Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/258dae-54fa-4a33-a19d-e91b3abd1fe8/1/kSe32ld6D3y8ZGSUCU3Nuw3483g.roa
File: kSe32ld6D3y8ZGSUCU3Nuw3483g.roa (raw, json)
Hash identifier: ibN4bInbBvAjLJ4kDOjWiNxovvHCVDwVdOJCJprQRIM=
Subject key identifier: 91:27:B7:DA:57:7A:0F:7C:BC:64:64:94:09:4D:CD:BB:0D:F8:F3:78
Certificate issuer: /CN=6fa64a647bd2a5557f70f676adcc76904fb872ab
Certificate serial: 01A1358EC3FAD6E1DA73944EA0E9BD2FC7BD
Authority key identifier: 6F:A6:4A:64:7B:D2:A5:55:7F:70:F6:76:AD:CC:76:90:4F:B8:72:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/258dae-54fa-4a33-a19d-e91b3abd1fe8/1/kSe32ld6D3y8ZGSUCU3Nuw3483g.roa
Signing time: Tue 13 Oct 2026 13:58:31 +0000
ROA not before: Tue 13 Oct 2026 13:58:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198015
IP address blocks: 2a14:9401:6000::/36 maxlen: 36
2a14:9401:7000::/36 maxlen: 36
2a14:9401:a000::/36 maxlen: 36
2a14:9401:b000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/258dae-54fa-4a33-a19d-e91b3abd1fe8/1/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/258dae-54fa-4a33-a19d-e91b3abd1fe8/1/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 19:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:35:8e:c3:fa:d6:e1:da:73:94:4e:a0:e9:bd:2f:c7:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fa64a647bd2a5557f70f676adcc76904fb872ab
Validity
Not Before: Oct 13 13:58:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9127b7da577a0f7cbc646494094dcdbb0df8f378
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:22:1a:fc:5d:52:fd:73:27:02:e9:e9:73:c2:
aa:f0:06:4c:00:4e:7a:b9:dc:68:73:2c:a8:41:4b:
30:7a:e7:74:9b:1b:6b:63:0a:e4:89:28:84:59:ac:
94:69:29:56:ca:9b:97:3c:f9:e6:c9:8e:ae:63:87:
8d:50:94:52:02:f6:6f:f5:03:a1:3c:be:14:63:ed:
97:60:e3:50:b4:92:fa:ff:52:8c:51:b4:d5:22:37:
6e:b1:8e:ca:d5:d6:cc:f1:c4:c0:17:74:75:ff:2f:
c9:17:fc:71:2f:02:36:e3:ce:ec:3f:d4:da:a8:3d:
83:8b:05:df:26:4a:46:eb:8b:17:66:66:d8:08:17:
63:7a:30:80:c1:81:26:2d:b6:e1:22:99:60:5d:37:
20:b7:ed:4e:8d:f1:93:dd:8e:85:80:48:09:ff:02:
d4:0a:f8:14:eb:21:da:f6:1c:f1:7f:20:18:fd:9b:
99:1d:12:6e:82:e5:c4:f6:cb:b8:a8:98:5c:ca:cc:
f5:a3:61:8a:1e:98:95:0d:a2:f2:43:d7:53:ae:1a:
cc:17:50:39:e9:e4:ab:fd:f0:c5:7f:30:99:ae:9f:
9d:14:2b:15:26:d7:e2:da:97:99:f2:36:cd:03:d8:
5c:05:e6:0b:da:02:60:de:35:77:6f:7a:7b:f3:c6:
f1:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:27:B7:DA:57:7A:0F:7C:BC:64:64:94:09:4D:CD:BB:0D:F8:F3:78
X509v3 Authority Key Identifier:
keyid:6F:A6:4A:64:7B:D2:A5:55:7F:70:F6:76:AD:CC:76:90:4F:B8:72:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/258dae-54fa-4a33-a19d-e91b3abd1fe8/1/kSe32ld6D3y8ZGSUCU3Nuw3483g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/258dae-54fa-4a33-a19d-e91b3abd1fe8/1/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:9401:6000::/35
2a14:9401:a000::/35
Signature Algorithm: sha256WithRSAEncryption
aa:02:a2:45:25:be:f5:e4:3b:dc:aa:f0:ee:85:a5:bb:fe:63:
ca:04:1c:62:70:1a:c9:20:5a:08:4b:7a:64:b0:93:8c:f8:76:
61:02:97:40:bc:44:52:96:cd:37:c9:15:a8:91:80:ee:b2:d1:
36:63:ae:a5:7a:e7:11:7a:18:99:94:59:93:03:c4:63:45:c5:
aa:87:6d:c0:46:30:9b:ac:1f:c9:33:1f:16:7f:7c:b2:2d:9a:
ff:55:ad:43:7c:59:34:ee:11:6a:bc:8d:f8:bf:14:f3:20:9e:
06:a3:6f:fb:a0:be:c9:33:0c:1a:a9:3c:3c:43:7d:82:d9:ba:
08:9c:07:81:c9:6d:e1:ec:a6:39:0b:b2:a6:2f:70:99:b7:fd:
cc:2d:86:41:0d:2d:b1:ba:eb:84:86:6c:97:79:ec:c3:a6:64:
61:26:56:b8:eb:ee:6f:56:2c:83:12:0d:b0:6c:ec:c6:1c:53:
d6:0d:25:e4:9c:8d:69:2c:63:20:20:e1:f1:7c:d3:b1:38:d1:
dd:9d:d0:89:c7:8e:b5:82:db:18:7b:2b:49:d3:c8:6a:cb:77:
14:e4:51:ee:1b:17:ff:19:93:71:42:3b:9b:31:a4:9c:fe:64:
4f:b0:e6:23:d3:66:fe:aa:4d:1f:e5:27:68:c6:a7:50:90:99:
5a:d0:4b:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 03:16:44 2026 by rpki-client