Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/zqFUQjSr2agWVtT5CQlN7iWEBt8.roa
File: zqFUQjSr2agWVtT5CQlN7iWEBt8.roa (raw, json)
Hash identifier: ViTnJd/N8WgvQfIogaC3MozoYm/j9G4qB7/5OENWtKM=
Subject key identifier: CE:A1:54:42:34:AB:D9:A8:16:56:D4:F9:09:09:4D:EE:25:84:06:DF
Certificate issuer: /CN=ca6441d9d807e0d78ce75213a103400ee14a7cdc
Certificate serial: 019E6A504635BAADD465C6A4B1E7D866B9C9
Authority key identifier: CA:64:41:D9:D8:07:E0:D7:8C:E7:52:13:A1:03:40:0E:E1:4A:7C:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/zqFUQjSr2agWVtT5CQlN7iWEBt8.roa
Signing time: Wed 27 May 2026 16:41:46 +0000
ROA not before: Wed 27 May 2026 16:41:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210644
IP address blocks: 2a14:a084::/36 maxlen: 36
2a14:a084:1000::/36 maxlen: 36
2a14:a084:2000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 06:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:6a:50:46:35:ba:ad:d4:65:c6:a4:b1:e7:d8:66:b9:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca6441d9d807e0d78ce75213a103400ee14a7cdc
Validity
Not Before: May 27 16:41:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cea1544234abd9a81656d4f909094dee258406df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:73:70:d6:c4:5e:d6:37:dd:fe:72:22:cc:ea:
ad:8e:0f:fd:59:83:fd:38:b8:35:bb:b0:22:6b:aa:
e6:6e:e5:cf:ce:f8:4b:bc:a0:24:6c:20:05:f3:86:
fa:86:69:ad:18:0f:63:47:93:43:61:f2:96:9f:21:
d7:a9:2d:e5:d3:00:db:cd:d3:7c:11:87:8c:a4:39:
5f:bb:a1:2f:1e:7b:e2:96:b2:74:17:0f:6c:06:95:
99:4d:3b:13:46:c4:c7:58:16:39:f4:55:17:0f:87:
23:7b:16:13:1a:fd:ae:da:ea:4f:6e:5c:1f:8a:71:
d4:ea:95:e8:20:ce:d7:a3:ca:01:14:d4:c8:46:f0:
99:9d:4a:f7:2f:1e:65:9d:ba:fe:40:7a:4d:98:e8:
40:a6:a9:8e:95:5f:7c:ae:83:d2:0f:16:c7:25:ca:
1b:ad:37:8d:14:2f:ec:1a:ed:a9:c9:94:db:7d:a1:
76:af:4f:85:4c:aa:82:51:c4:ef:6a:59:0e:9b:c8:
2c:e9:05:29:d5:1d:55:67:26:50:78:75:d3:c6:a4:
88:57:c6:0a:4a:cf:ad:1c:21:57:7c:5c:35:78:e8:
84:22:c1:5a:86:cc:75:12:ae:1b:68:d2:83:be:7b:
93:e7:e3:cf:c6:a7:70:11:f2:34:21:2d:c4:36:46:
ee:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:A1:54:42:34:AB:D9:A8:16:56:D4:F9:09:09:4D:EE:25:84:06:DF
X509v3 Authority Key Identifier:
keyid:CA:64:41:D9:D8:07:E0:D7:8C:E7:52:13:A1:03:40:0E:E1:4A:7C:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/zqFUQjSr2agWVtT5CQlN7iWEBt8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:a084::-2a14:a084:2fff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
33:68:f2:08:60:e6:75:1a:89:00:02:72:0a:8d:ba:36:62:8d:
7e:10:26:13:73:e5:1d:ee:5f:97:f9:62:b6:ec:dd:c4:a3:3c:
2b:6e:b0:da:31:82:c1:b9:a7:ec:cf:96:d1:14:2a:b3:f4:6f:
bb:0b:79:3a:2b:39:13:dd:f8:71:b5:c3:86:ab:20:52:69:40:
0d:80:67:06:d8:b4:e8:bb:ac:ec:22:bd:b7:fd:f2:78:9c:b9:
80:de:f5:bf:f6:73:3f:ef:4d:a2:d5:a5:d8:2a:71:c7:a6:2f:
cd:3b:db:5f:a8:77:6d:57:3e:7c:30:67:93:37:d2:6d:9b:86:
fd:1e:e7:91:de:41:6c:18:40:f6:1e:06:18:e3:8b:f8:85:a0:
a1:f3:1c:f7:f4:b5:62:23:80:0b:99:f2:07:d2:fb:41:f2:b8:
69:5e:b7:c2:1f:32:8f:09:26:6a:63:74:ba:12:d8:2f:b1:53:
e7:f3:2e:20:09:b5:39:a1:49:ba:73:22:18:e4:53:5e:a5:db:
ef:0d:6d:d7:94:1c:57:59:3a:cc:d8:78:31:32:6f:88:af:76:
d7:b2:fd:e0:85:bf:c7:f8:92:b4:36:65:ce:d0:79:6e:20:db:
04:c9:84:cc:1d:43:45:77:6b:ca:b6:af:40:45:fd:71:ff:9a:
4e:ee:ee:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 15:20:31 2026 by rpki-client