Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/1olwn7ICW7wQ7rzv6lV7Sb-PQEg.roa
File: 1olwn7ICW7wQ7rzv6lV7Sb-PQEg.roa (raw, json)
Hash identifier: z8lX2g4b2x4FJkwuYbzNJJZEhTP25jGzuB3PKLYYUCk=
Subject key identifier: D6:89:70:9F:B2:02:5B:BC:10:EE:BC:EF:EA:55:7B:49:BF:8F:40:48
Certificate issuer: /CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Certificate serial: 01A10EA4B0F342A06A0B41929EB50589AA22
Authority key identifier: 12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/1olwn7ICW7wQ7rzv6lV7Sb-PQEg.roa
Signing time: Tue 06 Oct 2026 00:37:16 +0000
ROA not before: Tue 06 Oct 2026 00:37:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218758
IP address blocks: 2a14:6782:201::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft
rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 09:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0e:a4:b0:f3:42:a0:6a:0b:41:92:9e:b5:05:89:aa:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Validity
Not Before: Oct 6 00:37:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d689709fb2025bbc10eebcefea557b49bf8f4048
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:34:fd:0a:48:10:4a:a7:97:39:a3:00:c9:25:
40:11:c7:4d:36:d9:d7:82:d8:73:8e:41:1d:20:93:
99:68:ab:95:bb:83:75:e5:16:df:eb:2f:56:4c:51:
f6:c6:61:a0:06:6e:c9:ab:a9:04:e6:0e:9d:c5:0a:
46:26:34:78:da:79:01:56:c1:dd:2b:a1:37:51:2c:
0c:3f:1c:58:b8:d3:9d:d0:7d:d2:d2:72:d9:52:1f:
bc:d7:08:25:db:e7:8d:99:20:40:7c:40:f7:e7:c2:
fc:d9:3f:df:96:a4:29:b6:5b:93:7c:8e:20:71:13:
3a:32:66:e6:e0:0b:df:60:b7:1c:0f:2f:9b:b2:6d:
ea:6b:5b:95:80:6f:1b:c9:98:8a:dd:1f:b3:37:f5:
df:71:32:d2:4e:11:26:98:2a:ee:57:d4:21:e6:95:
b0:f8:86:01:0e:94:d6:c2:a0:5e:86:3e:05:4c:72:
e9:d0:ce:aa:82:28:32:80:0a:a5:e8:c2:4b:e4:47:
6a:c7:8f:89:4b:4d:34:03:5e:99:c3:a3:45:b0:9f:
3c:33:d7:e5:e7:b5:b7:2a:a6:cc:c1:5b:f9:15:9e:
e5:2d:dd:f6:af:3f:90:dd:20:f4:09:8e:a9:df:63:
1a:f3:4e:fe:b2:d7:a5:a7:c4:42:97:98:fa:e3:a8:
f0:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:89:70:9F:B2:02:5B:BC:10:EE:BC:EF:EA:55:7B:49:BF:8F:40:48
X509v3 Authority Key Identifier:
keyid:12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/1olwn7ICW7wQ7rzv6lV7Sb-PQEg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:6782:201::/48
Signature Algorithm: sha256WithRSAEncryption
08:e7:de:ed:b1:e7:bc:d0:bd:35:ed:85:20:ba:e0:f2:c9:26:
0b:b0:e3:eb:c2:7b:88:84:a1:33:fc:19:ed:a2:e1:db:2d:df:
35:80:5c:66:77:d2:7b:b4:b3:d0:25:a1:64:2f:58:58:a8:39:
11:37:07:ea:5b:23:af:17:ce:bd:cf:93:7f:f1:e0:a7:0d:e9:
46:df:1f:50:ec:00:69:8a:af:c8:69:11:5a:53:9c:33:20:9b:
3e:74:97:91:cc:ee:bf:7e:75:96:e3:75:fc:a2:1e:60:0a:50:
8f:9d:2d:98:c8:8e:19:10:8a:26:c5:8e:98:bd:cb:02:89:23:
5c:7c:62:a1:2b:43:ec:e2:e4:1b:ca:3c:85:d5:ac:79:0f:e0:
b1:20:a4:b4:41:bf:d5:31:b6:40:4a:5c:c3:37:77:7e:03:1b:
f8:c4:34:0f:25:f2:9a:75:49:be:6a:84:ca:fc:e0:da:ef:9d:
ec:a3:5a:9c:47:33:79:ba:bb:42:c0:8a:02:c1:7c:4e:7d:08:
af:62:cd:ab:8d:2a:63:f5:88:31:fd:4e:a6:b6:08:bc:01:60:
b6:e7:eb:6b:e0:7b:18:6b:2d:08:6f:63:c9:41:a9:5c:71:87:
a5:24:ea:f4:79:cb:a2:67:b3:e6:51:39:48:59:9a:fc:52:0d:
90:83:78:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 15:22:16 2026 by rpki-client