Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/0b321e-74ea-40b3-88a7-b18d67583994/1/hK51yH0MXa_3Zo5NqvHRwagkNZY.roa
File: hK51yH0MXa_3Zo5NqvHRwagkNZY.roa (raw, json)
Hash identifier: bKZkRKtCfxhAuH8t71x6a90QH8ee6WDJgiRFaE6k0Jo=
Subject key identifier: 84:AE:75:C8:7D:0C:5D:AF:F7:66:8E:4D:AA:F1:D1:C1:A8:24:35:96
Certificate issuer: /CN=40b97406244b4107262687db1b9642c3d9e8f843
Certificate serial: 019C81C1CADC8C637D3F14C3D9242521AE50
Authority key identifier: 40:B9:74:06:24:4B:41:07:26:26:87:DB:1B:96:42:C3:D9:E8:F8:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QLl0BiRLQQcmJofbG5ZCw9no-EM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/0b321e-74ea-40b3-88a7-b18d67583994/1/hK51yH0MXa_3Zo5NqvHRwagkNZY.roa
Signing time: Sat 21 Feb 2026 19:51:27 +0000
ROA not before: Sat 21 Feb 2026 19:51:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 23532
IP address blocks: 2a14:4600::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/0b321e-74ea-40b3-88a7-b18d67583994/1/QLl0BiRLQQcmJofbG5ZCw9no-EM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/0b321e-74ea-40b3-88a7-b18d67583994/1/QLl0BiRLQQcmJofbG5ZCw9no-EM.mft
rsync://rpki.ripe.net/repository/DEFAULT/QLl0BiRLQQcmJofbG5ZCw9no-EM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Feb 2026 15:05:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:81:c1:ca:dc:8c:63:7d:3f:14:c3:d9:24:25:21:ae:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40b97406244b4107262687db1b9642c3d9e8f843
Validity
Not Before: Feb 21 19:51:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=84ae75c87d0c5daff7668e4daaf1d1c1a8243596
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:85:c5:d5:79:03:ad:0c:2a:ae:ad:27:4d:87:
d6:25:84:8b:c9:35:6d:09:30:36:08:9f:d8:a7:96:
42:ae:ad:bb:4d:64:65:c1:31:66:03:1e:5a:8a:eb:
77:10:f3:4c:ee:47:c7:0c:ff:5f:8e:12:0f:12:27:
fa:3f:51:c9:16:88:bb:b2:12:09:77:f9:5b:48:19:
03:4a:39:00:7a:3f:2b:2b:aa:34:0b:92:fc:6f:0b:
fa:92:6b:87:ca:3a:9b:d7:b1:d1:90:b4:2f:69:6b:
08:11:22:c8:1d:3b:eb:75:de:d5:de:73:82:13:c4:
5a:98:0a:9f:8e:03:98:68:98:60:0d:71:9b:bd:74:
67:a0:77:9f:c6:d8:03:b1:18:d4:76:20:48:9e:0b:
b5:3e:f3:d2:eb:39:51:85:1c:61:01:6b:1b:cf:d5:
5e:b5:ca:fd:06:06:0e:ec:56:19:b2:f0:45:8a:2e:
c5:e6:18:ca:08:6b:da:2e:e7:07:f7:84:63:c8:08:
53:e7:90:21:8c:a5:9f:55:72:c9:51:a8:94:a0:3f:
26:53:4e:fa:f2:01:0e:e6:97:37:c5:5c:99:4d:e0:
ec:76:07:52:f0:2a:3d:41:10:20:64:10:d4:3f:ed:
78:c8:bc:a7:b3:34:1d:9e:4a:59:f4:c6:6c:2d:b8:
c8:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:AE:75:C8:7D:0C:5D:AF:F7:66:8E:4D:AA:F1:D1:C1:A8:24:35:96
X509v3 Authority Key Identifier:
keyid:40:B9:74:06:24:4B:41:07:26:26:87:DB:1B:96:42:C3:D9:E8:F8:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QLl0BiRLQQcmJofbG5ZCw9no-EM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/0b321e-74ea-40b3-88a7-b18d67583994/1/hK51yH0MXa_3Zo5NqvHRwagkNZY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/0b321e-74ea-40b3-88a7-b18d67583994/1/QLl0BiRLQQcmJofbG5ZCw9no-EM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:4600::/29
Signature Algorithm: sha256WithRSAEncryption
57:68:b7:c3:4c:87:22:6e:00:c6:cc:a6:e3:6c:eb:e8:85:aa:
f4:1c:da:ce:4b:35:a1:f5:64:96:50:b0:b6:c4:fa:48:6a:30:
ad:8f:aa:e6:e9:29:fb:3d:b8:2b:2c:88:72:9c:b8:4a:ed:3b:
f2:4f:e7:67:68:03:40:cf:4d:2e:da:49:0d:64:69:87:9d:e3:
f1:2e:0b:56:6e:54:10:1e:c7:5d:74:bc:32:8c:5c:2b:28:d1:
28:7b:c9:6b:88:6f:2b:23:54:73:5e:d9:87:84:a8:1f:cb:cd:
06:97:76:f7:e9:bc:ad:68:be:18:35:67:00:2f:7b:40:ed:cf:
26:d6:1f:1e:90:63:45:e6:60:94:bf:24:0b:f1:fe:5f:be:c4:
1b:ca:1e:c9:47:cf:38:ca:17:9b:c5:78:ca:90:c9:ee:31:37:
6f:b3:64:9d:06:7f:3b:d3:ac:ba:e6:63:33:da:e4:4f:aa:97:
28:55:64:f1:d5:d7:7e:54:e7:d4:e0:15:ce:16:5f:a6:aa:e0:
39:31:39:74:5f:cd:76:4e:fa:86:77:7f:6f:5f:7e:71:c2:0c:
85:bd:f3:9b:7c:fb:22:99:ca:e3:a3:b8:13:4d:41:ba:c8:43:
ff:ff:31:45:4c:fe:0f:a7:77:e0:43:dc:e6:28:9f:42:07:bd:
58:3a:92:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 18:55:19 2026 by rpki-client