Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/o6Pd2oak58OEl0kC5sZWG3ZuLSo.roa
File: o6Pd2oak58OEl0kC5sZWG3ZuLSo.roa (raw, json)
Hash identifier: IPwzLt3TdT8hkUeusaSDdRsN+zOZNTmlplpXH5wvnqc=
Subject key identifier: A3:A3:DD:DA:86:A4:E7:C3:84:97:49:02:E6:C6:56:1B:76:6E:2D:2A
Certificate issuer: /CN=d716209d7def98a2bb34977f65009b3520da256e
Certificate serial: 01A13BBB9BF90DA7612D150C57D0DC07F6E9
Authority key identifier: D7:16:20:9D:7D:EF:98:A2:BB:34:97:7F:65:00:9B:35:20:DA:25:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/o6Pd2oak58OEl0kC5sZWG3ZuLSo.roa
Signing time: Wed 14 Oct 2026 18:45:13 +0000
ROA not before: Wed 14 Oct 2026 18:45:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401163
IP address blocks: 2a14:1bc0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 03:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3b:bb:9b:f9:0d:a7:61:2d:15:0c:57:d0:dc:07:f6:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d716209d7def98a2bb34977f65009b3520da256e
Validity
Not Before: Oct 14 18:45:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a3a3ddda86a4e7c384974902e6c6561b766e2d2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:08:eb:f0:82:d8:40:cd:82:d7:c4:e8:31:67:
80:bc:de:74:2c:48:ad:f4:83:7b:f7:c7:35:02:49:
8b:91:dc:bb:1e:6b:9a:23:02:ed:01:c8:c8:43:38:
78:85:b4:b2:e3:4d:ed:f9:63:2c:85:ee:6a:fa:b5:
b8:0c:83:34:e4:b3:9c:e0:00:b2:8f:a0:f5:5b:0d:
cf:64:60:15:d4:e9:f1:b1:39:1a:b5:3b:f9:ee:13:
b7:c4:6d:45:3c:eb:85:e1:28:d9:6c:bd:c3:0b:77:
a4:c2:c6:f0:75:ac:51:1c:ec:16:2a:a1:d2:39:6d:
cc:31:54:d2:da:51:d3:d6:f3:bf:ba:c9:50:5f:aa:
cf:0c:8b:ce:1b:63:69:46:31:1a:69:b3:1f:0d:83:
f0:9c:d5:cc:45:a4:06:82:0d:c8:d1:e0:4f:a1:24:
2c:20:b3:36:ac:a3:7a:06:d6:5f:61:78:0f:17:3f:
42:37:54:5e:31:04:07:7f:55:97:77:9c:91:0e:28:
08:77:ce:80:bf:27:95:92:86:a2:12:48:d6:b0:22:
fa:23:15:21:7f:03:70:3b:8a:63:29:00:6a:ad:7c:
25:0b:06:38:85:ec:12:31:bf:e6:94:38:e5:a7:a8:
aa:d3:c1:f5:d9:95:fd:67:6a:ed:1d:13:ff:4e:d8:
2f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:A3:DD:DA:86:A4:E7:C3:84:97:49:02:E6:C6:56:1B:76:6E:2D:2A
X509v3 Authority Key Identifier:
keyid:D7:16:20:9D:7D:EF:98:A2:BB:34:97:7F:65:00:9B:35:20:DA:25:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/o6Pd2oak58OEl0kC5sZWG3ZuLSo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:1bc0::/29
Signature Algorithm: sha256WithRSAEncryption
a9:a4:02:82:26:26:dc:33:54:5a:69:da:77:ed:24:b7:03:16:
57:ae:9d:38:4c:29:d7:cd:d2:a1:c4:f9:72:11:8f:5e:e8:95:
05:44:21:e3:3c:57:47:e6:b4:ea:9c:07:a9:35:aa:af:f7:04:
30:c1:9f:b5:c2:51:9d:ae:0c:18:30:6a:2a:f2:db:4b:45:51:
51:8b:5e:56:db:51:dc:39:f3:d3:e5:37:71:b1:85:3e:81:b2:
b2:53:5e:d9:1e:5b:98:12:da:14:eb:4e:6a:d3:f0:6e:a6:f8:
dd:9e:16:24:14:38:38:a4:86:fe:70:70:bf:ee:4f:91:20:3f:
ee:3a:1e:7e:9d:c9:25:b9:df:7b:21:02:ae:d2:35:5d:20:1d:
96:54:c1:2e:fd:f0:0f:14:d5:8d:a0:da:aa:c1:70:65:dd:92:
49:c1:ce:04:61:df:50:78:93:14:48:cd:98:87:81:60:dc:32:
97:84:4c:dc:d8:3b:48:4f:34:a4:00:ae:83:d8:f2:8c:9d:a5:
bd:1d:c0:53:4d:dd:f0:eb:db:0c:3b:4c:4d:11:7f:d6:b7:76:
c8:02:32:54:a1:42:ef:1c:b1:49:6d:4b:80:fc:9d:6f:68:19:
9f:65:f9:e9:da:9e:61:d2:be:17:61:3e:7a:3b:0b:bf:a7:d2:
fe:b2:a0:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 08:30:32 2026 by rpki-client