Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/f7mV16J1wDqR46O1Mb_9h93t8qY.roa
File: f7mV16J1wDqR46O1Mb_9h93t8qY.roa (raw, json)
Hash identifier: +Ff97Fyap6EGIXgVefHvjx97YPM6vgNVwia4edsbMvU=
Subject key identifier: 7F:B9:95:D7:A2:75:C0:3A:91:E3:A3:B5:31:BF:FD:87:DD:ED:F2:A6
Certificate issuer: /CN=03364fcedd691357733cd5ccd7029db8e61d1e3a
Certificate serial: 01A13BC031F26994B222056E95DEF48BCA84
Authority key identifier: 03:36:4F:CE:DD:69:13:57:73:3C:D5:CC:D7:02:9D:B8:E6:1D:1E:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AzZPzt1pE1dzPNXM1wKduOYdHjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/f7mV16J1wDqR46O1Mb_9h93t8qY.roa
Signing time: Wed 14 Oct 2026 18:50:13 +0000
ROA not before: Wed 14 Oct 2026 18:50:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219476
IP address blocks: 2a14:16c0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.mft
rsync://rpki.ripe.net/repository/DEFAULT/AzZPzt1pE1dzPNXM1wKduOYdHjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3b:c0:31:f2:69:94:b2:22:05:6e:95:de:f4:8b:ca:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03364fcedd691357733cd5ccd7029db8e61d1e3a
Validity
Not Before: Oct 14 18:50:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7fb995d7a275c03a91e3a3b531bffd87ddedf2a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:42:17:74:a2:f9:7a:e8:71:11:a6:97:ff:64:
0b:c3:12:3c:00:7c:fa:68:3b:fa:64:18:66:5c:36:
6c:78:cb:b7:12:a2:bc:ff:69:d1:72:0f:06:ae:11:
4b:31:cf:58:af:f6:1c:3c:72:e3:94:19:36:8b:e7:
56:b2:2e:f7:80:b4:9a:98:8f:2b:fb:d8:78:48:b4:
01:2d:8d:2a:42:fd:76:3e:2a:00:8b:d0:ed:8a:c9:
74:62:3e:ef:ec:75:5a:35:f9:fd:7d:f0:ef:6d:f2:
4c:2e:4d:fe:aa:35:06:f6:b0:a1:19:f6:f2:39:0f:
bb:ec:4a:54:fc:0a:4b:f6:6e:3f:9c:61:a7:b3:a4:
7c:33:59:f7:1e:b9:20:84:01:1d:08:ad:db:9e:98:
91:30:77:c2:4b:2c:96:db:e6:d5:94:d7:7c:90:71:
df:c7:94:3f:ef:2b:69:87:11:07:10:96:a2:24:c2:
31:88:d8:89:2d:ba:20:54:ec:8e:44:22:cc:7a:f8:
63:2d:92:f1:32:32:b2:d4:18:eb:84:f8:b7:5c:48:
c9:ef:e8:d0:5f:34:af:80:03:54:ee:46:8a:f7:5c:
4d:16:ac:6b:4b:50:67:e6:ed:83:19:2e:36:d7:89:
8e:e3:03:46:76:87:e8:31:c1:6d:c9:aa:cc:0e:ca:
02:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:B9:95:D7:A2:75:C0:3A:91:E3:A3:B5:31:BF:FD:87:DD:ED:F2:A6
X509v3 Authority Key Identifier:
keyid:03:36:4F:CE:DD:69:13:57:73:3C:D5:CC:D7:02:9D:B8:E6:1D:1E:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AzZPzt1pE1dzPNXM1wKduOYdHjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/f7mV16J1wDqR46O1Mb_9h93t8qY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:16c0::/29
Signature Algorithm: sha256WithRSAEncryption
63:26:19:ad:25:cd:c5:eb:f5:41:b4:78:83:0d:fd:d8:23:38:
73:c8:60:14:b9:0f:a0:c5:27:c6:65:88:d3:31:1b:ee:e3:da:
d5:57:38:d1:e4:05:81:98:4e:ec:8a:14:67:e3:83:e2:86:c0:
de:55:b0:96:38:70:bc:30:af:3e:0d:88:84:58:36:d8:cd:16:
05:f6:e2:40:1d:7c:d5:e5:11:45:9a:94:31:85:8c:a4:ff:4a:
0e:28:4a:ac:e0:52:22:6f:27:1d:68:ca:e7:72:cc:08:ea:8a:
33:7a:6e:30:25:d8:20:ae:1f:24:08:a9:68:e7:75:7d:ee:f6:
c6:15:a5:7a:14:a4:2f:7a:7b:4f:12:e4:86:e3:23:11:71:fa:
2e:3a:78:9b:15:08:fc:5a:cc:e2:86:16:59:59:f0:c6:47:ce:
91:53:30:05:08:a0:70:f7:a9:fb:53:4b:63:55:50:89:87:20:
05:18:3f:b3:6e:ad:7b:41:1f:f9:1c:f5:cf:b8:a8:9b:7d:8c:
45:d8:4b:ff:cb:e6:d7:43:7c:15:87:c9:e0:de:04:c2:10:4e:
e8:90:23:f7:d0:be:c7:6c:fd:08:7e:f0:7b:6c:c6:7c:0a:4d:
87:97:4b:97:dd:55:c3:b6:16:4b:b2:2b:df:33:58:09:d0:47:
b0:64:11:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 00:19:17 2026 by rpki-client