Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/bcdcca-f06b-40cf-8e21-2145220994ce/1/iNPIzu2qyT3cvwGIycy3-fO4BYU.roa
File: iNPIzu2qyT3cvwGIycy3-fO4BYU.roa (raw, json)
Hash identifier: 6cBLWk2ZAQrVk1F3PnbiXR+1S8lxvCnwDzwGQcEQOoY=
Subject key identifier: 88:D3:C8:CE:ED:AA:C9:3D:DC:BF:01:88:C9:CC:B7:F9:F3:B8:05:85
Certificate issuer: /CN=a3ca7b1c13a7d7b31231412b8fb6947a1747db9d
Certificate serial: 01A13BBE5B64AEEACACA29CF7A9E3215A8AC
Authority key identifier: A3:CA:7B:1C:13:A7:D7:B3:12:31:41:2B:8F:B6:94:7A:17:47:DB:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o8p7HBOn17MSMUErj7aUehdH250.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/bcdcca-f06b-40cf-8e21-2145220994ce/1/iNPIzu2qyT3cvwGIycy3-fO4BYU.roa
Signing time: Wed 14 Oct 2026 18:48:13 +0000
ROA not before: Wed 14 Oct 2026 18:48:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401163
IP address blocks: 2a14:1c40::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/bcdcca-f06b-40cf-8e21-2145220994ce/1/o8p7HBOn17MSMUErj7aUehdH250.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/bcdcca-f06b-40cf-8e21-2145220994ce/1/o8p7HBOn17MSMUErj7aUehdH250.mft
rsync://rpki.ripe.net/repository/DEFAULT/o8p7HBOn17MSMUErj7aUehdH250.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 21:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3b:be:5b:64:ae:ea:ca:ca:29:cf:7a:9e:32:15:a8:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3ca7b1c13a7d7b31231412b8fb6947a1747db9d
Validity
Not Before: Oct 14 18:48:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=88d3c8ceedaac93ddcbf0188c9ccb7f9f3b80585
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:89:4e:a0:de:28:48:03:7c:f1:d3:8b:69:de:
f6:b2:3e:a5:e8:cd:c4:7c:0f:09:0b:86:f1:fe:6d:
34:90:2b:80:18:e8:d4:29:f1:02:5f:1b:e3:37:91:
76:d8:f4:ab:5d:14:04:7b:fa:81:ad:5c:ca:f9:c8:
3f:cd:6d:8a:cb:87:90:9f:3f:d5:86:9d:1c:3b:49:
96:73:7b:70:b3:15:1e:df:70:15:84:55:d2:17:2f:
17:16:fe:66:48:82:05:43:71:19:e8:82:94:e3:ef:
e6:e6:86:13:9b:fb:98:d9:d2:74:f7:f9:07:17:57:
35:c7:4a:df:d9:a2:97:54:fd:62:2b:c5:7a:73:2a:
40:71:86:26:e8:0c:60:3e:59:25:29:95:06:b4:22:
3a:5b:9f:3e:dc:c6:8c:ce:14:90:78:66:54:c6:e8:
82:86:88:87:74:1c:6d:cf:2f:41:c3:b6:bb:9b:2a:
c1:bf:a3:98:24:f0:64:e7:c4:e3:51:86:45:66:0d:
a0:5f:20:8e:2b:a1:03:99:77:60:21:e8:91:c8:c0:
52:3e:62:ad:e6:2d:fe:8c:d9:20:82:50:1d:a1:23:
92:97:51:00:4f:11:dd:dc:fd:26:ce:d2:b7:ae:ff:
70:f6:f8:bc:c1:ae:44:0f:4c:38:ac:3f:a9:00:b5:
ea:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:D3:C8:CE:ED:AA:C9:3D:DC:BF:01:88:C9:CC:B7:F9:F3:B8:05:85
X509v3 Authority Key Identifier:
keyid:A3:CA:7B:1C:13:A7:D7:B3:12:31:41:2B:8F:B6:94:7A:17:47:DB:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8p7HBOn17MSMUErj7aUehdH250.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/bcdcca-f06b-40cf-8e21-2145220994ce/1/iNPIzu2qyT3cvwGIycy3-fO4BYU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/bcdcca-f06b-40cf-8e21-2145220994ce/1/o8p7HBOn17MSMUErj7aUehdH250.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:1c40::/29
Signature Algorithm: sha256WithRSAEncryption
7d:9e:a5:59:0e:9e:2b:ab:63:3f:ac:f7:2e:48:fa:ce:7f:f6:
33:65:81:c4:4b:cc:ab:5b:97:ee:ab:bb:22:70:ef:cf:9c:94:
f3:e7:f5:b6:66:50:74:0b:d1:e4:59:e0:88:2d:96:1b:61:f7:
84:cd:4a:41:b3:fc:cb:2e:f7:e3:bd:42:9d:04:77:95:3d:0f:
d0:50:3f:07:1d:99:60:89:36:74:09:cb:2d:32:3a:2e:73:5d:
0f:38:89:db:22:ae:30:ce:6a:ec:53:cc:ee:65:1c:e2:35:08:
3a:79:32:bd:9e:e8:97:9e:89:36:67:4e:f2:aa:66:f2:7b:0b:
db:52:65:e3:f9:96:58:3b:e0:49:80:99:54:82:29:19:f3:50:
3f:51:9f:53:1d:56:3c:73:f0:f2:fc:31:61:25:10:64:79:72:
90:b6:2e:26:2d:86:8d:37:ad:04:1d:00:5a:de:28:c5:2f:9f:
f4:95:af:7d:9f:e8:23:45:9e:15:1f:d1:3e:ca:07:a2:c6:db:
7d:04:c8:62:48:11:c1:fa:bd:33:2a:4e:fc:d3:13:dc:a8:85:
1a:ad:ca:a8:d5:00:6c:dc:83:46:92:29:d7:09:fa:7a:5a:18:
25:a3:2d:6a:36:79:8f:cb:13:99:d6:02:0a:8e:9a:ce:40:42:
cf:24:24:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 06:47:44 2026 by rpki-client