Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/DDF34ADFjw2ffmD7jZCRIwPC0f0.roa
File: DDF34ADFjw2ffmD7jZCRIwPC0f0.roa (raw, json)
Hash identifier: aW6WqLBP0i1UkY8EAdBr72Jv0mP6eXJY/K5MM7ir6Zw=
Subject key identifier: 0C:31:77:E0:00:C5:8F:0D:9F:7E:60:FB:8D:90:91:23:03:C2:D1:FD
Certificate issuer: /CN=a7a4e23482268475c1b935637d0002c2fd2993b8
Certificate serial: 01A03917FAA9B76C1C060874202F4022232A
Authority key identifier: A7:A4:E2:34:82:26:84:75:C1:B9:35:63:7D:00:02:C2:FD:29:93:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/DDF34ADFjw2ffmD7jZCRIwPC0f0.roa
Signing time: Tue 25 Aug 2026 13:24:27 +0000
ROA not before: Tue 25 Aug 2026 13:24:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218871
IP address blocks: 2a14:ae00:70::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 13:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:39:17:fa:a9:b7:6c:1c:06:08:74:20:2f:40:22:23:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7a4e23482268475c1b935637d0002c2fd2993b8
Validity
Not Before: Aug 25 13:24:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0c3177e000c58f0d9f7e60fb8d90912303c2d1fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c4:b8:5d:72:1e:4a:f1:66:df:ad:c9:f0:d0:
66:8d:a0:77:ef:26:15:9a:62:58:1e:df:ba:7c:bc:
57:bc:18:a8:64:74:3e:18:1d:a4:53:2f:4b:65:07:
24:27:9a:09:fb:ee:c9:9d:de:e1:41:f8:41:ba:24:
ce:5c:14:58:fc:bf:cb:52:e6:c2:c0:40:7b:d1:8b:
f5:c2:49:73:f3:20:fa:2b:23:db:2c:52:3c:d5:8c:
6a:c0:25:a0:86:f3:84:79:a8:0f:73:1e:5f:fb:a5:
0f:b3:41:6b:e0:dd:d2:b9:ce:09:34:c0:5b:23:10:
35:04:17:ef:ac:fe:3b:5d:5d:01:29:de:03:69:fd:
05:7c:0f:38:eb:6b:d2:34:0a:27:9e:6e:85:4d:bd:
81:03:de:89:b9:b8:7c:e2:91:6c:56:7b:3a:85:24:
20:80:e8:e6:5f:bf:86:d0:3e:15:c0:59:22:3d:9c:
a4:12:f0:28:c8:2b:f9:a0:68:02:87:bb:af:d4:e3:
82:cd:96:fe:d4:07:7a:61:ff:fa:1a:9f:73:d6:0c:
44:c5:0d:19:aa:6b:62:f1:17:66:74:c6:52:8c:c1:
b0:0f:e7:70:af:c2:a3:bf:cb:b3:7b:39:bd:50:df:
c8:84:69:44:c2:eb:a6:19:51:2d:9e:ab:6a:fe:ec:
b5:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:31:77:E0:00:C5:8F:0D:9F:7E:60:FB:8D:90:91:23:03:C2:D1:FD
X509v3 Authority Key Identifier:
keyid:A7:A4:E2:34:82:26:84:75:C1:B9:35:63:7D:00:02:C2:FD:29:93:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/DDF34ADFjw2ffmD7jZCRIwPC0f0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:ae00:70::/44
Signature Algorithm: sha256WithRSAEncryption
1e:3c:b3:2e:32:0f:02:ee:df:e6:d7:e0:c4:64:cc:31:3b:f8:
ac:9e:1f:60:20:5d:97:03:d3:16:ef:26:d4:53:59:d4:5c:e4:
fc:76:bf:7c:4d:54:22:44:f3:68:c6:3f:d8:61:00:76:a5:9b:
e8:2d:d6:d4:60:d5:d0:e7:eb:95:53:dd:73:96:e7:3d:05:ec:
87:15:b1:b1:94:c9:40:ab:8b:76:cd:4b:5d:fd:df:e0:6a:89:
1d:0f:a0:07:fe:eb:67:72:a8:4b:59:8a:99:c4:b0:80:b4:b6:
f8:07:0a:d2:37:c0:48:d7:96:a6:dd:13:56:5f:f6:ec:cd:8a:
43:81:23:9d:49:8b:86:d0:ba:b5:18:81:9e:7f:6a:91:e2:da:
ad:0b:df:75:6c:82:2e:da:e2:e5:ca:7d:02:e8:f5:a0:ec:07:
82:34:fb:ac:dd:28:0a:2e:92:da:a3:e3:17:9c:a6:b2:e6:a7:
b9:c1:b4:9d:1a:a8:b5:6c:f3:6e:f4:c7:d3:17:e6:5a:80:83:
6d:3c:8d:ca:fa:4a:45:d9:c5:f5:be:6f:1a:27:64:08:d5:5f:
42:14:4d:22:20:68:75:76:96:2f:e6:98:64:b8:b0:0d:b5:04:
27:41:f3:d6:64:61:d8:8c:d8:06:42:66:87:73:ed:2e:ef:8a:
13:2b:d9:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 20:22:32 2026 by rpki-client