Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/bcdcca-f06b-40cf-8e21-2145220994ce/1/2PXpkbOya40vTQHIdgmb6-Yvhtk.roa
File: 2PXpkbOya40vTQHIdgmb6-Yvhtk.roa (raw, json)
Hash identifier: AaumXjEA8LjC2M8f8E/wqT+3wmcC/IhOMfP5g0mboTM=
Subject key identifier: D8:F5:E9:91:B3:B2:6B:8D:2F:4D:01:C8:76:09:9B:EB:E6:2F:86:D9
Certificate issuer: /CN=a3ca7b1c13a7d7b31231412b8fb6947a1747db9d
Certificate serial: 01A13BBD71176CDAEBDCA06BCF076C19D525
Authority key identifier: A3:CA:7B:1C:13:A7:D7:B3:12:31:41:2B:8F:B6:94:7A:17:47:DB:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o8p7HBOn17MSMUErj7aUehdH250.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/bcdcca-f06b-40cf-8e21-2145220994ce/1/2PXpkbOya40vTQHIdgmb6-Yvhtk.roa
Signing time: Wed 14 Oct 2026 18:47:13 +0000
ROA not before: Wed 14 Oct 2026 18:47:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197200
IP address blocks: 2a14:1c40::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/bcdcca-f06b-40cf-8e21-2145220994ce/1/o8p7HBOn17MSMUErj7aUehdH250.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/bcdcca-f06b-40cf-8e21-2145220994ce/1/o8p7HBOn17MSMUErj7aUehdH250.mft
rsync://rpki.ripe.net/repository/DEFAULT/o8p7HBOn17MSMUErj7aUehdH250.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 03:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3b:bd:71:17:6c:da:eb:dc:a0:6b:cf:07:6c:19:d5:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3ca7b1c13a7d7b31231412b8fb6947a1747db9d
Validity
Not Before: Oct 14 18:47:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d8f5e991b3b26b8d2f4d01c876099bebe62f86d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:3f:a6:80:66:26:da:8b:c5:0a:15:80:aa:c6:
ab:5c:49:07:56:1f:fe:a7:3d:59:45:d5:c6:95:af:
1d:75:5a:32:9f:c9:9b:ff:70:f8:11:80:ea:7a:3e:
0a:77:9a:fd:a7:a8:88:1d:ff:dd:8f:29:1e:e9:e3:
e1:aa:71:23:f2:bb:d5:9d:f7:a3:6f:dd:53:0a:fb:
85:fb:d1:f4:2f:95:b0:e5:f1:ff:9b:1c:b6:20:80:
97:6f:66:08:f7:48:2c:ea:97:0b:58:23:ae:9a:cd:
3d:b7:14:33:2b:6b:4d:53:eb:e5:c6:67:0b:a4:0d:
c8:1c:c4:af:12:2b:b1:ec:3b:0f:f5:de:a5:d2:c3:
6e:f1:28:0a:c7:d1:ba:2f:a1:fc:3e:af:e2:3f:00:
9a:e9:a7:f0:1a:7b:4d:e6:1a:34:bf:4b:05:a8:b3:
a3:c8:dd:aa:6f:61:8d:1a:a6:d5:c4:1f:6d:43:4d:
87:a6:ba:90:07:15:5d:9c:a5:ed:18:58:9b:fe:8c:
cf:23:04:b7:f0:55:6e:41:ee:11:07:24:6c:72:38:
56:f4:45:0a:2c:bc:e2:04:f8:f5:44:d0:ca:69:1c:
b2:a2:78:23:7b:d9:74:91:9e:6f:27:94:eb:ec:a6:
eb:b8:aa:c7:6e:63:3b:29:a8:4e:25:eb:8d:b9:d3:
82:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:F5:E9:91:B3:B2:6B:8D:2F:4D:01:C8:76:09:9B:EB:E6:2F:86:D9
X509v3 Authority Key Identifier:
keyid:A3:CA:7B:1C:13:A7:D7:B3:12:31:41:2B:8F:B6:94:7A:17:47:DB:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8p7HBOn17MSMUErj7aUehdH250.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/bcdcca-f06b-40cf-8e21-2145220994ce/1/2PXpkbOya40vTQHIdgmb6-Yvhtk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/bcdcca-f06b-40cf-8e21-2145220994ce/1/o8p7HBOn17MSMUErj7aUehdH250.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:1c40::/29
Signature Algorithm: sha256WithRSAEncryption
92:7d:40:0c:78:54:38:b2:33:b7:8d:23:57:82:21:ed:ef:85:
cf:63:ae:13:3c:f0:ef:69:39:54:03:d6:2e:18:80:b3:6d:6d:
cc:f0:d5:93:7d:ff:7b:50:e5:b5:ec:63:c7:55:d8:49:d1:f9:
fe:83:f7:83:23:78:aa:75:be:79:c1:98:f2:d5:83:b4:86:d1:
4a:bc:55:ae:4d:e4:fd:20:33:71:79:38:a1:6e:25:b4:d6:47:
e5:8d:a0:3d:26:54:48:2b:5b:2a:e5:d8:61:b2:bc:9f:15:c9:
02:68:78:57:f5:1d:39:e9:82:8a:c0:30:e7:d2:2b:f6:b9:98:
0e:4d:b0:f9:f6:8f:11:dc:ad:0e:00:47:dd:32:ff:6b:4f:a6:
af:55:af:fc:06:ec:d5:94:79:39:80:3d:4f:cd:84:ce:a1:64:
78:c1:81:95:bc:2c:1a:7a:0f:c6:54:c0:0e:e2:cb:9a:af:7d:
ce:b8:4c:89:4d:5c:4e:46:52:78:5c:2d:42:58:da:f8:bf:7e:
73:51:cb:00:52:4e:45:ec:9c:72:42:cf:c8:0e:b3:55:62:72:
a4:9e:dc:6b:08:a2:6a:94:da:0e:b6:fe:1c:43:35:ae:d7:e3:
1e:6d:dd:2e:52:e0:c7:f9:20:44:ba:30:a6:d1:6b:e5:bb:14:
1d:77:59:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 12:35:20 2026 by rpki-client