Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/cmJJTDWqgSOxW7yilOgCjspit_M.roa
File: cmJJTDWqgSOxW7yilOgCjspit_M.roa (raw, json)
Hash identifier: JtXHhZpcZX8y0tLatDC4ANHAg9d4Px3tP60PWP3+pm0=
Subject key identifier: 72:62:49:4C:35:AA:81:23:B1:5B:BC:A2:94:E8:02:8E:CA:62:B7:F3
Certificate issuer: /CN=b31c4ce663e1ec245e747cd846f1a69ddb834b3b
Certificate serial: 01A13BBF45497B2FE8CD9B73424D8B20C06E
Authority key identifier: B3:1C:4C:E6:63:E1:EC:24:5E:74:7C:D8:46:F1:A6:9D:DB:83:4B:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sxxM5mPh7CRedHzYRvGmnduDSzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/cmJJTDWqgSOxW7yilOgCjspit_M.roa
Signing time: Wed 14 Oct 2026 18:49:13 +0000
ROA not before: Wed 14 Oct 2026 18:49:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219476
IP address blocks: 2a14:1cc0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/sxxM5mPh7CRedHzYRvGmnduDSzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 17:30:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3b:bf:45:49:7b:2f:e8:cd:9b:73:42:4d:8b:20:c0:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b31c4ce663e1ec245e747cd846f1a69ddb834b3b
Validity
Not Before: Oct 14 18:49:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7262494c35aa8123b15bbca294e8028eca62b7f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:bc:fe:6c:1a:6b:85:f2:b4:2c:e7:8c:1c:6b:
64:bc:cc:26:c7:f8:b9:bc:ef:f2:d7:30:a3:12:a2:
71:2e:ef:a6:96:35:4a:0d:b5:60:c8:88:c5:f0:29:
82:66:d8:ce:da:b4:a6:74:4c:bc:07:6d:8e:65:f6:
fb:fb:6b:cd:62:f4:1f:59:30:4d:c7:5d:d6:9d:db:
fc:17:47:15:9e:39:47:17:c9:31:97:97:55:7f:fb:
30:fc:4b:b4:e1:cf:d4:c4:0b:98:84:59:21:22:fe:
f6:a5:6b:a3:b1:ab:f2:f4:81:2c:79:9f:d3:2e:10:
5b:4b:75:44:a2:42:3e:a6:b2:bd:e6:08:85:84:be:
2e:b7:60:dc:60:55:3b:25:84:1b:27:73:96:4d:53:
66:98:0e:75:5e:d4:aa:de:03:43:86:94:fa:38:48:
73:98:ba:1c:ec:20:3b:34:35:11:05:18:75:01:bb:
18:7c:02:db:87:16:b7:8b:28:37:1e:30:be:87:35:
1d:23:70:b7:1a:1b:34:12:63:d1:9c:9b:d4:1f:bb:
41:ce:a0:ef:0a:c7:fa:84:49:84:ee:85:40:d0:d9:
24:e5:f3:a5:35:ea:45:51:a4:a5:0e:c4:07:c7:bf:
c9:ec:8d:49:96:a2:ed:36:f8:64:9c:e0:93:7a:20:
7a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:62:49:4C:35:AA:81:23:B1:5B:BC:A2:94:E8:02:8E:CA:62:B7:F3
X509v3 Authority Key Identifier:
keyid:B3:1C:4C:E6:63:E1:EC:24:5E:74:7C:D8:46:F1:A6:9D:DB:83:4B:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sxxM5mPh7CRedHzYRvGmnduDSzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/cmJJTDWqgSOxW7yilOgCjspit_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:1cc0::/29
Signature Algorithm: sha256WithRSAEncryption
43:73:c7:12:70:0d:0a:b2:89:bc:44:70:48:ed:3e:4f:e5:81:
81:e1:2e:31:32:58:6f:8d:c1:65:48:9b:45:f3:38:65:a2:63:
2a:15:91:c9:26:8e:ea:a1:6f:32:dd:53:20:0c:0d:ad:38:6f:
52:89:e6:7d:27:f5:9b:71:25:91:fa:bc:8a:80:b0:e6:1a:48:
d7:52:53:2d:66:fd:fd:fe:6e:b3:93:5f:73:ac:cb:69:14:bc:
07:a0:35:b0:db:94:1f:6f:4d:94:c3:27:cd:8e:25:10:38:39:
af:ae:de:1d:e4:da:40:d8:11:82:4b:0c:8d:82:53:34:b3:b4:
5e:c9:06:97:a2:27:a6:aa:f2:8d:f0:b6:e9:05:e7:37:45:8b:
18:37:80:15:cd:6f:f2:df:83:9b:4c:ca:60:9a:45:4b:c7:ae:
d0:7d:d4:db:39:4a:7d:51:84:a4:19:a9:d2:73:07:ee:7b:f3:
8b:ea:6e:b7:ec:d9:fa:d5:f6:f0:f0:dd:26:d1:97:0b:6f:e2:
42:b5:e9:9d:54:c5:d3:11:79:a6:7b:97:39:cd:f6:59:05:95:
fd:c4:bc:66:73:6c:bb:e2:18:fd:f5:3e:59:96:57:e4:61:e1:
b4:72:db:20:a0:7c:9f:dc:16:fd:6a:31:c6:dc:4f:67:56:34:
5c:64:72:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 04:18:40 2026 by rpki-client