Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/O-iagWg9GVze1N-qb1ZeT9IJcTk.roa
File: O-iagWg9GVze1N-qb1ZeT9IJcTk.roa (raw, json)
Hash identifier: 2tIqkqB1u0MXJ3GlgzzbL3tL3nxAAGsb6mDhKKaUmLU=
Subject key identifier: 3B:E8:9A:81:68:3D:19:5C:DE:D4:DF:AA:6F:56:5E:4F:D2:09:71:39
Certificate issuer: /CN=ff32d6463621b13f78e530d144feac023e1e4582
Certificate serial: 01A13BC2EFC93E8066B92B751F08E57E31A6
Authority key identifier: FF:32:D6:46:36:21:B1:3F:78:E5:30:D1:44:FE:AC:02:3E:1E:45:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_zLWRjYhsT945TDRRP6sAj4eRYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/O-iagWg9GVze1N-qb1ZeT9IJcTk.roa
Signing time: Wed 14 Oct 2026 18:53:13 +0000
ROA not before: Wed 14 Oct 2026 18:53:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219476
IP address blocks: 2a14:15c0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/_zLWRjYhsT945TDRRP6sAj4eRYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/_zLWRjYhsT945TDRRP6sAj4eRYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_zLWRjYhsT945TDRRP6sAj4eRYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 09:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3b:c2:ef:c9:3e:80:66:b9:2b:75:1f:08:e5:7e:31:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff32d6463621b13f78e530d144feac023e1e4582
Validity
Not Before: Oct 14 18:53:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3be89a81683d195cded4dfaa6f565e4fd2097139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8e:10:09:0c:52:9b:10:29:f1:b9:8f:e2:69:
9e:66:00:13:fb:84:88:8e:4a:bd:24:d3:88:9f:67:
97:02:07:14:a6:d6:07:2c:b3:ea:ee:07:ec:75:84:
1e:66:68:47:c0:a9:1d:e4:69:3c:bd:0f:cd:86:f8:
5f:c9:0b:0f:1a:69:c3:7f:9c:96:eb:84:75:dc:59:
73:ca:92:b7:f2:e4:ee:43:59:82:3c:d4:92:4a:fc:
40:43:ab:27:0e:62:6f:1a:3b:84:41:b3:5a:62:5b:
0f:b8:7c:17:f0:dd:85:42:b6:3b:dc:f2:4f:eb:f1:
55:5b:61:51:b4:9c:75:5e:f9:65:04:13:f3:4e:b4:
71:2e:b4:5d:41:fb:3a:10:62:3e:03:c9:26:e7:fc:
9e:66:14:93:7a:63:81:28:d9:00:cf:7c:95:5c:74:
b5:ad:ee:ae:44:5c:61:e7:35:3f:e0:1e:c3:54:78:
ae:f2:e2:4f:69:34:53:f4:ca:a6:5a:68:bb:d3:e3:
ee:b1:6e:21:95:d2:0e:05:62:7c:70:40:b8:75:9e:
48:02:07:cf:21:54:f9:b9:9e:90:3e:67:98:4e:df:
75:2c:64:7e:ed:1a:97:63:8f:0c:30:72:73:ed:11:
64:32:12:c3:7c:78:67:4f:f6:85:a5:8f:02:ad:4c:
f0:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:E8:9A:81:68:3D:19:5C:DE:D4:DF:AA:6F:56:5E:4F:D2:09:71:39
X509v3 Authority Key Identifier:
keyid:FF:32:D6:46:36:21:B1:3F:78:E5:30:D1:44:FE:AC:02:3E:1E:45:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zLWRjYhsT945TDRRP6sAj4eRYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/O-iagWg9GVze1N-qb1ZeT9IJcTk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/_zLWRjYhsT945TDRRP6sAj4eRYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:15c0::/29
Signature Algorithm: sha256WithRSAEncryption
60:a1:ec:53:e2:ba:b0:98:c4:55:24:2f:40:c9:07:71:89:a2:
35:b0:be:d1:7b:4f:8c:60:99:4a:80:83:3a:24:f2:eb:14:8b:
d0:8d:6f:c5:46:25:17:30:da:a1:a0:60:59:3a:2a:04:b4:eb:
04:43:d8:cf:6b:cc:e3:3d:d4:f2:04:47:56:b5:c9:93:a9:d9:
8f:0e:80:97:7c:00:12:49:e7:43:44:2f:da:62:34:bd:ca:fd:
76:8b:00:26:42:d8:6c:f4:06:5a:b2:91:3a:d6:bc:54:43:51:
b5:78:ae:40:e1:5a:88:c2:45:62:2b:7f:2b:8f:79:02:12:7a:
33:b8:5f:18:df:c6:59:f5:89:92:60:42:f0:b4:8d:46:7a:50:
c5:05:6f:25:6d:7a:9c:7c:1f:50:fc:ab:b6:ad:07:de:7a:62:
24:93:7f:56:24:e3:18:c2:33:3f:98:9a:19:cc:53:34:00:9a:
d9:84:3b:ca:9f:40:5f:cc:ab:6a:58:c5:13:c8:7e:2f:eb:68:
df:46:92:db:67:3c:c3:f7:2c:8a:08:33:72:f4:36:f3:cd:2b:
ee:0f:8e:0c:8d:62:33:0d:1e:42:f8:78:52:ee:29:f9:27:04:
a0:1a:87:21:73:bd:9b:7c:c0:f6:4c:1c:23:da:d8:eb:b3:6b:
5f:a2:d1:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 14:10:38 2026 by rpki-client