Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/bcdcca-f06b-40cf-8e21-2145220994ce/1/YAi-xagsnA29kSG597NdlLhgXpA.roa
File: YAi-xagsnA29kSG597NdlLhgXpA.roa (raw, json)
Hash identifier: CthKdljk1MHBI5XoiHbC1Qc+gFI17jk9lL7Z7MPhu00=
Subject key identifier: 60:08:BE:C5:A8:2C:9C:0D:BD:91:21:B9:F7:B3:5D:94:B8:60:5E:90
Certificate issuer: /CN=a3ca7b1c13a7d7b31231412b8fb6947a1747db9d
Certificate serial: 01A13BBD704B37FBB96422F3A0E20C624377
Authority key identifier: A3:CA:7B:1C:13:A7:D7:B3:12:31:41:2B:8F:B6:94:7A:17:47:DB:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o8p7HBOn17MSMUErj7aUehdH250.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/bcdcca-f06b-40cf-8e21-2145220994ce/1/YAi-xagsnA29kSG597NdlLhgXpA.roa
Signing time: Wed 14 Oct 2026 18:47:13 +0000
ROA not before: Wed 14 Oct 2026 18:47:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 54694
IP address blocks: 2a14:1c40::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/bcdcca-f06b-40cf-8e21-2145220994ce/1/o8p7HBOn17MSMUErj7aUehdH250.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/bcdcca-f06b-40cf-8e21-2145220994ce/1/o8p7HBOn17MSMUErj7aUehdH250.mft
rsync://rpki.ripe.net/repository/DEFAULT/o8p7HBOn17MSMUErj7aUehdH250.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3b:bd:70:4b:37:fb:b9:64:22:f3:a0:e2:0c:62:43:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3ca7b1c13a7d7b31231412b8fb6947a1747db9d
Validity
Not Before: Oct 14 18:47:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6008bec5a82c9c0dbd9121b9f7b35d94b8605e90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:02:ef:2c:5f:6b:b5:cf:9a:69:43:18:44:48:
90:73:00:51:f2:ff:1f:86:a6:c4:a6:c9:dc:c4:6b:
7f:76:04:0e:60:67:09:c5:52:2e:23:70:f0:81:bb:
bc:f0:89:e5:84:73:35:bd:f0:dd:da:17:3e:c8:d0:
b6:60:22:08:2a:56:61:8b:c4:80:88:9a:15:e1:8e:
50:b3:c2:2d:73:1b:32:ed:e5:83:92:af:c6:27:65:
73:30:89:f7:9e:b0:7f:a9:d4:25:4c:c8:96:96:cd:
28:a6:a8:5c:1b:f3:6e:ca:13:70:d9:24:04:ed:78:
bc:93:4c:8c:61:77:22:e5:83:fb:a8:13:22:64:12:
08:4e:c9:d9:e3:43:bd:ef:db:77:1d:c9:79:44:30:
3d:02:a5:67:03:21:b0:0d:72:2b:97:bc:8b:83:60:
35:7d:3e:ad:87:80:ef:f1:ba:ef:6b:da:4e:30:08:
fa:32:f0:89:36:11:2f:73:ba:54:28:aa:d8:31:3f:
cd:ae:c0:3d:55:ba:6b:0d:2f:66:25:67:91:45:72:
8a:f7:8a:56:32:2a:5b:24:fc:56:a7:29:6c:0a:2f:
bb:63:71:81:73:70:b9:db:88:4b:b6:03:d3:77:38:
73:e3:af:35:c6:b3:22:0e:11:d3:cc:a1:14:f1:4b:
7f:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:08:BE:C5:A8:2C:9C:0D:BD:91:21:B9:F7:B3:5D:94:B8:60:5E:90
X509v3 Authority Key Identifier:
keyid:A3:CA:7B:1C:13:A7:D7:B3:12:31:41:2B:8F:B6:94:7A:17:47:DB:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8p7HBOn17MSMUErj7aUehdH250.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/bcdcca-f06b-40cf-8e21-2145220994ce/1/YAi-xagsnA29kSG597NdlLhgXpA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/bcdcca-f06b-40cf-8e21-2145220994ce/1/o8p7HBOn17MSMUErj7aUehdH250.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:1c40::/29
Signature Algorithm: sha256WithRSAEncryption
13:18:45:9f:49:09:2d:84:6d:27:95:9a:39:74:16:bb:b6:d5:
63:70:c4:d8:2d:c1:da:26:9e:1a:a1:e3:50:e3:34:52:a2:00:
0a:ca:d3:3a:91:7e:4d:8d:1f:5b:77:3b:2b:b2:9e:d1:b9:1c:
8c:bb:af:75:e5:bf:04:0a:2e:38:db:2a:42:78:a7:e5:d6:59:
73:fe:9e:47:8a:8e:13:73:fa:a7:f2:54:a0:6d:81:ee:c4:74:
67:ce:ba:67:35:2d:03:ee:f9:70:a6:1f:13:af:a1:3e:9f:5f:
fe:8a:8f:7c:eb:03:bd:bb:4a:6f:87:d1:29:d1:54:56:4a:ab:
0c:fe:51:bc:06:18:f8:f3:27:7b:3a:e9:6b:af:ec:b9:22:68:
3a:0b:1a:e0:1c:9d:cd:ec:95:28:69:e0:be:84:70:41:fe:4c:
fd:21:47:f4:9f:b4:52:6a:a1:e9:c0:1d:8f:9a:d3:54:88:2d:
db:77:ac:e6:eb:6a:c5:28:5d:11:72:97:55:33:93:1b:e6:8b:
c4:fa:35:9b:45:70:bb:b7:62:4b:59:ea:c0:b2:c7:59:4c:3c:
c4:ae:50:2f:02:7d:a5:9a:99:01:fc:3e:d9:a6:15:96:b4:10:
05:dc:24:6b:fb:6e:1a:1a:f3:95:3a:c3:56:83:b1:b1:d8:f6:
d4:f9:63:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 06:33:55 2026 by rpki-client