Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/a3zQKLXGLTGkQ2Cd-1Zwbg36UUQ.roa
File: a3zQKLXGLTGkQ2Cd-1Zwbg36UUQ.roa (raw, json)
Hash identifier: XOnED2q4aq3nUPqVAfPi+eweelNJUfXGC2i058PKIyc=
Subject key identifier: 6B:7C:D0:28:B5:C6:2D:31:A4:43:60:9D:FB:56:70:6E:0D:FA:51:44
Certificate issuer: /CN=a7a4e23482268475c1b935637d0002c2fd2993b8
Certificate serial: 01A0FE1BCFDEEE02FB780DBAF125947E3DBC
Authority key identifier: A7:A4:E2:34:82:26:84:75:C1:B9:35:63:7D:00:02:C2:FD:29:93:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/a3zQKLXGLTGkQ2Cd-1Zwbg36UUQ.roa
Signing time: Fri 02 Oct 2026 19:33:50 +0000
ROA not before: Fri 02 Oct 2026 19:33:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218515
IP address blocks: 2a14:ae00:115::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 10:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fe:1b:cf:de:ee:02:fb:78:0d:ba:f1:25:94:7e:3d:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7a4e23482268475c1b935637d0002c2fd2993b8
Validity
Not Before: Oct 2 19:33:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6b7cd028b5c62d31a443609dfb56706e0dfa5144
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b1:a3:bc:75:fb:7d:22:da:45:b6:43:2f:4c:
dc:e7:46:a2:df:52:86:f6:19:b6:7d:10:f4:8c:ee:
1b:14:46:a8:b4:49:41:fe:b8:8b:e6:91:91:e8:bf:
8e:0b:3f:6c:08:01:ab:46:9b:fb:a0:f9:4f:e3:f0:
4f:5b:ce:ed:da:be:3b:e2:44:e1:0f:79:0c:3c:2f:
47:ad:e0:92:10:28:49:85:ed:69:77:51:86:30:1b:
bd:d6:2c:53:f2:bc:69:42:35:5e:d4:ef:db:90:c8:
16:b8:a8:fe:59:27:40:1b:ff:98:28:91:db:52:bc:
32:21:e4:1b:4c:16:b9:93:c2:b8:b7:30:87:76:42:
a3:60:33:4a:57:d3:66:4b:0f:aa:00:a3:33:8f:3f:
8d:d4:13:5c:32:fd:4f:f1:05:da:62:88:64:03:5a:
f1:e0:3b:6c:9a:07:d5:9a:34:3a:21:65:2d:a1:85:
8f:5a:2f:5c:54:21:e9:e0:6a:4d:f3:d5:de:0e:76:
8e:37:03:1e:04:50:33:d0:5a:56:95:54:5b:10:8d:
5f:df:7f:bb:35:6a:cd:88:7d:64:90:00:0b:76:8e:
ff:80:2b:0e:a7:51:5e:ee:79:bf:1d:76:b0:9e:7c:
25:2f:a7:bf:f7:a4:6a:c2:c3:28:aa:2d:79:73:25:
72:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:7C:D0:28:B5:C6:2D:31:A4:43:60:9D:FB:56:70:6E:0D:FA:51:44
X509v3 Authority Key Identifier:
keyid:A7:A4:E2:34:82:26:84:75:C1:B9:35:63:7D:00:02:C2:FD:29:93:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/a3zQKLXGLTGkQ2Cd-1Zwbg36UUQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:ae00:115::/48
Signature Algorithm: sha256WithRSAEncryption
37:28:41:8b:b2:2e:52:cb:08:c1:a0:36:14:f3:9b:66:db:46:
96:01:fb:62:14:5a:b0:94:9c:5f:d4:b7:cc:6a:fc:0e:e1:e9:
39:55:fe:e7:f2:31:23:00:a3:30:3e:72:54:65:94:a6:e6:02:
75:fc:4a:e7:99:bf:fb:69:26:c7:9c:3a:37:22:04:17:8d:2e:
ac:ab:45:47:38:d0:0b:77:5b:9b:53:c0:08:a9:e0:fe:f0:0d:
c0:88:98:21:1e:06:cc:bd:ab:43:45:2f:11:ce:44:3c:ee:8b:
0a:7c:29:fe:a0:81:ef:08:cc:60:6e:0c:d2:9f:a4:7c:cf:cd:
e2:c2:00:70:59:fe:70:a9:d0:88:c6:f4:ac:92:64:72:59:4e:
59:7a:19:24:37:13:b2:93:a0:12:3e:5f:39:38:4a:0b:99:e7:
21:66:f3:ab:6f:5f:b3:3d:29:07:83:77:f9:d6:14:e0:0d:ca:
6a:9e:dd:09:4b:6c:7c:8d:0f:9b:45:a3:c1:57:cb:ec:e4:9a:
41:21:22:52:4a:7c:ac:2c:32:d2:81:75:a3:33:34:65:60:ec:
2a:c0:1a:55:55:73:47:5d:a3:93:fb:2e:be:a6:19:1a:c7:6b:
d0:cd:e1:c5:6d:36:6b:63:df:fd:f6:16:a3:26:86:31:77:5b:
02:de:5e:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 16:42:39 2026 by rpki-client