Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/RjdXs8LNEhNvClQ5M_7qaGHlqFc.roa
File: RjdXs8LNEhNvClQ5M_7qaGHlqFc.roa (raw, json)
Hash identifier: YGakURUtgJEKWelFa/cPVQh0kgMzzNJSjiaSnMkFeMo=
Subject key identifier: 46:37:57:B3:C2:CD:12:13:6F:0A:54:39:33:FE:EA:68:61:E5:A8:57
Certificate issuer: /CN=a7a4e23482268475c1b935637d0002c2fd2993b8
Certificate serial: 019FD62BFC4F99B99103A490A0C63BE5DCF7
Authority key identifier: A7:A4:E2:34:82:26:84:75:C1:B9:35:63:7D:00:02:C2:FD:29:93:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/RjdXs8LNEhNvClQ5M_7qaGHlqFc.roa
Signing time: Thu 06 Aug 2026 08:23:54 +0000
ROA not before: Thu 06 Aug 2026 08:23:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219048
IP address blocks: 2a14:ae00:110::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Aug 2026 14:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d6:2b:fc:4f:99:b9:91:03:a4:90:a0:c6:3b:e5:dc:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7a4e23482268475c1b935637d0002c2fd2993b8
Validity
Not Before: Aug 6 08:23:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=463757b3c2cd12136f0a543933feea6861e5a857
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:44:6e:eb:21:f2:98:b5:84:fe:d2:07:dd:c2:
ec:99:1c:7d:b5:72:e8:db:ba:da:06:51:f4:a6:84:
93:0b:e6:49:40:3e:d2:3b:a7:2a:59:43:8f:62:a9:
66:54:87:33:3b:d6:d7:a7:95:d0:6c:8c:3b:2a:fd:
8d:dd:09:c0:3a:1c:07:77:73:b3:2b:49:e0:bb:f2:
f9:d7:7b:96:c7:5d:99:7a:7b:5b:ad:f1:ab:ce:30:
67:5a:d1:ea:ac:70:76:df:82:62:0d:03:ce:45:b4:
a6:c2:5f:ed:f9:d5:aa:e4:0c:8d:53:cf:a2:81:7b:
e1:80:08:df:5d:49:ab:43:f0:52:76:fb:1c:74:a5:
b5:c3:f0:ea:8a:b2:30:a7:69:ae:02:a1:be:5d:36:
ee:ed:ec:5a:4a:a7:e9:75:83:a6:a3:39:54:2c:0b:
a1:04:18:e3:c3:78:ed:ce:a9:f0:30:f6:0a:a5:85:
05:ca:1b:96:3f:71:9d:18:68:cf:ea:0d:ba:3c:ef:
dc:b3:86:7a:db:c2:6c:37:db:0d:b9:2d:66:ed:92:
a0:94:42:b6:f6:a5:8d:07:46:2e:ee:ba:eb:71:6a:
0e:64:ec:26:27:b8:96:d5:7a:fa:91:d9:db:7c:bd:
55:ea:47:b6:e0:ee:0c:3f:6a:aa:b7:8f:44:13:fc:
2b:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:37:57:B3:C2:CD:12:13:6F:0A:54:39:33:FE:EA:68:61:E5:A8:57
X509v3 Authority Key Identifier:
keyid:A7:A4:E2:34:82:26:84:75:C1:B9:35:63:7D:00:02:C2:FD:29:93:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/RjdXs8LNEhNvClQ5M_7qaGHlqFc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:ae00:110::/48
Signature Algorithm: sha256WithRSAEncryption
3f:01:1c:ba:ba:81:38:69:0a:fc:e3:e7:88:68:55:3a:f4:fb:
e1:d4:b2:15:fa:c8:e3:62:66:8d:06:69:d0:b4:06:e7:e7:07:
e8:30:68:36:5a:be:bf:ba:f9:76:43:1c:0f:c6:bd:bd:c0:b2:
7f:6a:a0:56:38:71:f4:58:6e:3c:9e:02:1c:27:69:e2:74:ca:
a5:8d:27:5e:37:84:15:49:74:5f:ea:0d:a5:bf:d2:45:57:78:
82:df:31:39:33:77:4e:2a:54:53:f3:81:ff:65:79:c6:70:28:
ef:4a:5f:ba:6f:f0:1f:6b:18:76:75:86:48:0e:ae:25:3a:ce:
9a:9e:40:f2:38:c2:e0:c9:b9:52:a7:f3:78:2f:0a:87:38:ed:
54:26:83:8b:b8:f0:20:f8:f6:29:53:59:c4:52:8e:17:31:e2:
22:9e:6d:cb:54:f5:7a:5a:38:70:c3:b4:be:4b:e3:bb:37:e0:
56:e0:67:f3:75:b0:28:46:96:f6:81:a1:72:c2:3b:d6:ec:69:
e8:b4:1d:79:4d:4c:02:71:d5:f9:e7:8f:c1:3b:37:65:9c:f3:
19:7b:50:8a:c6:b2:65:65:4b:1f:37:d1:18:a2:ad:58:f8:71:
ea:75:5b:18:94:52:e7:82:44:9b:dd:5c:b1:64:c7:1d:47:3d:
4d:57:65:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 18 00:07:17 2026 by rpki-client