Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/1-p16KxsivgGZD8PXd4e_YHv5IC4.roa
File: 1-p16KxsivgGZD8PXd4e_YHv5IC4.roa (raw, json)
Hash identifier: Qyqte6RopFpPPBHjfqe/11Zhs4/QiIF284F5Db6RdbY=
Subject key identifier: FA:9D:7A:2B:1B:22:BE:01:99:0F:C3:D7:77:87:BF:60:7B:F9:20:2E
Certificate issuer: /CN=5ec1769d3ff042124698e31c472b63bbf1bbb5ad
Certificate serial: 01A13BC3D9773E0BD4A8E67493F33797FE88
Authority key identifier: 5E:C1:76:9D:3F:F0:42:12:46:98:E3:1C:47:2B:63:BB:F1:BB:B5:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XsF2nT_wQhJGmOMcRytju_G7ta0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/1-p16KxsivgGZD8PXd4e_YHv5IC4.roa
Signing time: Wed 14 Oct 2026 18:54:13 +0000
ROA not before: Wed 14 Oct 2026 18:54:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 54694
IP address blocks: 2a14:1040::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XsF2nT_wQhJGmOMcRytju_G7ta0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 14:43:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3b:c3:d9:77:3e:0b:d4:a8:e6:74:93:f3:37:97:fe:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ec1769d3ff042124698e31c472b63bbf1bbb5ad
Validity
Not Before: Oct 14 18:54:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fa9d7a2b1b22be01990fc3d77787bf607bf9202e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7d:63:d4:eb:34:94:e1:d5:06:ac:80:87:6b:
df:18:12:f7:e4:2a:73:41:91:74:7a:f0:ac:30:f4:
ea:a0:35:14:82:54:92:0f:bc:b2:55:3d:fb:0a:6e:
73:19:24:64:c6:cd:e3:2f:b0:1e:60:5f:4d:91:64:
a1:64:4e:15:b1:46:f1:e4:92:b1:11:9c:fe:27:9c:
67:a1:6b:a1:a4:fc:55:ca:e5:ed:a9:eb:88:a3:1c:
01:cb:0a:63:20:ce:96:e5:56:bb:b1:07:a6:67:e0:
71:94:96:ac:36:7e:31:d9:a0:03:53:cd:0e:87:c9:
79:59:a1:8b:36:19:71:8a:49:01:51:52:c2:ae:2e:
87:4a:30:ee:95:20:bb:0a:35:be:5c:f8:d6:5d:26:
47:3a:94:ff:3e:6a:e1:17:33:e1:ec:97:37:84:25:
bf:96:f9:b9:bb:b5:8a:83:54:6d:6d:d0:d4:80:31:
d8:98:cd:ba:53:ac:48:9a:37:2c:e5:3e:ec:b9:2d:
dc:a9:3b:05:21:a3:eb:ff:2c:90:d2:21:65:35:fd:
ad:09:db:f6:d7:71:94:e6:08:1a:ea:ed:b7:4f:7a:
d4:ae:0e:05:81:f9:c4:e0:e5:f7:5c:33:77:b8:a5:
3b:b1:b9:29:92:2b:01:46:40:21:69:50:c9:94:60:
3d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:9D:7A:2B:1B:22:BE:01:99:0F:C3:D7:77:87:BF:60:7B:F9:20:2E
X509v3 Authority Key Identifier:
keyid:5E:C1:76:9D:3F:F0:42:12:46:98:E3:1C:47:2B:63:BB:F1:BB:B5:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XsF2nT_wQhJGmOMcRytju_G7ta0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/1-p16KxsivgGZD8PXd4e_YHv5IC4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:1040::/29
Signature Algorithm: sha256WithRSAEncryption
5b:30:f6:ce:77:3d:23:2a:36:e9:79:60:61:f2:84:a3:eb:17:
08:24:ed:6b:4b:c4:61:ba:d7:68:9e:7c:ff:64:ee:41:da:63:
64:d0:66:b2:27:2d:b5:3f:e4:60:97:62:28:01:78:37:99:7e:
01:6d:44:ff:3a:66:43:36:7b:a5:e6:c0:5b:b0:f0:f2:7a:4b:
10:3c:ac:a0:27:22:b2:7a:4e:00:b0:7e:78:59:df:b1:19:e8:
ea:dc:45:27:b4:92:2d:32:d7:ed:15:42:4e:47:e0:1c:1d:2e:
e9:f5:60:96:28:df:b1:38:2c:63:fb:13:8c:ef:c6:dd:ac:1f:
bb:33:43:49:d7:c5:95:41:e8:6d:eb:69:e3:38:63:8f:4f:71:
6b:7f:5d:49:e0:b3:c1:5b:9f:54:0b:d6:5a:4c:d5:3f:bf:12:
73:e6:96:53:55:f1:48:7b:91:aa:37:2d:f8:76:cd:dd:c1:b4:
6d:91:9f:bb:b5:c4:40:5e:bd:e3:51:ef:0e:1d:a1:b9:d7:93:
ae:f7:53:00:67:c0:3d:83:c1:3f:ab:9a:cc:b1:7e:34:cf:b2:
26:6a:93:db:04:91:2c:41:cc:dd:05:0e:11:1b:c8:ed:3a:88:
1c:20:ba:9a:1d:68:0b:17:a5:5d:f0:41:1b:46:d8:42:a9:89:
72:a4:c0:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 01:52:12 2026 by rpki-client