Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/STnrWZqW7jSi72JzmGyUlK-2Zvs.roa
File: STnrWZqW7jSi72JzmGyUlK-2Zvs.roa (raw, json)
Hash identifier: kgx/RS7lkkRSjhP2xtORABvdzJMR1IFzaugpVObBB54=
Subject key identifier: 49:39:EB:59:9A:96:EE:34:A2:EF:62:73:98:6C:94:94:AF:B6:66:FB
Certificate issuer: /CN=a7a4e23482268475c1b935637d0002c2fd2993b8
Certificate serial: 01A077A952DF1201A284AAFAA20D1208074C
Authority key identifier: A7:A4:E2:34:82:26:84:75:C1:B9:35:63:7D:00:02:C2:FD:29:93:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/STnrWZqW7jSi72JzmGyUlK-2Zvs.roa
Signing time: Sun 06 Sep 2026 16:59:40 +0000
ROA not before: Sun 06 Sep 2026 16:59:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219043
IP address blocks: 2a14:ae00:80::/44 maxlen: 44
2a14:ae00:111::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 13:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:77:a9:52:df:12:01:a2:84:aa:fa:a2:0d:12:08:07:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7a4e23482268475c1b935637d0002c2fd2993b8
Validity
Not Before: Sep 6 16:59:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4939eb599a96ee34a2ef6273986c9494afb666fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2a:fe:5f:d9:06:b1:1d:cf:4a:a1:29:1d:92:
6d:d7:fa:c9:a6:54:1d:c4:eb:1e:3a:46:64:74:4d:
b9:58:37:51:5b:e3:84:b3:74:57:87:17:25:17:71:
f0:8a:9c:5b:fd:d9:51:49:30:64:44:4f:f8:92:0e:
5d:a3:00:9e:21:1b:6a:41:39:d8:0c:66:a5:09:52:
d3:c4:b7:fb:79:29:76:38:18:cb:f3:28:10:d7:c4:
19:bb:91:5e:d2:4f:62:71:e3:14:9b:c7:5d:5a:e4:
ac:72:2a:19:c7:5a:64:b8:3b:31:be:0b:36:1b:37:
f3:6b:d4:ab:53:a1:8d:30:39:8e:a3:92:61:43:cc:
fd:6f:c1:52:40:7b:0f:2d:09:4e:24:c0:37:42:33:
74:34:12:98:ce:bc:6d:72:76:81:9a:c2:f9:67:2a:
45:a7:62:f3:0a:be:18:64:fe:fe:d2:aa:12:6a:e7:
53:97:70:0d:60:81:f0:9b:0f:0c:66:fa:78:66:9a:
02:52:8b:85:be:b1:b2:f0:00:b4:f2:6f:77:2c:35:
29:65:67:3c:c3:ec:8b:4d:58:3f:05:5c:1d:07:de:
51:3b:64:00:b8:e3:3b:85:43:0f:ad:b9:91:5b:25:
6d:db:46:d9:28:e8:c5:d5:a8:d1:40:24:73:15:27:
6a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:39:EB:59:9A:96:EE:34:A2:EF:62:73:98:6C:94:94:AF:B6:66:FB
X509v3 Authority Key Identifier:
keyid:A7:A4:E2:34:82:26:84:75:C1:B9:35:63:7D:00:02:C2:FD:29:93:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/STnrWZqW7jSi72JzmGyUlK-2Zvs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:ae00:80::/44
2a14:ae00:111::/48
Signature Algorithm: sha256WithRSAEncryption
a0:c8:fa:4a:6a:9a:b3:3e:8c:50:c5:f9:a5:69:81:c3:d5:4c:
9f:8e:20:29:55:ea:8d:f0:7f:1c:23:df:55:64:68:6f:9d:a7:
c2:e2:d5:48:5f:71:15:0b:c4:19:f0:33:0c:72:a5:e4:93:e9:
d3:13:db:9d:dc:96:b9:44:fb:20:7b:18:2f:90:14:3e:31:23:
67:20:47:ee:1f:59:40:06:e5:6a:66:7f:c2:67:a9:66:93:18:
06:e1:c5:eb:42:33:c1:03:a2:22:fa:18:b2:67:40:6f:2b:ff:
dd:ee:4e:4c:41:26:51:0a:33:5a:a0:55:47:03:e2:2a:0c:9a:
01:73:4a:85:54:c8:2f:9e:62:f6:30:e2:1a:ff:2e:4a:3c:9f:
f1:f7:e7:9c:77:fe:ed:6b:b6:91:ac:2d:13:27:23:46:4a:4f:
58:3e:e8:a4:c9:49:a1:69:45:5c:67:1b:12:49:12:1c:37:7b:
8c:0b:38:51:ef:94:ee:5b:4e:39:b5:0d:e5:62:56:13:84:c9:
18:91:0d:40:27:c9:59:f2:44:bb:44:3d:a0:86:87:e1:f6:97:
f7:41:64:94:02:3b:7c:5e:19:e2:71:f7:40:2b:91:f2:b2:5b:
d4:97:c5:04:22:53:98:db:ba:03:99:c6:9f:c3:22:74:01:c4:
df:a4:b4:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 20:22:35 2026 by rpki-client