Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/Y9ihmV93zK8JMhpBWC6s3FEAd_s.roa
File: Y9ihmV93zK8JMhpBWC6s3FEAd_s.roa (raw, json)
Hash identifier: Qc0l0Xa+qhsOrfZPm67YxB9qiP7Vo3I0Yg8mibRMIZk=
Subject key identifier: 63:D8:A1:99:5F:77:CC:AF:09:32:1A:41:58:2E:AC:DC:51:00:77:FB
Certificate issuer: /CN=ff32d6463621b13f78e530d144feac023e1e4582
Certificate serial: 01A13BC2EE86521AE9F0F40A05B0EB3CFC18
Authority key identifier: FF:32:D6:46:36:21:B1:3F:78:E5:30:D1:44:FE:AC:02:3E:1E:45:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_zLWRjYhsT945TDRRP6sAj4eRYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/Y9ihmV93zK8JMhpBWC6s3FEAd_s.roa
Signing time: Wed 14 Oct 2026 18:53:13 +0000
ROA not before: Wed 14 Oct 2026 18:53:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197210
IP address blocks: 2a14:15c0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/_zLWRjYhsT945TDRRP6sAj4eRYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/_zLWRjYhsT945TDRRP6sAj4eRYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_zLWRjYhsT945TDRRP6sAj4eRYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3b:c2:ee:86:52:1a:e9:f0:f4:0a:05:b0:eb:3c:fc:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff32d6463621b13f78e530d144feac023e1e4582
Validity
Not Before: Oct 14 18:53:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=63d8a1995f77ccaf09321a41582eacdc510077fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f3:7f:d9:50:ff:88:40:1a:fd:fd:c1:9d:bb:
20:9b:68:f3:47:75:05:f5:de:10:23:62:cc:94:e8:
f1:76:27:7d:3d:b8:75:27:95:34:24:2d:66:6e:99:
71:1f:ce:49:13:42:4e:23:ef:f0:17:bc:16:95:03:
b0:40:5c:3b:14:65:fa:88:59:93:96:89:a9:24:ab:
4b:db:fc:3f:9b:68:22:78:3b:a2:4a:88:79:a6:e9:
79:68:7a:58:e4:35:4c:0c:0f:c2:8a:09:d3:b1:99:
a8:59:00:ec:dd:24:a1:23:55:b9:c7:f0:8c:9d:6b:
27:0c:7f:4c:33:05:af:8d:73:3f:8c:e8:09:c6:18:
8f:7c:eb:d2:6d:7c:d6:74:b8:ff:d1:8f:11:a8:2b:
f2:1e:67:c6:2b:8a:75:79:fe:b1:35:59:21:ea:69:
08:b3:b6:54:6f:85:2c:56:7e:27:16:c2:46:4b:d2:
41:98:f3:fa:b0:8b:a6:ea:db:b1:d4:ea:a5:71:c4:
49:44:8a:a5:d1:c1:f9:dd:5c:32:3f:8a:e7:83:db:
6d:0a:9f:42:23:fd:ca:b1:07:e3:24:23:e1:e6:d1:
e5:90:96:f4:7a:32:ad:ca:95:b5:05:07:94:38:b8:
65:96:39:d7:aa:21:45:c6:4a:11:30:e7:7b:7b:8f:
6e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:D8:A1:99:5F:77:CC:AF:09:32:1A:41:58:2E:AC:DC:51:00:77:FB
X509v3 Authority Key Identifier:
keyid:FF:32:D6:46:36:21:B1:3F:78:E5:30:D1:44:FE:AC:02:3E:1E:45:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zLWRjYhsT945TDRRP6sAj4eRYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/Y9ihmV93zK8JMhpBWC6s3FEAd_s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/_zLWRjYhsT945TDRRP6sAj4eRYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:15c0::/29
Signature Algorithm: sha256WithRSAEncryption
36:80:e3:99:17:36:81:30:da:77:f3:35:42:72:bc:b6:e9:85:
75:26:0a:ad:0c:e7:85:8b:5c:96:0f:05:78:dd:dd:06:60:a2:
9e:24:30:3d:3a:eb:41:0f:24:57:25:78:ce:b5:90:af:13:4f:
ec:e6:3d:6f:ac:16:2e:34:12:1f:c1:2d:79:c4:ed:71:0c:13:
96:83:4b:67:d8:3f:e9:de:ea:88:ed:0b:9d:c6:e3:98:b8:29:
ab:e5:2a:40:44:09:71:22:9f:c6:ae:7c:61:70:62:52:5b:54:
94:1a:f7:20:b3:e5:1d:03:74:19:db:76:ac:07:c6:d4:5d:19:
19:36:68:e2:c5:22:fc:4a:36:f1:b6:71:50:8f:b3:d0:30:03:
f4:c4:aa:a7:08:b7:2b:a8:dc:b8:27:52:4c:e4:a7:4b:16:27:
fd:2c:02:00:d8:ec:eb:7d:1d:5f:c1:20:86:13:e0:cb:ba:7a:
6a:15:b5:67:6f:9c:8f:e0:8b:0d:e6:41:2a:42:5f:30:67:0e:
09:cf:df:58:41:06:25:41:77:43:1c:ec:47:66:5e:84:5d:bf:
03:e9:1d:7a:87:b3:58:06:9e:91:f8:b1:be:5b:5d:32:1b:b4:
01:8f:5a:0b:b3:7a:a1:32:d4:0f:38:44:a9:22:cd:98:e8:53:
d0:34:04:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 10:35:13 2026 by rpki-client