Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/RHPDs6sUuiLT-opMfIoVNA3PEBU.roa
File: RHPDs6sUuiLT-opMfIoVNA3PEBU.roa (raw, json)
Hash identifier: r6LvBHgYmuPZ9hX2eAYd0nzis+vBTF0gYS9uk7yNew0=
Subject key identifier: 44:73:C3:B3:AB:14:BA:22:D3:FA:8A:4C:7C:8A:15:34:0D:CF:10:15
Certificate issuer: /CN=ff32d6463621b13f78e530d144feac023e1e4582
Certificate serial: 01A13BC2F021A16EEF538482EB4F2D304947
Authority key identifier: FF:32:D6:46:36:21:B1:3F:78:E5:30:D1:44:FE:AC:02:3E:1E:45:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_zLWRjYhsT945TDRRP6sAj4eRYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/RHPDs6sUuiLT-opMfIoVNA3PEBU.roa
Signing time: Wed 14 Oct 2026 18:53:13 +0000
ROA not before: Wed 14 Oct 2026 18:53:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401163
IP address blocks: 2a14:15c0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/_zLWRjYhsT945TDRRP6sAj4eRYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/_zLWRjYhsT945TDRRP6sAj4eRYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_zLWRjYhsT945TDRRP6sAj4eRYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 06:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3b:c2:f0:21:a1:6e:ef:53:84:82:eb:4f:2d:30:49:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff32d6463621b13f78e530d144feac023e1e4582
Validity
Not Before: Oct 14 18:53:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4473c3b3ab14ba22d3fa8a4c7c8a15340dcf1015
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:2e:9e:56:45:66:3f:22:d9:7a:fc:77:17:8a:
66:86:33:44:26:e6:e5:3e:eb:1e:a8:ac:50:34:c0:
68:c6:a2:60:56:d6:8e:e6:af:62:dc:ec:14:35:a3:
dc:e0:5e:83:b8:e5:0a:b2:e3:7d:db:07:73:bd:52:
0d:8e:c0:37:3d:8b:5c:f5:ae:25:92:92:fb:88:22:
2c:fb:ee:89:18:cc:75:5a:a4:65:64:bb:b3:1a:4f:
a1:22:96:87:6e:2b:8a:c1:ce:a5:81:81:6a:38:b0:
46:d3:c0:cc:15:29:a2:d8:fb:2a:f0:11:5d:31:6e:
69:66:f9:de:34:e7:db:b7:18:3d:cb:2d:cf:52:cd:
6a:fa:77:e1:f3:3b:26:67:eb:be:4b:8e:b3:54:75:
bb:2b:24:ac:12:73:a9:19:d8:d3:1b:e2:4a:32:76:
28:15:c0:74:b0:b4:68:b2:db:a9:d2:e1:03:96:7d:
af:d9:3a:c9:59:01:05:41:89:e8:f6:80:10:9d:40:
4c:fa:7a:3e:10:bb:75:f1:40:88:65:d5:ee:7e:55:
f9:90:96:1b:b0:a7:4a:57:0a:5b:da:40:c6:b7:0a:
ed:e6:0d:5e:20:55:aa:d9:91:29:1c:d2:99:63:bb:
c2:93:69:f8:b7:6d:66:8b:39:e3:05:12:63:ad:28:
b3:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:73:C3:B3:AB:14:BA:22:D3:FA:8A:4C:7C:8A:15:34:0D:CF:10:15
X509v3 Authority Key Identifier:
keyid:FF:32:D6:46:36:21:B1:3F:78:E5:30:D1:44:FE:AC:02:3E:1E:45:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zLWRjYhsT945TDRRP6sAj4eRYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/RHPDs6sUuiLT-opMfIoVNA3PEBU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/_zLWRjYhsT945TDRRP6sAj4eRYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:15c0::/29
Signature Algorithm: sha256WithRSAEncryption
32:8f:e0:73:35:70:7c:02:f9:38:f7:09:52:b6:32:72:82:3d:
18:57:5d:83:d1:74:ec:10:09:02:dc:8c:20:37:ae:0f:e0:e2:
97:7a:cf:46:8d:da:dd:91:c5:58:83:0c:1e:59:a6:c0:2a:cf:
41:3b:ce:dd:93:fd:ca:26:cd:34:8f:41:96:d9:6d:56:10:83:
a9:7c:14:34:dd:2f:13:f2:3b:d9:84:41:47:d4:0f:30:ea:0d:
3a:d1:c0:2c:d9:60:68:98:dc:f5:2c:56:14:2f:de:69:66:26:
00:ce:0b:b9:1c:e3:74:10:a5:76:c2:53:58:c8:75:53:61:b5:
41:a8:44:9b:da:a8:a3:7b:db:a9:75:57:b7:57:b4:1d:d0:d2:
1c:94:f8:09:3b:01:46:d1:49:0d:28:fb:17:07:fb:65:9d:9f:
a0:16:7c:b5:c6:ad:6b:80:61:a9:86:23:ac:ac:f2:7f:55:21:
ce:55:c3:2a:fb:7d:40:2a:2c:9e:5f:2a:97:9b:ff:60:a3:01:
68:84:71:f9:b2:65:fe:9a:87:1b:21:aa:65:c3:fe:70:d4:5b:
e7:91:81:67:e5:c0:f5:1c:b9:36:8d:c3:2a:7c:89:4d:72:2c:
84:b1:c4:28:49:8a:c7:26:66:2e:e1:18:8c:64:6a:0d:c9:93:
f8:81:9f:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 12:04:46 2026 by rpki-client