Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/rpWgq3ixdO75KNigE_o828ZAHmg.roa
File: rpWgq3ixdO75KNigE_o828ZAHmg.roa (raw, json)
Hash identifier: PfBbhFLcTyrnvntNvYASioVaXFbdMUeoy9uIiJMF1So=
Subject key identifier: AE:95:A0:AB:78:B1:74:EE:F9:28:D8:A0:13:FA:3C:DB:C6:40:1E:68
Certificate issuer: /CN=b31c4ce663e1ec245e747cd846f1a69ddb834b3b
Certificate serial: 01A13BBE5B739B85C36DED5FBF58ABEF7BFD
Authority key identifier: B3:1C:4C:E6:63:E1:EC:24:5E:74:7C:D8:46:F1:A6:9D:DB:83:4B:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sxxM5mPh7CRedHzYRvGmnduDSzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/rpWgq3ixdO75KNigE_o828ZAHmg.roa
Signing time: Wed 14 Oct 2026 18:48:13 +0000
ROA not before: Wed 14 Oct 2026 18:48:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197200
IP address blocks: 2a14:1cc0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/sxxM5mPh7CRedHzYRvGmnduDSzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 17:30:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3b:be:5b:73:9b:85:c3:6d:ed:5f:bf:58:ab:ef:7b:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b31c4ce663e1ec245e747cd846f1a69ddb834b3b
Validity
Not Before: Oct 14 18:48:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ae95a0ab78b174eef928d8a013fa3cdbc6401e68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:7a:fd:0d:d4:ee:e2:04:25:f7:57:4b:8d:cb:
fd:c4:34:25:90:95:db:ba:19:32:d5:84:57:6b:08:
cc:7f:ab:a3:99:46:10:cb:b0:61:8d:6a:dd:0e:fb:
09:87:67:f5:2d:3e:cc:07:5c:a9:69:57:7a:59:0a:
08:8e:2d:46:67:aa:d3:47:34:61:19:2f:34:c0:ab:
e5:52:9d:4f:e6:0b:72:d7:e6:64:cc:c5:e2:e3:f2:
42:8f:8d:27:47:e0:d2:f8:33:f2:ec:b5:1b:ce:82:
8f:dc:e6:f2:f0:46:47:6d:6f:57:a6:38:db:56:ea:
20:d0:03:22:11:99:b3:b6:3a:96:54:43:e1:17:de:
19:74:47:0f:83:55:e9:25:3d:12:f5:ab:b0:00:3c:
56:8d:fa:d9:b2:ab:a1:92:ee:57:30:df:6c:22:cf:
98:75:9d:40:0f:92:ac:44:b1:0b:54:9d:f3:32:99:
b1:08:d6:ec:2d:59:44:fb:c4:1d:14:87:3d:b4:63:
37:8f:4c:ad:ca:f6:21:9a:af:73:d1:44:3f:f3:5d:
b3:66:c1:04:b0:d0:6d:fd:ab:fe:37:dd:85:b5:8d:
3b:db:de:bb:fb:1e:f1:08:12:f8:0c:79:94:09:e2:
82:70:00:c6:79:a4:33:1e:b2:47:95:23:19:72:59:
9b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:95:A0:AB:78:B1:74:EE:F9:28:D8:A0:13:FA:3C:DB:C6:40:1E:68
X509v3 Authority Key Identifier:
keyid:B3:1C:4C:E6:63:E1:EC:24:5E:74:7C:D8:46:F1:A6:9D:DB:83:4B:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sxxM5mPh7CRedHzYRvGmnduDSzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/rpWgq3ixdO75KNigE_o828ZAHmg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:1cc0::/29
Signature Algorithm: sha256WithRSAEncryption
15:69:41:ac:5e:b7:df:fe:bd:2a:ef:a4:16:dd:61:8b:9c:2d:
7c:cd:c3:ba:8a:82:13:7f:0c:f7:98:63:db:37:9f:c0:31:dd:
9f:54:95:69:67:57:39:65:90:5b:6b:89:25:7b:69:8e:5b:3b:
24:23:7b:33:90:7e:81:47:fe:9a:4e:fd:85:ac:45:48:f6:f7:
82:9b:26:ff:6f:2c:a0:dc:5c:50:9c:4d:fc:44:bf:7d:3a:f9:
98:89:e7:1e:a4:be:00:96:6f:59:66:85:69:7c:29:9e:c2:e4:
75:05:1f:68:29:91:6a:1a:15:e9:6c:05:ce:d4:73:4e:4a:4e:
08:24:f4:20:c9:51:0d:dc:f7:c4:d9:da:63:32:f8:2d:cc:a7:
f5:f5:a8:5d:d5:ee:fd:f4:d9:01:5d:72:0b:da:08:fb:c6:d4:
84:19:8a:3c:38:bc:82:18:20:bf:74:c0:bc:d0:4d:dc:26:89:
39:86:fe:36:bf:8f:ca:92:be:4d:fd:36:bc:d9:f1:9a:4f:ad:
84:e9:68:eb:ce:8a:0b:77:99:9d:d1:d2:70:e7:3d:0d:76:96:
e9:f9:94:33:23:33:82:8d:88:fe:40:84:b9:4f:42:5b:c5:ae:
ae:59:28:80:95:54:4a:72:7e:11:c0:dc:f8:36:1b:87:34:54:
82:e7:7b:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 04:18:48 2026 by rpki-client