Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/d4RDziDkbCBPL2_Gitgv12ljCc8.roa
File: d4RDziDkbCBPL2_Gitgv12ljCc8.roa (raw, json)
Hash identifier: Ub5oUYCY6NHEEdBADx5dz8UuMBxVXsYGNlsuI486cno=
Subject key identifier: 77:84:43:CE:20:E4:6C:20:4F:2F:6F:C6:8A:D8:2F:D7:69:63:09:CF
Certificate issuer: /CN=a7a4e23482268475c1b935637d0002c2fd2993b8
Certificate serial: 01A18D1E98E23F137BC3EC2B559DD8461624
Authority key identifier: A7:A4:E2:34:82:26:84:75:C1:B9:35:63:7D:00:02:C2:FD:29:93:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/d4RDziDkbCBPL2_Gitgv12ljCc8.roa
Signing time: Fri 30 Oct 2026 14:02:35 +0000
ROA not before: Fri 30 Oct 2026 14:02:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218232
IP address blocks: 2a14:ae00:20::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 10:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8d:1e:98:e2:3f:13:7b:c3:ec:2b:55:9d:d8:46:16:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7a4e23482268475c1b935637d0002c2fd2993b8
Validity
Not Before: Oct 30 14:02:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=778443ce20e46c204f2f6fc68ad82fd7696309cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b3:49:13:04:17:fe:25:e3:c1:c2:0a:e8:59:
6f:d6:e0:f4:47:86:8d:f8:97:ff:98:6b:cf:bb:c9:
dd:b6:ff:bc:f5:cd:93:74:a3:6e:8a:4a:e6:dd:c5:
02:ef:54:ee:74:95:30:48:82:ff:ba:f3:cc:c1:06:
d8:5d:1d:0b:2b:84:2a:c5:21:12:fa:0a:7f:fe:36:
72:72:59:e5:07:37:3f:9f:f8:20:99:10:47:46:b2:
12:f6:f6:90:08:a8:1c:a9:ff:40:b7:04:b4:ca:6a:
ed:bd:95:a5:27:d6:9c:b3:68:75:f1:ae:88:66:e5:
83:f0:16:cf:ec:eb:13:d4:3b:87:94:e0:53:64:c2:
43:d0:1c:a2:60:8d:ea:3b:8e:f9:5e:63:1d:ac:d3:
5e:b9:8a:c0:4c:f2:e0:70:73:0d:33:b9:fe:ac:20:
fd:cb:f6:6f:51:22:29:d0:22:d0:4d:40:08:e3:67:
ad:9d:ba:bb:f9:52:24:47:56:7d:25:75:96:fc:8c:
26:93:19:cd:87:27:d8:de:42:22:cb:7d:85:f8:5e:
bb:16:ce:bd:03:c6:55:17:c1:8a:0e:6d:bc:86:cf:
66:9b:8d:ad:09:94:ce:28:a6:09:d0:e0:62:08:bc:
58:88:86:e9:ac:87:57:d3:f2:36:d7:16:cc:59:7d:
db:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:84:43:CE:20:E4:6C:20:4F:2F:6F:C6:8A:D8:2F:D7:69:63:09:CF
X509v3 Authority Key Identifier:
keyid:A7:A4:E2:34:82:26:84:75:C1:B9:35:63:7D:00:02:C2:FD:29:93:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/d4RDziDkbCBPL2_Gitgv12ljCc8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:ae00:20::/48
Signature Algorithm: sha256WithRSAEncryption
28:33:18:a3:8f:37:c9:b4:c2:d3:81:b9:90:24:5f:63:a2:ab:
95:f8:05:17:bc:fc:7c:cc:d3:22:32:36:98:93:e4:7b:d3:4b:
62:ed:72:47:9c:44:c5:c9:79:50:5a:8f:d5:83:f2:39:c7:e0:
8f:ea:cd:74:9f:98:ec:6a:e3:64:74:e9:f5:70:75:e1:99:63:
8f:16:f8:ef:02:74:b6:11:75:f0:45:24:70:69:47:81:ff:76:
23:6f:67:3b:b6:0b:9c:04:ba:c6:f7:9f:89:e4:85:8f:93:4e:
85:df:a0:b8:1e:64:5d:8c:9b:94:0d:65:a3:3f:5c:20:99:e6:
dd:98:7d:e9:64:98:92:66:4a:8b:9a:d0:55:61:c9:cc:08:49:
da:f2:d5:6e:f9:4d:82:c6:05:d2:27:62:b5:b1:a7:d4:52:cd:
21:3f:07:ba:22:6b:4d:c4:5d:04:2f:17:0d:1a:05:20:71:8c:
49:97:6d:d0:68:69:46:95:f8:a2:9c:af:93:7e:d5:13:37:a9:
63:64:57:84:35:07:5f:77:61:e9:ae:5e:b9:1c:14:cd:58:3e:
b0:e8:1e:8a:14:3f:27:95:64:a0:f3:d2:9d:55:d6:ac:2a:ef:
e2:3c:b5:86:ba:cd:4a:eb:7d:45:15:ff:f7:ce:b9:5e:ad:75:
b2:f3:aa:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 16:41:41 2026 by rpki-client