Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/dUNUWDt_0kJ2DS1ugt0Ii3WwX7g.roa
File: dUNUWDt_0kJ2DS1ugt0Ii3WwX7g.roa (raw, json)
Hash identifier: oQQoKXMtu0U1IsU0j0ZWo2KwQtbcMi8+QdULtf86sM4=
Subject key identifier: 75:43:54:58:3B:7F:D2:42:76:0D:2D:6E:82:DD:08:8B:75:B0:5F:B8
Certificate issuer: /CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Certificate serial: 01A15A00F30020BCBB5225B1E26CEB7625FB
Authority key identifier: 12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/dUNUWDt_0kJ2DS1ugt0Ii3WwX7g.roa
Signing time: Tue 20 Oct 2026 15:49:34 +0000
ROA not before: Tue 20 Oct 2026 15:49:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216367
IP address blocks: 2a14:6782:203::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft
rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5a:00:f3:00:20:bc:bb:52:25:b1:e2:6c:eb:76:25:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Validity
Not Before: Oct 20 15:49:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=754354583b7fd242760d2d6e82dd088b75b05fb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:4c:19:61:6e:d4:70:86:f2:20:01:05:73:29:
17:69:0a:b0:d0:fe:df:45:d1:50:53:74:fe:22:30:
09:28:2c:1a:61:d3:f1:91:27:5d:e5:49:e9:2a:a4:
14:e6:60:d5:5f:41:a2:dc:cf:47:1c:74:d5:28:b0:
45:53:78:20:bf:26:c2:3f:87:88:59:e3:94:c8:5e:
f3:bd:6e:7b:14:97:22:91:24:94:ec:88:93:86:dc:
d0:0e:58:54:13:ab:be:f4:88:a7:6d:a2:ee:d2:bb:
68:a8:c4:27:50:dc:1b:a5:51:1a:91:8d:81:f0:07:
00:2d:7d:7b:ef:90:62:0a:f3:34:9a:3c:57:48:a1:
ee:8f:59:d6:05:76:60:fb:ef:15:32:0e:3a:65:67:
74:76:99:b0:a9:14:59:26:98:fa:47:ed:86:16:c8:
9a:32:12:02:56:82:90:fd:93:de:b3:23:26:10:22:
fe:d7:42:3d:7e:cd:d9:80:dd:c6:12:3e:e3:f8:01:
1c:71:fd:1d:a1:b8:e0:29:14:d4:49:86:cc:03:35:
2a:4f:b7:4c:31:12:d7:47:3b:95:ea:d2:ac:b0:47:
d8:7c:9b:06:ac:e2:cd:03:14:2f:7f:78:9f:2e:67:
ac:73:99:bb:b2:49:ef:1d:84:d0:5e:42:4d:c8:e4:
5d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:43:54:58:3B:7F:D2:42:76:0D:2D:6E:82:DD:08:8B:75:B0:5F:B8
X509v3 Authority Key Identifier:
keyid:12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/dUNUWDt_0kJ2DS1ugt0Ii3WwX7g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:6782:203::/48
Signature Algorithm: sha256WithRSAEncryption
3d:8d:f4:ed:26:5f:a2:e6:38:f3:eb:7f:4d:e9:e4:b0:04:c2:
3f:02:6e:d8:c2:40:26:22:39:b0:7b:72:c2:84:5a:fa:43:ab:
56:6e:8e:f2:32:90:26:ec:35:2d:63:b3:86:c9:48:64:7e:70:
f9:a9:72:4e:22:67:48:da:34:a2:cb:3c:8f:b6:08:82:2f:cd:
fc:fe:09:44:24:f6:a5:ef:ce:0c:16:c5:25:97:6b:f5:15:06:
8a:d9:ed:51:db:43:b9:41:e8:f1:cd:5f:a0:0c:84:20:f9:48:
4f:d1:5f:c5:34:f2:bc:c1:11:83:1d:ef:89:7d:10:9e:c9:d0:
11:1f:b0:96:65:bf:f3:12:4b:4b:e6:5b:f0:97:6b:a5:e8:99:
01:e6:b9:42:5e:7c:f6:c6:f7:49:92:74:4c:f8:2a:47:25:ae:
79:d2:6f:b5:65:8c:19:3f:59:a4:79:7e:58:97:c6:df:3c:5b:
21:cf:d1:8e:d8:b9:51:7b:cc:ce:e1:49:e0:5e:de:94:bb:81:
c2:b9:f6:25:20:01:8f:36:24:36:00:27:e0:c4:ee:69:0c:40:
ae:cf:27:d1:58:e2:65:b0:43:d2:81:ce:ae:80:2a:c1:94:55:
2a:e0:ad:1c:6b:2a:25:a8:74:ae:4e:13:fe:00:25:ca:64:21:
8a:e1:cc:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 12:09:31 2026 by rpki-client