Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/Z9GwRdc4-Kr9fwseb8oSW5D_91Y.roa
File: Z9GwRdc4-Kr9fwseb8oSW5D_91Y.roa (raw, json)
Hash identifier: cAMwbEKKiaUcrga3/hk4+qqYXy1Qmh7tan2xvzptGVE=
Subject key identifier: 67:D1:B0:45:D7:38:F8:AA:FD:7F:0B:1E:6F:CA:12:5B:90:FF:F7:56
Certificate issuer: /CN=a7a4e23482268475c1b935637d0002c2fd2993b8
Certificate serial: 01A18E6E74E6DAF0BFEE7AD11FD5CDF2BD13
Authority key identifier: A7:A4:E2:34:82:26:84:75:C1:B9:35:63:7D:00:02:C2:FD:29:93:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/Z9GwRdc4-Kr9fwseb8oSW5D_91Y.roa
Signing time: Fri 30 Oct 2026 20:09:25 +0000
ROA not before: Fri 30 Oct 2026 20:09:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 2a14:ae00:d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 10:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8e:6e:74:e6:da:f0:bf:ee:7a:d1:1f:d5:cd:f2:bd:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7a4e23482268475c1b935637d0002c2fd2993b8
Validity
Not Before: Oct 30 20:09:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=67d1b045d738f8aafd7f0b1e6fca125b90fff756
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:66:7c:f9:70:5b:b7:40:11:d2:3b:5e:65:14:
88:fb:75:7e:0a:9c:1c:96:70:64:da:df:cc:08:0d:
e5:ec:1c:da:56:d5:cf:86:cd:b3:0a:bd:f6:17:17:
67:f4:30:98:79:9c:44:8c:72:47:b4:3f:4e:39:ac:
4a:a8:f9:3e:7e:19:da:93:f2:d2:6b:4c:4a:42:ca:
40:63:3d:92:f9:81:44:b0:c2:50:be:ae:07:16:ce:
29:df:e6:e0:36:e3:71:d0:7d:de:81:ad:64:a6:b2:
e4:df:bb:d4:1f:37:79:79:da:d7:68:78:55:6e:fd:
4f:e7:2b:5c:10:8e:fa:86:f4:df:50:f7:42:87:f3:
76:b1:2b:95:12:72:ac:46:e5:6c:6b:95:cc:58:61:
f7:33:d3:dc:0b:39:bf:43:35:4b:54:f1:64:95:42:
c2:50:33:87:4a:eb:7d:45:aa:ac:31:46:ed:6e:29:
f9:18:87:41:64:ef:1c:1b:35:29:31:dc:e0:e8:a3:
95:df:69:ff:3a:b0:ab:cd:2f:4d:fe:43:ff:c5:02:
4a:ef:03:08:83:4e:ed:5b:ae:be:43:19:3f:22:33:
d2:2b:9c:0a:72:08:dd:c6:e2:0c:a7:83:26:17:ad:
70:b0:ef:e5:84:af:d0:e5:08:5a:9c:4d:b3:54:7e:
3a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:D1:B0:45:D7:38:F8:AA:FD:7F:0B:1E:6F:CA:12:5B:90:FF:F7:56
X509v3 Authority Key Identifier:
keyid:A7:A4:E2:34:82:26:84:75:C1:B9:35:63:7D:00:02:C2:FD:29:93:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/Z9GwRdc4-Kr9fwseb8oSW5D_91Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:ae00:d::/48
Signature Algorithm: sha256WithRSAEncryption
5a:9c:ff:76:5d:90:3c:5d:65:34:af:95:8e:d8:aa:b5:2e:bd:
dc:5d:8a:9d:5b:61:2c:75:45:b6:dd:c7:c6:05:e9:98:00:9a:
46:15:77:5a:1b:59:90:34:d5:26:54:c0:0c:c2:3b:39:55:e5:
a5:04:aa:26:e4:20:0b:66:bf:8b:7f:b6:8b:df:8a:7a:9d:41:
c9:fc:9d:5a:c8:eb:10:af:97:4a:78:85:81:6b:d7:d2:eb:7a:
2b:10:0c:92:12:7e:36:83:82:c6:0d:47:05:87:e3:05:41:73:
4c:a6:c6:ec:30:bf:b1:ac:55:a4:27:b6:e6:34:c1:d4:b3:6b:
1f:9c:a9:c1:19:37:e5:c2:e6:89:0e:d7:3f:3e:63:ad:8a:0e:
cc:42:40:7f:8b:1b:d2:b6:f3:c2:8d:ab:b7:83:1a:09:c8:3d:
fa:af:fa:c7:f6:7e:f4:d1:50:29:d2:51:d7:d0:a9:b4:c1:7e:
94:92:87:27:08:43:4e:b1:05:55:fa:18:5b:85:44:22:b2:78:
1b:88:e8:14:2a:f0:9a:56:ad:0b:35:3c:7b:98:72:ca:9c:ca:
31:67:10:2a:fc:86:83:97:d4:2d:e1:2e:76:7f:a6:c7:97:bb:
b2:89:2e:64:d6:2f:4f:64:20:68:50:bc:c1:cb:46:59:5f:b0:
c0:51:a4:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 16:41:58 2026 by rpki-client