Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/94/766311-caa4-4399-8b35-fc79af1f6fb3/1/S3csrbKFX4Oh7WgHbHn-4kqN23s.roa
File: S3csrbKFX4Oh7WgHbHn-4kqN23s.roa (raw, json)
Hash identifier: PzbTzKCXvk918KIz9cPHw76b/0bRvx3pRKf+1n8SYYs=
Subject key identifier: 4B:77:2C:AD:B2:85:5F:83:A1:ED:68:07:6C:79:FE:E2:4A:8D:DB:7B
Certificate issuer: /CN=07bca0482d605587eb0e0c851c38e807755f9017
Certificate serial: 01A13BC11A373E42DE573E67184E560E4547
Authority key identifier: 07:BC:A0:48:2D:60:55:87:EB:0E:0C:85:1C:38:E8:07:75:5F:90:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B7ygSC1gVYfrDgyFHDjoB3VfkBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/766311-caa4-4399-8b35-fc79af1f6fb3/1/S3csrbKFX4Oh7WgHbHn-4kqN23s.roa
Signing time: Wed 14 Oct 2026 18:51:13 +0000
ROA not before: Wed 14 Oct 2026 18:51:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 54694
IP address blocks: 2a14:1740::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/766311-caa4-4399-8b35-fc79af1f6fb3/1/B7ygSC1gVYfrDgyFHDjoB3VfkBc.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/766311-caa4-4399-8b35-fc79af1f6fb3/1/B7ygSC1gVYfrDgyFHDjoB3VfkBc.mft
rsync://rpki.ripe.net/repository/DEFAULT/B7ygSC1gVYfrDgyFHDjoB3VfkBc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3b:c1:1a:37:3e:42:de:57:3e:67:18:4e:56:0e:45:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07bca0482d605587eb0e0c851c38e807755f9017
Validity
Not Before: Oct 14 18:51:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4b772cadb2855f83a1ed68076c79fee24a8ddb7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:2f:c1:55:cc:42:f2:d0:f9:1c:2e:e1:36:3c:
04:68:0c:82:00:42:c2:06:6f:8c:b0:17:08:b4:0d:
f9:c1:0e:77:dd:43:6f:84:b2:f4:97:be:c6:bc:04:
45:83:90:5b:9b:5e:fd:3c:19:0a:c3:d3:2e:38:f9:
e5:a9:04:aa:99:98:30:db:54:dc:68:6e:5f:17:ab:
c4:03:80:c7:6d:24:f7:bc:aa:c8:5b:6f:67:a9:e5:
b0:b1:09:5a:5d:69:0e:3b:39:f5:9b:76:7f:cc:e4:
c6:fc:96:ce:4e:01:6a:ae:ad:34:68:bc:01:37:34:
7c:86:40:f7:62:de:46:16:09:cb:31:53:76:52:f9:
d2:4b:55:ce:59:72:d6:30:de:6d:d2:ac:b1:03:63:
93:fd:11:a1:80:d8:b7:c9:ab:04:71:d9:99:a3:71:
5f:dd:4f:cf:db:c8:44:51:8d:c2:79:c9:d7:d0:03:
dc:82:7b:dd:74:28:fc:91:27:56:c2:dc:05:48:bf:
8a:88:db:96:83:98:cd:13:2c:da:3a:ff:ac:37:7d:
06:f3:9e:1d:47:0a:25:22:d8:b3:80:d8:c3:d3:9c:
c8:67:e4:74:54:30:67:4b:0c:32:d9:fa:cf:2e:59:
25:2e:1f:ce:ce:95:06:2e:7a:ff:27:0f:7c:31:c4:
14:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:77:2C:AD:B2:85:5F:83:A1:ED:68:07:6C:79:FE:E2:4A:8D:DB:7B
X509v3 Authority Key Identifier:
keyid:07:BC:A0:48:2D:60:55:87:EB:0E:0C:85:1C:38:E8:07:75:5F:90:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B7ygSC1gVYfrDgyFHDjoB3VfkBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/766311-caa4-4399-8b35-fc79af1f6fb3/1/S3csrbKFX4Oh7WgHbHn-4kqN23s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/766311-caa4-4399-8b35-fc79af1f6fb3/1/B7ygSC1gVYfrDgyFHDjoB3VfkBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:1740::/29
Signature Algorithm: sha256WithRSAEncryption
4d:f6:de:94:58:4b:10:b6:82:85:ee:6e:66:f7:22:0d:f8:82:
f0:cb:2f:be:1c:ca:70:25:0b:86:b0:c7:14:11:10:66:38:e5:
b5:d8:a7:9c:3b:98:cd:06:3b:44:98:ec:96:70:cb:73:34:9b:
54:d6:3c:5f:98:9b:80:2c:16:ef:06:43:bb:c2:6e:68:aa:f1:
35:11:3e:7a:12:ef:49:17:a1:d0:00:83:f5:fb:31:14:eb:c4:
62:87:1d:02:b8:34:36:e2:0d:3f:cf:59:3a:04:6f:6a:e3:f8:
d0:2d:ce:55:b6:ef:26:4a:04:bf:0c:e0:9e:ba:18:bd:22:69:
c5:97:d9:cd:c6:c8:e8:5c:60:fd:a2:c7:74:c4:3d:fc:3f:72:
ef:2a:37:68:bc:e9:02:f9:18:b3:74:8f:27:a9:3c:ef:0e:e6:
55:10:c2:52:e8:1d:63:ee:95:ec:bf:39:d8:4c:ab:a4:d4:38:
d5:10:2d:9c:ec:60:d0:bd:ce:75:78:8d:35:5d:8d:3d:b9:3b:
6b:43:0d:6f:13:1a:62:39:34:ae:52:09:49:8c:e7:63:6c:07:
a3:dc:d5:c2:9e:5f:aa:73:7b:d9:0b:6d:ac:2f:56:43:9b:e7:
78:9f:98:c1:68:b9:fb:f3:24:4b:fd:36:0a:f4:20:6e:05:ba:
8f:cf:30:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 08:11:06 2026 by rpki-client