Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/c01576-a413-4712-9f32-60d5be1b7da9/1/dAqRd016UU-GWWvGsDGrAgTIQaw.roa
File: dAqRd016UU-GWWvGsDGrAgTIQaw.roa (raw, json)
Hash identifier: JgmOlxGtyA0xCGh9NuyBajlrFtDNKBRCvgx12t8BKAQ=
Subject key identifier: 74:0A:91:77:4D:7A:51:4F:86:59:6B:C6:B0:31:AB:02:04:C8:41:AC
Certificate issuer: /CN=a3ab670e8146ef5274ae45eb30d29e970065ba2c
Certificate serial: 01A15E3E9ADD98030163CFD6AA3FA96B1250
Authority key identifier: A3:AB:67:0E:81:46:EF:52:74:AE:45:EB:30:D2:9E:97:00:65:BA:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6tnDoFG71J0rkXrMNKelwBluiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/c01576-a413-4712-9f32-60d5be1b7da9/1/dAqRd016UU-GWWvGsDGrAgTIQaw.roa
Signing time: Wed 21 Oct 2026 11:35:23 +0000
ROA not before: Wed 21 Oct 2026 11:35:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210064
IP address blocks: 2a14:f680::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/c01576-a413-4712-9f32-60d5be1b7da9/1/o6tnDoFG71J0rkXrMNKelwBluiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/c01576-a413-4712-9f32-60d5be1b7da9/1/o6tnDoFG71J0rkXrMNKelwBluiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/o6tnDoFG71J0rkXrMNKelwBluiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 20:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5e:3e:9a:dd:98:03:01:63:cf:d6:aa:3f:a9:6b:12:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3ab670e8146ef5274ae45eb30d29e970065ba2c
Validity
Not Before: Oct 21 11:35:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=740a91774d7a514f86596bc6b031ab0204c841ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:4d:99:56:f6:fa:13:3a:31:a8:54:97:e5:65:
cc:75:6c:73:77:ff:80:c7:3e:58:30:ad:88:46:db:
29:8d:76:4f:fe:dc:c9:d9:2b:1d:2c:59:70:77:ed:
5d:d7:bb:7b:39:eb:79:dc:ed:a7:d2:8f:89:bf:9d:
d4:7b:90:c9:09:ef:ce:cc:61:40:56:43:df:04:54:
4b:56:f5:62:f6:c3:f4:8f:3e:b2:bd:46:92:ca:99:
a5:61:72:e7:73:45:91:70:28:17:88:95:39:6d:e0:
0b:35:2f:cb:5a:a1:b9:33:2e:89:22:bb:1e:93:cd:
25:d5:eb:2e:5b:3c:10:d2:ee:b4:e0:3e:16:15:4a:
0c:bf:ba:d4:5d:ac:8b:8a:4c:ad:a9:22:42:23:16:
52:f1:a3:2c:f1:4f:f2:15:4d:10:52:2f:9d:35:66:
75:72:c2:d8:44:c2:ea:fd:ad:2a:18:d7:e2:bd:25:
79:f8:71:16:3a:1a:cb:b8:c0:99:61:07:b5:5b:db:
42:1a:00:71:77:7f:30:0f:37:d6:74:9d:54:7c:28:
5a:19:eb:60:26:4e:30:14:40:f3:ad:ca:ca:34:f2:
7c:0a:4e:03:db:76:ab:e9:18:2f:a4:95:c8:62:95:
ce:82:84:05:89:c1:49:64:84:f0:20:a4:60:41:2a:
e8:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:0A:91:77:4D:7A:51:4F:86:59:6B:C6:B0:31:AB:02:04:C8:41:AC
X509v3 Authority Key Identifier:
keyid:A3:AB:67:0E:81:46:EF:52:74:AE:45:EB:30:D2:9E:97:00:65:BA:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6tnDoFG71J0rkXrMNKelwBluiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c01576-a413-4712-9f32-60d5be1b7da9/1/dAqRd016UU-GWWvGsDGrAgTIQaw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c01576-a413-4712-9f32-60d5be1b7da9/1/o6tnDoFG71J0rkXrMNKelwBluiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:f680::/29
Signature Algorithm: sha256WithRSAEncryption
3a:8c:a8:f3:5d:ea:ca:b8:dc:17:49:4e:b5:55:36:88:93:17:
4b:92:1c:f4:95:73:a3:d3:c3:31:87:e9:26:cc:77:ab:35:43:
25:2e:86:77:fa:57:14:e0:43:24:74:13:c6:34:2e:f0:ee:59:
f6:8c:4e:fe:ed:bc:e7:a7:43:cb:29:0e:27:99:ff:39:17:c5:
37:19:ab:0c:ad:f0:17:bd:5d:68:7d:61:b8:01:f6:b8:5b:e9:
70:00:77:10:c3:e7:80:d8:fc:f6:9b:29:bd:81:d7:63:2b:a7:
ac:06:5e:0b:1c:a3:7f:38:a6:6a:d7:dd:1f:e8:c8:e4:fe:e6:
c2:48:31:15:a4:92:9d:10:81:6b:3a:20:5d:46:e6:33:87:6b:
ba:6d:83:63:71:10:92:d4:aa:ca:f4:f3:a5:29:e6:96:ba:0c:
50:80:af:69:8f:f9:13:3f:91:b3:57:15:79:4e:9a:eb:5e:4c:
66:1c:28:d1:69:9e:15:66:30:00:19:42:3f:c9:10:71:24:a3:
28:5e:11:bf:12:1f:69:a2:1e:b8:fd:38:6f:e6:3c:97:be:48:
fc:fe:b1:e2:6f:c8:0f:95:2f:b6:c6:f9:68:b3:38:22:8b:2c:
d9:5f:1f:4d:df:cd:b5:b1:c3:4f:7a:b8:27:93:79:99:d6:14:
1b:84:96:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 06:27:38 2026 by rpki-client