Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/98277d-12b1-488c-ae35-8879b7116da6/1/1cpw9dbUrtknizd-rffhTFR8Ji0.roa
File: 1cpw9dbUrtknizd-rffhTFR8Ji0.roa (raw, json)
Hash identifier: vZ/+72EdcWabpps15UEov7kxWkSE33QxgTZ0hz4DZsk=
Subject key identifier: D5:CA:70:F5:D6:D4:AE:D9:27:8B:37:7E:AD:F7:E1:4C:54:7C:26:2D
Certificate issuer: /CN=14ec5c6456fff5a59b10c5cba5c065fbcbcc860d
Certificate serial: 01A039366CE21D302BFA4EFAF7C3AF031C2C
Authority key identifier: 14:EC:5C:64:56:FF:F5:A5:9B:10:C5:CB:A5:C0:65:FB:CB:CC:86:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FOxcZFb_9aWbEMXLpcBl-8vMhg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/98277d-12b1-488c-ae35-8879b7116da6/1/1cpw9dbUrtknizd-rffhTFR8Ji0.roa
Signing time: Tue 25 Aug 2026 13:57:43 +0000
ROA not before: Tue 25 Aug 2026 13:57:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 786
IP address blocks: 158.143.0.0/16 maxlen: 16
192.124.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/98277d-12b1-488c-ae35-8879b7116da6/1/FOxcZFb_9aWbEMXLpcBl-8vMhg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/98277d-12b1-488c-ae35-8879b7116da6/1/FOxcZFb_9aWbEMXLpcBl-8vMhg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/FOxcZFb_9aWbEMXLpcBl-8vMhg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:39:36:6c:e2:1d:30:2b:fa:4e:fa:f7:c3:af:03:1c:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14ec5c6456fff5a59b10c5cba5c065fbcbcc860d
Validity
Not Before: Aug 25 13:57:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d5ca70f5d6d4aed9278b377eadf7e14c547c262d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:66:b7:25:fe:c6:3f:17:c8:98:b1:76:d0:bd:
7f:42:3d:c1:e2:f5:cf:83:d1:92:1c:3e:3c:10:6e:
22:cc:3a:8b:2b:3e:5a:77:5d:ac:1b:5a:22:b0:9c:
2a:ae:1a:d0:34:a8:8a:fc:47:57:5a:42:dc:1f:15:
cb:22:d4:c7:b8:6f:da:27:37:b7:86:23:19:1d:98:
e6:7f:32:f0:e0:c6:97:40:39:e9:1f:53:2a:d1:c9:
6d:9c:e9:db:2b:3e:18:8c:f7:d3:ee:e8:72:23:11:
42:c7:b2:6b:af:35:ec:27:b8:c6:d2:56:54:0e:56:
fb:e4:89:ba:f3:84:7f:c9:19:74:b2:ab:ea:ec:66:
82:16:37:6f:e9:06:88:32:ac:2c:ec:df:e5:7d:ac:
cd:6c:93:da:8c:23:8b:90:2f:49:6c:1c:51:a1:cb:
34:ab:36:b0:06:4f:66:ee:55:d4:57:77:e2:a3:3c:
5e:5b:ce:f8:88:07:d4:7b:12:86:3c:b2:9d:be:43:
96:ab:46:51:af:97:d8:3f:09:15:06:79:37:d9:72:
42:28:5c:81:8f:87:14:63:8e:3e:c8:ec:f4:ce:50:
d1:06:8d:ed:aa:62:b1:27:2a:8a:93:b8:ee:c4:f6:
73:d7:e7:33:3e:dc:a8:0a:e8:a0:26:e3:40:7c:49:
c6:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:CA:70:F5:D6:D4:AE:D9:27:8B:37:7E:AD:F7:E1:4C:54:7C:26:2D
X509v3 Authority Key Identifier:
keyid:14:EC:5C:64:56:FF:F5:A5:9B:10:C5:CB:A5:C0:65:FB:CB:CC:86:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FOxcZFb_9aWbEMXLpcBl-8vMhg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/98277d-12b1-488c-ae35-8879b7116da6/1/1cpw9dbUrtknizd-rffhTFR8Ji0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/98277d-12b1-488c-ae35-8879b7116da6/1/FOxcZFb_9aWbEMXLpcBl-8vMhg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.143.0.0/16
192.124.46.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:bd:10:f7:69:e5:30:0a:42:a5:63:68:a3:5e:88:41:3b:af:
0f:dd:d4:8d:a9:1d:29:f4:ca:dd:aa:02:39:39:e1:7e:68:13:
ef:34:31:92:33:61:ae:82:51:7e:1e:0c:43:17:24:9b:bf:4f:
7a:29:bf:10:13:25:62:d0:14:0a:cb:4f:7a:f8:c7:a2:61:5a:
0a:7b:dc:5b:46:e9:11:11:28:36:d4:a7:df:f4:79:08:2c:e5:
93:d8:52:99:c1:1e:17:d8:dd:b6:b8:0c:64:71:8e:86:d0:76:
68:ab:ea:3b:ac:1f:d8:c3:4a:5c:e4:ae:bb:77:04:85:1c:1e:
0b:4c:0e:04:84:ef:14:75:7a:b0:89:99:3d:58:cb:d5:75:24:
6c:a9:d3:ce:26:44:cf:9b:ef:bd:48:4c:d1:d1:16:e2:08:5f:
b7:4e:ff:8e:e7:d8:9d:bb:f3:6d:99:6e:3d:af:2b:7c:5c:79:
74:fe:38:d2:b1:52:cd:9d:61:db:e6:fe:f7:23:b1:0f:a8:4d:
a0:a6:fc:bb:3e:a6:e1:97:af:c4:b9:30:68:74:2c:cb:3a:cf:
80:46:8a:64:d9:43:ad:58:c0:90:26:04:a2:99:56:c0:e8:4a:
12:db:70:bc:11:0a:88:c8:ff:34:b3:26:ff:7d:c5:a1:eb:0a:
4e:10:2a:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:05:39 2026 by rpki-client