Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/1-2zTOJ5KK6tpF7ItfmeTfhPHk4I.roa
File: 1-2zTOJ5KK6tpF7ItfmeTfhPHk4I.roa (raw, json)
Hash identifier: IVnDG7ORte2DE36VIYu0q54LoHhTDzKyGpJUwobocds=
Subject key identifier: FB:6C:D3:38:9E:4A:2B:AB:69:17:B2:2D:7E:67:93:7E:13:C7:93:82
Certificate issuer: /CN=a7a4e23482268475c1b935637d0002c2fd2993b8
Certificate serial: 01A19C7261460C3BCF52C8D56A6D7FF31501
Authority key identifier: A7:A4:E2:34:82:26:84:75:C1:B9:35:63:7D:00:02:C2:FD:29:93:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/1-2zTOJ5KK6tpF7ItfmeTfhPHk4I.roa
Signing time: Mon 02 Nov 2026 13:28:24 +0000
ROA not before: Mon 02 Nov 2026 13:28:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218221
IP address blocks: 2a14:ae00:3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 10:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9c:72:61:46:0c:3b:cf:52:c8:d5:6a:6d:7f:f3:15:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7a4e23482268475c1b935637d0002c2fd2993b8
Validity
Not Before: Nov 2 13:28:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fb6cd3389e4a2bab6917b22d7e67937e13c79382
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ef:86:0f:56:73:f9:98:2f:68:4b:30:6c:7c:
52:ee:c1:58:39:8d:cb:62:5f:58:cf:5b:8f:6b:75:
8b:2a:d6:d1:45:2b:2d:d2:5d:0e:4c:3b:41:a9:ab:
cf:b5:3c:66:b3:5a:df:79:dd:1e:bf:1d:49:54:a4:
28:36:6f:28:1f:77:8b:27:57:84:46:70:a4:07:03:
2e:0d:74:c6:8e:64:52:05:88:6c:09:62:fd:8d:ef:
e7:0a:af:a1:96:cc:30:c3:31:3a:c4:c8:26:62:20:
63:96:16:71:d0:a1:bf:15:07:4f:b7:ca:ac:15:94:
23:fa:d0:e2:ab:c4:65:f8:04:d6:fc:e8:6b:d9:2a:
c9:aa:9d:49:43:23:5f:ef:af:19:68:8e:f7:6b:7a:
ea:ed:ca:bf:f2:84:30:d2:a4:f1:39:88:f8:5e:8d:
90:7d:cb:da:18:9d:0f:94:69:da:72:9b:19:ea:1c:
73:3c:ee:c3:9c:de:c9:30:9c:ad:70:8a:5c:62:ee:
f1:5e:c3:2e:c4:53:93:b2:75:10:cd:ad:77:9e:54:
3c:d5:fb:7b:6e:dd:43:4f:cf:21:ce:b2:92:ba:67:
8a:2d:f5:49:f5:fe:79:a4:7c:8b:56:79:ec:d2:f2:
09:8d:09:e3:8f:a5:99:72:e7:4e:d5:cd:96:53:dc:
33:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:6C:D3:38:9E:4A:2B:AB:69:17:B2:2D:7E:67:93:7E:13:C7:93:82
X509v3 Authority Key Identifier:
keyid:A7:A4:E2:34:82:26:84:75:C1:B9:35:63:7D:00:02:C2:FD:29:93:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/1-2zTOJ5KK6tpF7ItfmeTfhPHk4I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:ae00:3::/48
Signature Algorithm: sha256WithRSAEncryption
02:4f:3f:e7:a1:8f:52:d2:2e:09:06:dd:b1:95:30:a5:eb:52:
bf:f0:47:b6:98:7d:17:2d:48:ac:b9:08:8b:c3:77:27:be:13:
7a:82:45:67:2c:8f:ae:94:df:31:13:74:b6:37:a8:db:97:15:
b5:d3:76:95:85:e1:94:3a:ee:7f:60:2e:91:a1:30:fa:f7:07:
81:bd:bd:ed:a8:c4:bf:82:ed:32:82:cf:76:fa:d3:57:aa:19:
fa:5b:11:85:8a:28:98:32:f2:67:a8:eb:69:ca:a2:7b:2d:e4:
97:77:6a:7b:9b:85:45:d3:21:9d:ff:8c:90:0a:2f:bd:17:de:
c1:0c:d4:1e:63:56:c0:ff:c2:f4:a6:a4:2a:f4:8c:06:ca:96:
18:ce:6f:ae:8a:4e:1e:e5:48:15:88:b5:0c:ed:e5:9c:58:2e:
cb:4a:5e:81:cb:8e:aa:58:ef:00:3e:0c:02:17:5a:74:fc:0f:
91:91:e1:2c:a5:1c:12:9e:aa:25:12:96:17:9a:29:33:36:1a:
52:c0:c4:02:27:9f:2a:35:43:1c:46:40:97:d2:85:7b:15:72:
68:71:0b:d7:37:8f:4d:76:ca:49:fc:75:a3:be:a5:e5:2f:da:
d2:a5:b4:50:8e:35:32:5e:67:55:c6:3c:bd:a4:4b:df:76:6c:
f9:e4:b9:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 16:41:40 2026 by rpki-client