Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/9732bb-f590-4194-85be-d069f17602b6/1/Cu6zKRX77JTw3uyJIN5U1ujwltY.roa
File: Cu6zKRX77JTw3uyJIN5U1ujwltY.roa (raw, json)
Hash identifier: 0+06TsWxzUbX17+oEeaBSY2kCuUQ4plb549cuYEmXoo=
Subject key identifier: 0A:EE:B3:29:15:FB:EC:94:F0:DE:EC:89:20:DE:54:D6:E8:F0:96:D6
Certificate issuer: /CN=e099ee07822ef2ace9c356f7b42caeaff25c9692
Certificate serial: 01A0F3C17FF826C6DF6B778995B1EB6AF802
Authority key identifier: E0:99:EE:07:82:2E:F2:AC:E9:C3:56:F7:B4:2C:AE:AF:F2:5C:96:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4JnuB4Iu8qzpw1b3tCyur_JclpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/9732bb-f590-4194-85be-d069f17602b6/1/Cu6zKRX77JTw3uyJIN5U1ujwltY.roa
Signing time: Wed 30 Sep 2026 19:18:59 +0000
ROA not before: Wed 30 Sep 2026 19:18:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199681
IP address blocks: 2a14:6980:30::/44 maxlen: 44
2a14:6980:30::/48 maxlen: 48
2a14:6980:31::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/9732bb-f590-4194-85be-d069f17602b6/1/4JnuB4Iu8qzpw1b3tCyur_JclpI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/9732bb-f590-4194-85be-d069f17602b6/1/4JnuB4Iu8qzpw1b3tCyur_JclpI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4JnuB4Iu8qzpw1b3tCyur_JclpI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 Oct 2026 16:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f3:c1:7f:f8:26:c6:df:6b:77:89:95:b1:eb:6a:f8:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e099ee07822ef2ace9c356f7b42caeaff25c9692
Validity
Not Before: Sep 30 19:18:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0aeeb32915fbec94f0deec8920de54d6e8f096d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0b:2a:dc:50:37:0f:aa:f5:80:58:ac:f7:e6:
82:8c:76:2c:b0:18:9d:98:46:63:67:e2:e8:1a:61:
30:47:6c:19:a7:cb:7c:c9:e4:75:ac:b1:4d:c2:15:
50:07:e7:90:c2:5d:cc:8e:4b:7a:34:4a:a1:40:17:
76:e2:ef:3e:cd:b6:cb:51:8f:ee:86:0c:fb:95:f4:
18:c1:b2:10:0e:b5:10:7e:28:ab:06:33:4e:e5:42:
41:90:3b:ab:be:a8:fc:89:8c:d7:83:12:44:78:05:
36:fa:ec:52:8e:7b:37:4a:32:c7:43:a5:e8:f0:a2:
11:56:25:8b:a5:46:2f:20:f1:4c:98:69:cb:25:4e:
e4:a3:a5:46:8b:9e:a1:3a:18:97:43:3b:0e:37:24:
eb:e3:df:d7:1f:0c:39:16:4b:58:a0:54:51:76:59:
b9:a1:fa:d8:2e:c1:85:0a:d5:ce:9b:85:08:57:fb:
71:69:e8:5e:56:bd:90:fe:6a:e4:f1:e5:12:7c:5a:
8c:5c:72:3f:7c:52:ca:11:2a:f5:41:9a:d5:5d:4d:
0e:a6:03:25:45:6d:18:8f:3e:fd:c9:ce:2a:0d:22:
72:f3:63:45:72:5b:71:b5:75:1a:1d:3e:31:8a:96:
8c:c1:57:03:67:bc:c6:f9:6e:99:78:b4:1b:d9:a9:
81:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:EE:B3:29:15:FB:EC:94:F0:DE:EC:89:20:DE:54:D6:E8:F0:96:D6
X509v3 Authority Key Identifier:
keyid:E0:99:EE:07:82:2E:F2:AC:E9:C3:56:F7:B4:2C:AE:AF:F2:5C:96:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4JnuB4Iu8qzpw1b3tCyur_JclpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/9732bb-f590-4194-85be-d069f17602b6/1/Cu6zKRX77JTw3uyJIN5U1ujwltY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/9732bb-f590-4194-85be-d069f17602b6/1/4JnuB4Iu8qzpw1b3tCyur_JclpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:6980:30::/44
Signature Algorithm: sha256WithRSAEncryption
42:23:af:2b:2c:9b:db:83:4e:e1:4f:37:0a:79:b6:b3:1f:50:
43:fe:23:58:15:15:dd:e6:46:a0:04:fa:20:cf:83:ef:65:14:
8a:2a:69:f4:29:9d:ab:b2:64:54:fe:35:9e:3a:b7:3f:72:c7:
62:2f:44:d8:37:a9:df:55:b5:56:a1:a6:f3:93:9c:58:55:80:
6c:c3:b2:6f:c7:bf:ab:c0:d4:0b:e2:73:17:7d:40:8d:89:26:
ce:d9:77:c7:f4:c3:32:2b:6c:fd:8a:ca:5b:c7:a5:04:a6:0b:
b2:82:fb:ac:97:64:60:b5:cb:42:d6:b7:e7:d2:31:1b:3b:10:
10:59:6f:a3:d1:ac:d1:d0:33:06:ff:fe:41:bb:42:da:b5:9f:
a6:d3:e9:5e:f8:db:23:3d:2b:46:7f:bd:9f:9a:0d:49:a1:be:
d5:ce:b0:2a:de:01:2a:c4:3a:b1:fb:83:05:0b:3c:f7:59:e1:
40:06:cf:f4:f6:74:17:e7:a7:7a:26:cb:ce:e9:3e:84:da:74:
8e:01:8f:45:c5:1c:c2:3d:aa:77:b9:cd:a6:54:1b:fc:ff:85:
63:f8:56:e3:8d:6f:b2:01:5f:ac:30:34:3b:15:75:a5:bc:aa:
27:f3:f8:5c:47:81:f9:3d:a7:d9:25:c8:37:f8:1e:1a:99:38:
4a:11:0f:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 08:27:25 2026 by rpki-client