Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/aabc6c-0456-4935-a469-d547185512de/1/a0eUHcdaR9ti-evhbAEFGBrL0Io.roa
File: a0eUHcdaR9ti-evhbAEFGBrL0Io.roa (raw, json)
Hash identifier: UamqmfD2F3jnX1W9WoKvN8IFkSGGaFQkzJskamkX+iU=
Subject key identifier: 6B:47:94:1D:C7:5A:47:DB:62:F9:EB:E1:6C:01:05:18:1A:CB:D0:8A
Certificate issuer: /CN=33b65a8baeba4ff621492ebee6fc1e88adb21b03
Certificate serial: 019CDE05414C1CAFFE82FD434E76DFA8A98A
Authority key identifier: 33:B6:5A:8B:AE:BA:4F:F6:21:49:2E:BE:E6:FC:1E:88:AD:B2:1B:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M7Zai666T_YhSS6-5vweiK2yGwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/aabc6c-0456-4935-a469-d547185512de/1/a0eUHcdaR9ti-evhbAEFGBrL0Io.roa
Signing time: Wed 11 Mar 2026 17:50:12 +0000
ROA not before: Wed 11 Mar 2026 17:50:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214809
IP address blocks: 2a14:9d03::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/aabc6c-0456-4935-a469-d547185512de/1/M7Zai666T_YhSS6-5vweiK2yGwM.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/aabc6c-0456-4935-a469-d547185512de/1/M7Zai666T_YhSS6-5vweiK2yGwM.mft
rsync://rpki.ripe.net/repository/DEFAULT/M7Zai666T_YhSS6-5vweiK2yGwM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Mar 2026 00:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:de:05:41:4c:1c:af:fe:82:fd:43:4e:76:df:a8:a9:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33b65a8baeba4ff621492ebee6fc1e88adb21b03
Validity
Not Before: Mar 11 17:50:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6b47941dc75a47db62f9ebe16c0105181acbd08a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c6:4f:ea:1c:53:44:19:84:6b:2a:f1:01:1c:
28:41:51:3a:86:5e:32:ff:49:c8:09:c1:04:96:33:
cc:e5:4b:0c:0b:e1:92:80:62:08:eb:ff:7b:12:9d:
e7:fa:8c:d5:b0:df:db:a1:e7:fa:43:01:22:a3:8f:
47:a7:60:c6:ae:ee:f3:69:cf:9d:bb:0e:f6:0a:89:
a4:19:f0:1b:77:03:88:a9:8e:c5:f0:cb:e3:78:25:
cb:9e:b5:53:9f:b1:1d:c2:2d:5d:c1:70:0b:82:0e:
79:52:06:24:77:00:14:8a:38:d2:de:f7:ad:61:2e:
65:3b:32:15:a2:dd:11:9c:00:ec:9d:ac:89:22:ee:
04:3f:88:4c:03:89:21:d7:bb:9f:ec:e3:d2:1b:69:
74:33:10:94:d5:f4:c9:9b:fc:66:14:39:58:2c:40:
ef:69:52:ec:94:02:7f:77:f8:45:27:80:ff:91:e1:
77:76:f8:e8:cd:d7:d5:46:a6:e0:a6:ab:6f:d9:d9:
37:24:df:73:8f:cf:af:dc:32:0c:c4:b5:0b:24:c1:
52:76:a7:6b:f3:82:f5:db:92:8d:59:57:62:34:53:
84:18:13:7d:06:fb:98:9d:ef:41:e3:63:7f:14:4e:
2d:71:be:17:ce:3e:28:86:d2:e2:5e:78:72:08:09:
ef:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:47:94:1D:C7:5A:47:DB:62:F9:EB:E1:6C:01:05:18:1A:CB:D0:8A
X509v3 Authority Key Identifier:
keyid:33:B6:5A:8B:AE:BA:4F:F6:21:49:2E:BE:E6:FC:1E:88:AD:B2:1B:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M7Zai666T_YhSS6-5vweiK2yGwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/aabc6c-0456-4935-a469-d547185512de/1/a0eUHcdaR9ti-evhbAEFGBrL0Io.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/aabc6c-0456-4935-a469-d547185512de/1/M7Zai666T_YhSS6-5vweiK2yGwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:9d03::/32
Signature Algorithm: sha256WithRSAEncryption
96:e9:dd:a8:32:7e:f4:5b:e9:48:e1:a4:0a:10:12:88:f8:1c:
2d:e8:28:d0:e0:3d:e0:51:00:c5:11:d1:ce:d8:4f:40:ff:d3:
20:55:fd:8f:5b:bd:87:da:b5:ad:ac:7f:f4:0d:3d:24:69:32:
d7:ac:74:2e:99:38:f3:e8:08:ce:51:80:2d:87:ff:d4:81:6b:
1b:94:ac:49:c9:8f:c4:b0:0d:26:8b:d6:e0:fd:91:36:ab:93:
4a:35:39:c6:07:08:05:c2:bf:df:8d:39:56:5c:f6:dc:b1:10:
b0:3d:d3:d2:02:98:3b:5d:7e:6d:6f:4c:d0:2e:e8:ec:27:5d:
d4:2b:4d:34:0c:a6:43:93:e2:65:a5:3b:d0:b5:00:93:d7:ff:
86:30:06:1f:aa:47:66:b5:fb:06:54:ab:2b:f6:cd:93:c5:65:
b5:f6:78:5d:80:1a:ae:e8:b8:9b:26:93:54:02:bd:85:e9:4e:
46:29:24:1f:a1:f6:18:f7:71:d7:08:75:77:d0:41:a3:99:1a:
78:64:77:e8:a9:97:82:37:ef:94:c6:8b:3c:a0:c1:5d:a8:27:
d1:a0:fb:aa:55:b6:81:0c:9f:31:f8:29:28:70:9d:a2:03:a8:
d2:d4:ce:32:4e:fb:9c:b5:86:11:8a:5b:97:9b:c4:98:f8:ad:
8b:43:58:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 08:00:17 2026 by rpki-client