Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/bcdcca-f06b-40cf-8e21-2145220994ce/1/5hDOOQsTTCjOImFp0cfR8PWMank.roa
File: 5hDOOQsTTCjOImFp0cfR8PWMank.roa (raw, json)
Hash identifier: TIt9ckAHrPYzJk9BHkOJ9Ahcnyy8GesCV0EQ3TrmcgA=
Subject key identifier: E6:10:CE:39:0B:13:4C:28:CE:22:61:69:D1:C7:D1:F0:F5:8C:6A:79
Certificate issuer: /CN=a3ca7b1c13a7d7b31231412b8fb6947a1747db9d
Certificate serial: 01A13BBD715A5899B2A4091C8B7444CB61AF
Authority key identifier: A3:CA:7B:1C:13:A7:D7:B3:12:31:41:2B:8F:B6:94:7A:17:47:DB:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o8p7HBOn17MSMUErj7aUehdH250.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/bcdcca-f06b-40cf-8e21-2145220994ce/1/5hDOOQsTTCjOImFp0cfR8PWMank.roa
Signing time: Wed 14 Oct 2026 18:47:13 +0000
ROA not before: Wed 14 Oct 2026 18:47:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197210
IP address blocks: 2a14:1c40::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/bcdcca-f06b-40cf-8e21-2145220994ce/1/o8p7HBOn17MSMUErj7aUehdH250.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/bcdcca-f06b-40cf-8e21-2145220994ce/1/o8p7HBOn17MSMUErj7aUehdH250.mft
rsync://rpki.ripe.net/repository/DEFAULT/o8p7HBOn17MSMUErj7aUehdH250.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 15:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3b:bd:71:5a:58:99:b2:a4:09:1c:8b:74:44:cb:61:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3ca7b1c13a7d7b31231412b8fb6947a1747db9d
Validity
Not Before: Oct 14 18:47:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e610ce390b134c28ce226169d1c7d1f0f58c6a79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5d:ed:27:c4:e7:b4:f9:b0:b4:74:21:d3:fa:
db:1f:c1:86:76:a2:4a:ba:8b:f4:39:36:35:aa:e8:
16:ee:fb:bd:27:e0:64:1b:cd:06:02:e1:8e:0e:a6:
3f:48:ba:c7:b1:db:40:91:cc:f4:2f:a1:68:39:d4:
c4:93:eb:97:82:4a:97:02:a2:f3:ee:4a:7c:ce:e4:
35:5d:ba:77:41:81:3b:53:dd:65:99:d4:70:ac:26:
3d:08:55:e1:37:4c:fd:90:23:0a:2a:81:f5:76:9f:
49:e6:fd:b2:3c:a7:a0:cf:75:1c:d1:e0:2f:a0:6c:
5f:20:ed:f4:87:63:00:3c:7a:7d:9b:14:45:c2:af:
48:0e:34:2f:dd:d5:57:25:be:8d:1c:88:23:68:dc:
e3:77:f7:16:f4:0b:14:59:38:f7:42:81:20:6b:f6:
90:4a:5c:79:ff:15:58:72:4c:15:6c:b6:f7:53:bf:
a3:75:1b:c0:c6:a7:88:f2:e8:c2:8b:df:44:b5:ac:
3b:92:41:1e:9f:d3:8f:0c:14:f3:4c:38:01:a2:08:
7a:47:5f:81:5f:33:1c:1e:67:9c:66:ae:37:e0:02:
8a:5d:9e:c3:a6:d6:3c:55:20:bf:93:4c:53:86:db:
0f:9c:2d:90:c5:76:a0:df:5f:21:8c:16:6e:49:8b:
23:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:10:CE:39:0B:13:4C:28:CE:22:61:69:D1:C7:D1:F0:F5:8C:6A:79
X509v3 Authority Key Identifier:
keyid:A3:CA:7B:1C:13:A7:D7:B3:12:31:41:2B:8F:B6:94:7A:17:47:DB:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8p7HBOn17MSMUErj7aUehdH250.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/bcdcca-f06b-40cf-8e21-2145220994ce/1/5hDOOQsTTCjOImFp0cfR8PWMank.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/bcdcca-f06b-40cf-8e21-2145220994ce/1/o8p7HBOn17MSMUErj7aUehdH250.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:1c40::/29
Signature Algorithm: sha256WithRSAEncryption
14:da:e5:17:f0:cd:43:92:1f:ba:de:da:24:56:cc:f9:c6:01:
21:f6:5d:b5:9e:c8:a1:57:c5:d6:a7:33:60:4c:c6:57:59:d9:
ab:ed:21:11:9a:d2:09:9a:31:90:72:b0:c3:fa:d8:27:c9:67:
12:1c:96:1f:4b:ae:09:7a:f7:3d:3f:b8:aa:cf:5b:17:e3:d0:
8c:56:3b:79:86:58:a5:16:62:0b:8f:4f:6d:b7:86:ed:e5:18:
d4:80:78:38:ef:df:cb:b7:cd:2c:67:d4:24:26:49:38:36:3a:
a3:c5:7f:15:b2:69:39:f7:05:71:73:0a:44:4e:49:48:d5:7e:
92:4d:f0:76:22:6f:7a:03:a5:f8:e1:eb:4a:7d:be:82:5c:f4:
f1:92:dd:ac:d3:96:39:72:83:0b:c7:2e:bb:cd:dc:74:f1:e0:
35:c6:32:0b:a6:8a:0c:fa:bc:21:68:43:2c:cc:a5:c8:9d:3b:
de:cb:38:f5:63:da:c1:cf:28:20:67:96:ba:7b:c7:ba:d2:3c:
2c:73:04:9e:7c:6e:9d:a1:c0:2f:b7:9f:b1:ad:30:46:d8:51:
43:49:4a:0b:e4:ed:aa:1b:95:44:93:55:b9:21:02:c7:5d:85:
bb:cd:47:f3:b9:a2:4b:6a:ac:2c:ca:1c:cd:ff:4e:86:c4:2d:
1b:65:89:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 22:08:15 2026 by rpki-client