Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/a9tH5TPsdMc7VNawu4-mRWegXQE.roa
File: a9tH5TPsdMc7VNawu4-mRWegXQE.roa (raw, json)
Hash identifier: ruRkSgxmBG3LgJIf/H+dDcjTlDpmTjUbwHqWldUcrQk=
Subject key identifier: 6B:DB:47:E5:33:EC:74:C7:3B:54:D6:B0:BB:8F:A6:45:67:A0:5D:01
Certificate issuer: /CN=ff32d6463621b13f78e530d144feac023e1e4582
Certificate serial: 01A13BC2044225DD5B185FA089D06FC78F23
Authority key identifier: FF:32:D6:46:36:21:B1:3F:78:E5:30:D1:44:FE:AC:02:3E:1E:45:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_zLWRjYhsT945TDRRP6sAj4eRYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/a9tH5TPsdMc7VNawu4-mRWegXQE.roa
Signing time: Wed 14 Oct 2026 18:52:13 +0000
ROA not before: Wed 14 Oct 2026 18:52:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 54694
IP address blocks: 2a14:15c0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/_zLWRjYhsT945TDRRP6sAj4eRYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/_zLWRjYhsT945TDRRP6sAj4eRYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_zLWRjYhsT945TDRRP6sAj4eRYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 14:43:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3b:c2:04:42:25:dd:5b:18:5f:a0:89:d0:6f:c7:8f:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff32d6463621b13f78e530d144feac023e1e4582
Validity
Not Before: Oct 14 18:52:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6bdb47e533ec74c73b54d6b0bb8fa64567a05d01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:dd:39:7a:6f:1e:23:f9:53:95:c4:32:8b:77:
a7:1c:aa:b4:ac:a4:29:27:89:78:b8:14:8f:7c:c2:
aa:6a:73:07:d8:b3:b2:f6:90:2c:95:c8:22:7c:fa:
45:4a:fb:89:db:76:9a:ad:cb:bf:8d:a4:ec:b9:6a:
ce:e2:f5:5b:3d:b3:cf:4a:bf:ac:79:c7:c4:7b:cf:
69:2e:3f:54:5f:ea:76:e8:91:17:df:bf:9c:5f:10:
fe:ff:27:66:d8:26:90:93:47:88:08:37:6a:13:b7:
1a:d4:84:a0:a8:29:67:97:b5:b7:5f:a0:30:b8:d1:
76:96:87:42:65:22:04:56:18:aa:a6:fd:72:dc:8d:
01:b6:e5:29:dd:6f:68:28:b2:0b:08:46:a1:90:5b:
71:66:f9:f5:98:9c:4d:0b:be:e6:de:2b:e4:bd:f4:
d8:df:40:e9:d4:d2:a0:c7:bc:a3:04:82:d9:fd:67:
90:95:32:c1:84:7a:ce:01:60:73:72:70:de:b7:63:
96:e1:87:ff:bf:e9:88:42:ea:26:38:25:2b:f9:20:
bf:95:9e:a1:27:47:17:31:58:ec:a1:2e:92:37:19:
87:2f:08:fa:8f:21:ef:00:8e:8f:02:41:6c:0c:74:
8d:4f:97:7f:b7:ba:cd:57:6c:1d:31:0e:b6:69:41:
aa:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:DB:47:E5:33:EC:74:C7:3B:54:D6:B0:BB:8F:A6:45:67:A0:5D:01
X509v3 Authority Key Identifier:
keyid:FF:32:D6:46:36:21:B1:3F:78:E5:30:D1:44:FE:AC:02:3E:1E:45:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zLWRjYhsT945TDRRP6sAj4eRYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/a9tH5TPsdMc7VNawu4-mRWegXQE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/_zLWRjYhsT945TDRRP6sAj4eRYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:15c0::/29
Signature Algorithm: sha256WithRSAEncryption
31:96:38:91:b0:16:d8:f8:e9:65:f6:74:8c:04:f2:6c:2a:db:
ad:a8:d9:31:93:73:9a:87:b2:63:25:66:9a:42:b4:5d:22:5a:
04:86:25:9e:77:7c:e5:cd:51:5d:40:ba:a1:0f:c8:7b:cd:48:
74:c9:15:21:d9:a4:9a:8e:29:64:9d:3e:17:99:de:39:04:a3:
93:ac:ea:a6:f9:b4:6f:04:c4:89:5b:15:e8:1b:18:fb:a0:6a:
15:64:2d:b9:0b:a9:f8:6d:6c:90:27:0f:b8:10:a1:13:08:75:
cc:18:b9:09:b5:3f:af:26:7f:8f:b0:fd:20:a3:23:55:53:7d:
5e:7f:7b:d1:63:c6:0f:a2:73:fa:d8:15:55:ec:f0:95:58:9f:
da:4b:ab:20:fd:e3:af:6d:2f:c4:e1:7d:f1:82:80:7e:2a:50:
99:fc:2b:81:2b:3e:1f:16:da:4a:d4:e0:41:24:62:02:9b:bd:
00:1c:b2:ba:78:72:35:4f:f0:00:ca:38:1e:5e:1b:8e:cf:a5:
bd:fe:7f:58:e8:cb:98:cd:0b:9a:5e:69:7e:aa:72:c6:f3:7e:
24:00:b3:cc:53:75:cb:c9:bd:f8:05:4b:8e:7d:6c:30:28:1f:
9a:cb:12:c3:be:c2:6c:d3:52:fa:c8:47:a2:a0:67:ce:72:aa:
f9:e4:58:5b
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAaE7wgRCJd1bGF+gidBvx48jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmMzJkNjQ2MzYyMWIxM2Y3OGU1MzBkMTQ0ZmVhYzAyM2Ux
ZTQ1ODIwHhcNMjYxMDE0MTg1MjEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YmRiNDdlNTMzZWM3NGM3M2I1NGQ2YjBiYjhmYTY0NTY3YTA1ZDAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0N05em8eI/lTlcQyi3enHKq0rKQp
J4l4uBSPfMKqanMH2LOy9pAslcgifPpFSvuJ23aarcu/jaTsuWrO4vVbPbPPSr+s
ecfEe89pLj9UX+p26JEX37+cXxD+/ydm2CaQk0eICDdqE7ca1ISgqClnl7W3X6Aw
uNF2lodCZSIEVhiqpv1y3I0BtuUp3W9oKLILCEahkFtxZvn1mJxNC77m3ivkvfTY
30Dp1NKgx7yjBILZ/WeQlTLBhHrOAWBzcnDet2OW4Yf/v+mIQuomOCUr+SC/lZ6h
J0cXMVjsoS6SNxmHLwj6jyHvAI6PAkFsDHSNT5d/t7rNV2wdMQ62aUGq2wIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFGvbR+Uz7HTHO1TWsLuPpkVnoF0BMB8GA1UdIwQY
MBaAFP8y1kY2IbE/eOUw0UT+rAI+HkWCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3pMV1JqWWhzVDk0NVREUlJQNnNBajRlUllJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9mOTY5MDAtY2YxNy00MWY1LWFlMjgt
MmIwMGVhMzI5MzdiLzEvYTl0SDVUUHNkTWM3Vk5hd3U0LW1SV2VnWFFFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS9mOTY5MDAtY2YxNy00MWY1LWFlMjgtMmIwMGVhMzI5Mzdi
LzEvX3pMV1JqWWhzVDk0NVREUlJQNnNBajRlUllJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhQVwDAN
BgkqhkiG9w0BAQsFAAOCAQEAMZY4kbAW2PjpZfZ0jATybCrbrajZMZNzmoeyYyVm
mkK0XSJaBIYlnnd85c1RXUC6oQ/Ie81IdMkVIdmkmo4pZJ0+F5neOQSjk6zqpvm0
bwTEiVsV6BsY+6BqFWQtuQup+G1skCcPuBChEwh1zBi5CbU/ryZ/j7D9IKMjVVN9
Xn970WPGD6Jz+tgVVezwlVif2kurIP3jr20vxOF98YKAfipQmfwrgSs+HxbaStTg
QSRiApu9AByyunhyNU/wAMo4Hl4bjs+lvf5/WOjLmM0Lml5pfqpyxvN+JACzzFN1
y8m9+AVLjn1sMCgfmssSw77CbNNS+shHoqBnznKq+eRYWw==
-----END CERTIFICATE-----
Generated at Tue Oct 20 01:52:17 2026 by rpki-client