Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/bcdcca-f06b-40cf-8e21-2145220994ce/1/rWWpjYstmDZvfA_3JAVTB9z60Xc.roa
File: rWWpjYstmDZvfA_3JAVTB9z60Xc.roa (raw, json)
Hash identifier: /nuyUoKJGePmF1O5A9LBDBTzkBOzvKaLNR9LioNZzCw=
Subject key identifier: AD:65:A9:8D:8B:2D:98:36:6F:7C:0F:F7:24:05:53:07:DC:FA:D1:77
Certificate issuer: /CN=a3ca7b1c13a7d7b31231412b8fb6947a1747db9d
Certificate serial: 01A13BBD725203F683EE9F5F20AD236A991F
Authority key identifier: A3:CA:7B:1C:13:A7:D7:B3:12:31:41:2B:8F:B6:94:7A:17:47:DB:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o8p7HBOn17MSMUErj7aUehdH250.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/bcdcca-f06b-40cf-8e21-2145220994ce/1/rWWpjYstmDZvfA_3JAVTB9z60Xc.roa
Signing time: Wed 14 Oct 2026 18:47:13 +0000
ROA not before: Wed 14 Oct 2026 18:47:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219476
IP address blocks: 2a14:1c40::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/bcdcca-f06b-40cf-8e21-2145220994ce/1/o8p7HBOn17MSMUErj7aUehdH250.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/bcdcca-f06b-40cf-8e21-2145220994ce/1/o8p7HBOn17MSMUErj7aUehdH250.mft
rsync://rpki.ripe.net/repository/DEFAULT/o8p7HBOn17MSMUErj7aUehdH250.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 12:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3b:bd:72:52:03:f6:83:ee:9f:5f:20:ad:23:6a:99:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3ca7b1c13a7d7b31231412b8fb6947a1747db9d
Validity
Not Before: Oct 14 18:47:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ad65a98d8b2d98366f7c0ff724055307dcfad177
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:96:00:f9:ab:a3:08:af:70:12:fd:09:81:2d:
7e:56:0a:8e:c0:92:e2:1c:07:fb:46:24:45:d3:0b:
28:e8:4d:b6:5e:98:fa:09:c9:9d:40:0c:fe:75:13:
d3:21:8d:4b:07:34:10:4d:ae:93:12:de:57:f8:ad:
fc:c3:a8:89:36:cb:72:a2:62:5d:84:7c:02:a1:cf:
96:af:ec:7f:2d:05:72:45:51:b5:08:40:df:0f:e7:
8e:72:ac:e8:81:13:25:cd:96:49:74:e0:e7:4b:59:
12:c2:88:76:98:0a:48:78:b5:6c:d8:71:db:41:0c:
3c:62:bd:4a:47:d6:5d:26:32:3c:e2:0c:b1:44:47:
6b:c6:0b:e0:ec:11:3e:9c:29:e7:a4:0d:48:6e:7d:
11:f4:f4:51:47:8e:e6:e5:63:b3:85:8f:57:3a:6f:
80:55:27:89:9c:f7:7e:70:6d:dd:fa:b8:86:aa:46:
ca:e1:ff:3f:99:0e:a6:cb:16:a0:9b:35:39:f6:dd:
3c:54:b1:8d:74:36:22:86:6f:be:af:8c:dc:55:3c:
91:36:7b:58:11:53:b8:ab:6d:21:ee:25:1b:bc:07:
d6:a1:bc:36:79:89:2f:30:b8:47:2b:85:fe:42:53:
2e:dd:4f:72:03:e1:71:68:75:86:06:2a:56:e3:6d:
85:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:65:A9:8D:8B:2D:98:36:6F:7C:0F:F7:24:05:53:07:DC:FA:D1:77
X509v3 Authority Key Identifier:
keyid:A3:CA:7B:1C:13:A7:D7:B3:12:31:41:2B:8F:B6:94:7A:17:47:DB:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8p7HBOn17MSMUErj7aUehdH250.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/bcdcca-f06b-40cf-8e21-2145220994ce/1/rWWpjYstmDZvfA_3JAVTB9z60Xc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/bcdcca-f06b-40cf-8e21-2145220994ce/1/o8p7HBOn17MSMUErj7aUehdH250.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:1c40::/29
Signature Algorithm: sha256WithRSAEncryption
1d:63:2f:82:c4:c6:56:56:cc:4b:ca:31:84:c7:29:3c:21:21:
17:76:77:07:ce:80:d3:c0:d5:ba:4e:94:b1:cd:12:e9:91:59:
47:5f:2a:f3:bd:f4:19:19:34:11:ae:7d:6a:ad:e3:f2:66:42:
af:7e:62:c1:58:5b:db:62:98:4c:cc:81:1d:9e:9a:17:d4:85:
e9:cf:9b:67:86:c5:a9:02:0a:38:30:34:8b:91:91:30:ac:7c:
ab:6e:56:63:fa:61:16:5c:05:f2:d4:f7:97:9f:7a:f5:87:99:
ee:1f:30:7b:74:45:4d:1f:30:6c:17:7d:0c:c2:36:c4:0e:99:
1d:51:d5:dd:e7:c2:83:49:55:97:2f:05:d2:4c:3d:36:d8:51:
ae:17:50:fe:9c:e8:e3:3a:ae:7e:a5:ea:93:18:0d:ae:92:a2:
77:ce:91:c3:4d:01:c5:86:ad:53:b6:7c:07:f3:d1:e1:81:f2:
e7:7c:a4:a4:9b:76:8a:fc:96:de:a1:06:bf:f4:be:2d:5f:cf:
8b:95:9a:00:57:28:01:97:eb:97:ff:cb:1b:db:a2:bf:a9:ba:
e2:db:67:d8:61:36:cc:44:e1:57:6b:fd:43:ad:68:f3:c2:35:
11:fd:35:dc:68:1c:f8:89:54:29:64:bd:17:e4:ba:11:21:18:
ef:9f:74:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 20:25:41 2026 by rpki-client