Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/n83aqxTaEMhEGFJGSC9vA4JeC9g.roa
File: n83aqxTaEMhEGFJGSC9vA4JeC9g.roa (raw, json)
Hash identifier: 7Y4CupQAeZgAFzyzdXSJ985jpNnivqbMfYe0+iFxI9E=
Subject key identifier: 9F:CD:DA:AB:14:DA:10:C8:44:18:52:46:48:2F:6F:03:82:5E:0B:D8
Certificate issuer: /CN=b31c4ce663e1ec245e747cd846f1a69ddb834b3b
Certificate serial: 01A13BBF4657E9430EAF6ED96E8381818DC8
Authority key identifier: B3:1C:4C:E6:63:E1:EC:24:5E:74:7C:D8:46:F1:A6:9D:DB:83:4B:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sxxM5mPh7CRedHzYRvGmnduDSzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/n83aqxTaEMhEGFJGSC9vA4JeC9g.roa
Signing time: Wed 14 Oct 2026 18:49:13 +0000
ROA not before: Wed 14 Oct 2026 18:49:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401163
IP address blocks: 2a14:1cc0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/sxxM5mPh7CRedHzYRvGmnduDSzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 17:30:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3b:bf:46:57:e9:43:0e:af:6e:d9:6e:83:81:81:8d:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b31c4ce663e1ec245e747cd846f1a69ddb834b3b
Validity
Not Before: Oct 14 18:49:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9fcddaab14da10c844185246482f6f03825e0bd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e0:72:d7:52:c4:03:a3:5e:8c:35:c8:0a:c9:
53:47:4f:19:10:fa:9b:f0:c7:e9:c2:ec:cb:7f:e2:
8a:c0:6c:1a:68:a0:c9:1c:73:c2:d4:a4:86:09:9d:
bc:92:b9:2a:83:34:e2:b6:e6:0d:b6:15:15:a7:b1:
f5:e7:0e:25:06:0f:cc:d7:0e:6a:a7:6b:f5:7d:71:
97:fb:6b:d0:cb:70:e2:9f:28:ed:3a:72:7b:77:af:
b6:4e:ce:e7:88:d5:10:05:76:eb:98:bf:3f:9f:60:
6d:7a:f2:4f:b7:9e:86:8f:23:94:b9:7e:0c:78:d2:
09:6d:e5:15:2f:c0:c5:d2:6f:83:01:20:a6:95:7d:
98:13:95:61:e7:55:0c:c3:0a:f7:3b:ed:eb:cf:8a:
11:65:d4:2a:dc:76:0d:4b:f5:48:fb:f2:c8:13:c6:
31:8c:3e:be:22:f0:8d:f3:1c:5a:90:02:3e:3a:5c:
c8:79:3e:63:76:10:e4:47:df:08:9c:6f:61:e7:b8:
a9:00:6d:4b:c9:78:4f:bc:f8:37:4f:fe:3e:71:90:
63:c5:18:da:5a:7c:d4:24:f1:c8:ed:b2:7d:95:65:
f8:cc:be:d8:0b:14:34:67:ca:9c:ab:67:a3:b0:e3:
d3:92:7e:cc:76:ea:5c:2b:e1:bf:f0:28:68:61:26:
bc:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:CD:DA:AB:14:DA:10:C8:44:18:52:46:48:2F:6F:03:82:5E:0B:D8
X509v3 Authority Key Identifier:
keyid:B3:1C:4C:E6:63:E1:EC:24:5E:74:7C:D8:46:F1:A6:9D:DB:83:4B:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sxxM5mPh7CRedHzYRvGmnduDSzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/n83aqxTaEMhEGFJGSC9vA4JeC9g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:1cc0::/29
Signature Algorithm: sha256WithRSAEncryption
5e:80:d9:34:19:09:21:51:80:5c:50:ee:24:e5:5b:29:87:bf:
6a:00:d1:91:f1:32:e4:4d:09:e1:70:28:8d:32:ec:e6:e2:7a:
d0:65:d6:24:ce:fb:78:8b:55:9a:a3:91:df:b1:7a:e3:85:40:
e8:c9:7c:dd:26:65:8a:e0:65:49:1c:3e:17:47:46:46:a8:ff:
d6:4f:8a:b2:6e:bd:4c:d7:cd:be:41:7b:97:7d:0f:fc:5f:00:
8d:b6:a3:10:c3:13:f6:95:e5:0d:32:d2:d3:f3:3d:7a:1a:45:
e7:27:a3:1f:2b:16:39:66:ca:31:b4:85:4e:8c:6e:8a:30:87:
cf:91:0b:9e:02:09:6e:21:ab:9b:24:bb:0d:e9:68:6d:33:3f:
25:f1:92:79:02:f8:39:7a:ae:2d:fa:ef:0d:7d:ce:05:ef:1a:
45:56:b0:ec:eb:29:b5:87:7a:05:dd:89:54:ed:27:e4:45:80:
bc:51:6e:31:7c:a1:b6:48:d2:bc:07:d2:81:15:75:7b:68:58:
eb:f7:c2:11:ac:23:4b:26:76:59:7c:66:eb:3d:b3:56:26:a3:
ec:b2:79:0b:e2:2e:56:65:25:cf:1c:b2:37:ba:dd:a0:de:60:
55:46:28:fd:c2:4d:1e:7c:83:41:ff:f9:92:a2:5a:08:70:13:
21:1f:7e:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 04:18:36 2026 by rpki-client