Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/_gl7Dyg9MbKwtRKgqoZf1V2ga_M.roa
File: _gl7Dyg9MbKwtRKgqoZf1V2ga_M.roa (raw, json)
Hash identifier: bVhzlBVpBjutI4nxuPvd8OyDBoyWtfgMn/TxHaVpplk=
Subject key identifier: FE:09:7B:0F:28:3D:31:B2:B0:B5:12:A0:AA:86:5F:D5:5D:A0:6B:F3
Certificate issuer: /CN=03364fcedd691357733cd5ccd7029db8e61d1e3a
Certificate serial: 01A13BC031A01188FCF0E10E40333B667FA1
Authority key identifier: 03:36:4F:CE:DD:69:13:57:73:3C:D5:CC:D7:02:9D:B8:E6:1D:1E:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AzZPzt1pE1dzPNXM1wKduOYdHjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/_gl7Dyg9MbKwtRKgqoZf1V2ga_M.roa
Signing time: Wed 14 Oct 2026 18:50:13 +0000
ROA not before: Wed 14 Oct 2026 18:50:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219100
IP address blocks: 2a14:16c0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.mft
rsync://rpki.ripe.net/repository/DEFAULT/AzZPzt1pE1dzPNXM1wKduOYdHjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3b:c0:31:a0:11:88:fc:f0:e1:0e:40:33:3b:66:7f:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03364fcedd691357733cd5ccd7029db8e61d1e3a
Validity
Not Before: Oct 14 18:50:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fe097b0f283d31b2b0b512a0aa865fd55da06bf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b9:c7:ec:61:67:7f:fd:ee:2c:e0:3c:e7:9e:
71:67:92:a1:cc:75:3e:a3:93:5c:88:6f:5d:c2:0a:
1c:6c:9e:5e:c5:c6:ce:7b:8f:15:4f:43:e1:c7:b4:
49:0f:52:3b:1d:fb:ab:70:93:f1:2c:5c:35:76:b3:
01:f9:26:95:d8:23:d0:7f:b7:b4:06:ff:34:44:0e:
f1:af:ec:52:2d:6f:c7:c7:19:2a:c2:cd:db:dd:96:
ac:01:0b:3b:0a:cf:bb:19:dd:7f:17:67:78:48:75:
5c:f0:72:3b:20:9b:31:7f:b2:a5:cf:1b:12:d8:71:
58:a7:52:55:34:03:07:0e:e3:81:62:a6:ed:fb:d7:
bc:41:c1:f4:ae:e0:ee:1c:20:6d:39:9e:52:38:1a:
db:16:ba:39:bb:18:14:9f:a4:a5:d5:dc:54:ba:ef:
52:df:32:3c:63:21:b4:fa:84:be:e2:ef:dc:30:99:
31:eb:70:c4:dc:79:67:46:26:98:2b:fb:0a:7b:20:
02:45:ae:4c:64:d4:3f:57:de:83:07:be:7f:8c:f4:
00:d3:cd:cb:38:b7:ca:25:3c:a7:a6:6a:33:c0:22:
4c:eb:77:d4:40:46:6a:68:48:45:c6:3d:0f:7b:f0:
2a:d8:18:1c:81:bd:50:ad:28:98:ab:98:3d:86:43:
cd:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:09:7B:0F:28:3D:31:B2:B0:B5:12:A0:AA:86:5F:D5:5D:A0:6B:F3
X509v3 Authority Key Identifier:
keyid:03:36:4F:CE:DD:69:13:57:73:3C:D5:CC:D7:02:9D:B8:E6:1D:1E:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AzZPzt1pE1dzPNXM1wKduOYdHjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/_gl7Dyg9MbKwtRKgqoZf1V2ga_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:16c0::/29
Signature Algorithm: sha256WithRSAEncryption
80:0a:8a:fe:4a:63:02:af:19:57:7a:8d:32:79:12:ac:5e:d3:
8f:2c:05:73:16:13:5e:09:ed:c7:a7:70:0f:96:2e:f7:57:ff:
fb:80:c2:bd:f1:f1:8a:13:a2:df:6e:dd:e8:10:f0:57:62:5d:
03:78:d9:a7:9a:55:2e:4b:56:48:55:a2:4d:ae:62:28:30:6a:
96:e8:cd:86:3a:0b:0d:81:ef:64:49:41:09:58:91:30:ad:db:
ee:10:fd:d8:c4:d1:44:37:f3:f9:4b:c1:b1:fe:d7:ae:db:21:
8b:01:e9:84:26:64:d7:02:b7:0a:1e:c1:64:15:7c:96:27:1b:
dc:87:89:7b:ea:14:bc:f7:40:6a:89:c5:3a:a0:dd:3b:40:43:
54:0d:41:76:05:7b:ea:fe:83:09:00:5c:3e:73:e2:3f:c7:c3:
ad:08:61:fc:aa:5e:55:a1:09:15:c8:ae:9f:4f:f2:62:c5:05:
7d:9e:1e:b2:d8:41:01:c2:8a:fb:6f:64:1a:b8:a6:86:56:9a:
76:df:df:d5:78:4f:0e:c9:0d:e0:34:8f:ca:37:2f:66:c5:c7:
ed:07:2a:57:d0:7f:84:7e:16:24:0c:04:ea:ab:40:fd:f4:ed:
d2:12:d5:8c:ba:5d:21:f4:b0:5b:cf:96:07:a7:31:7b:c5:8c:
d4:5c:94:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 06:07:30 2026 by rpki-client