c:16:e5:c2:ee:87:
45:c1:b9:97:df:7c:3f:6c:1c:22:83:a5:db:8a:08:dd:8e:92:
e8:d6:70:4e:3c:da:b2:3e:70:07:0b:52:bf:32:82:7a:4c:d4:
d2:0a:70:9c:15:ef:58:a9:73:6f:bc:48:39:ae:de:d5:82:ae:
54:bc:9c:7e:c8:f3:46:6d:cb:f0:8d:00:2c:c3:ec:1f:04:f8:
31:c8:3f:52:20:af:03:8d:2d:8b:0d:ac:75:08:81:ae:be:6f:
05:be:30:59:64:b7:67:db:dd:9b:71:f5:95:10:1d:d7:ed:ec:
18:f4:bc:4c:49:48:08:ef:4f:69:d2:d0:59:64:b1:91:e7:aa:
c9:47:bb:fd:69:cd:dc:ac:ce:90:06:2a:13:00:28:2f:82:ec:
08:08:b1:52:14:7b:e9:0d:82:f9:15:38:31:1e:f7:ec:1e:88:
56:9c:12:62:fa:eb:50:f6:d4:6a:01:7b:57:dd:e0:b6:39:b8:
50:1e:c8:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:48:17 2026 by rpki-client