Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/0arauj90chlDy0ZjWf67AZgwUi4.roa
File: 0arauj90chlDy0ZjWf67AZgwUi4.roa (raw, json)
Hash identifier: QDxyKyPOmUSA53Z36Xh1N2yRfMERhvhP0YOY6uaH6Ac=
Subject key identifier: D1:AA:DA:BA:3F:74:72:19:43:CB:46:63:59:FE:BB:01:98:30:52:2E
Certificate issuer: /CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Certificate serial: 019C923D764D7814AA0CBAE38BFD8AF907DA
Authority key identifier: 67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/0arauj90chlDy0ZjWf67AZgwUi4.roa
Signing time: Wed 25 Feb 2026 00:40:27 +0000
ROA not before: Wed 25 Feb 2026 00:40:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215760
IP address blocks: 2a14:67c3:1b0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:92:3d:76:4d:78:14:aa:0c:ba:e3:8b:fd:8a:f9:07:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Validity
Not Before: Feb 25 00:40:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d1aadaba3f74721943cb466359febb019830522e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:26:25:3e:e4:f7:df:44:2b:29:68:be:fc:b9:
5a:1c:4a:60:ef:31:49:b7:62:10:69:66:93:9f:ad:
75:14:6f:9b:f4:cb:c4:1f:6a:d4:38:f3:0d:eb:d6:
90:9a:f6:ae:fc:f9:b5:ef:38:02:f4:fd:c5:47:82:
e8:43:9f:b6:ef:81:07:d4:81:ec:7b:14:c4:2f:05:
b6:e3:07:77:07:04:b9:1d:29:50:3a:35:d9:78:47:
3e:20:8f:c8:3b:c8:c8:ac:d5:30:07:7e:a1:76:b6:
59:74:02:6b:b5:23:e9:2b:94:8a:c9:dd:e7:d3:c2:
83:c1:45:48:c7:a2:a1:7c:23:91:6d:2f:0d:ab:b6:
96:4d:25:b9:2e:67:03:9c:7f:85:e2:80:d7:db:00:
67:cb:46:71:41:76:14:9f:b8:e5:84:b4:d6:6b:44:
64:42:f1:da:df:c7:21:5b:53:d7:db:43:07:b1:8d:
ef:95:3a:db:95:e4:60:1e:a3:24:2c:73:51:eb:fc:
42:60:f1:e0:90:59:99:f5:38:81:4d:b9:f9:a4:46:
ed:87:59:bc:a1:07:db:9f:c5:56:8b:99:5a:35:ea:
19:10:50:d2:c1:88:97:6a:03:4f:05:d4:ed:b2:dd:
92:4e:02:81:75:54:c6:d1:a4:41:af:91:b0:c1:f8:
4b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:AA:DA:BA:3F:74:72:19:43:CB:46:63:59:FE:BB:01:98:30:52:2E
X509v3 Authority Key Identifier:
keyid:67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/0arauj90chlDy0ZjWf67AZgwUi4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:67c3:1b0::/44
Signature Algorithm: sha256WithRSAEncryption
08:61:3a:78:83:ae:fa:3c:14:f3:1f:49:5b:ce:e0:52:71:e5:
46:55:ef:f7:b0:db:65:7c:75:b2:ee:d8:20:68:ab:a2:cf:77:
ee:20:da:17:8d:b0:06:07:72:29:2c:bf:f0:42:07:c8:d8:b9:
55:35:ca:2e:79:e2:1f:2b:67:38:88:9b:16:d5:0b:71:f2:c7:
7a:62:82:b8:8b:0a:72:9f:6a:7c:8c:67:16:0b:7e:43:38:56:
b4:28:4e:19:17:06:e2:da:cf:36:9a:72:d1:39:af:cc:21:46:
dc:97:62:48:41:8d:ad:ab:35:b3:62:97:da:9e:40:c3:3e:52:
7f:91:fc:b2:1e:09:64:23:7f:5f:c0:d1:bd:8d:f4:5b:05:ff:
fb:30:50:38:eb:26:21:cd:d7:29:8f:77:b1:e5:17:ca:66:c4:
10:86:e9:3c:fe:52:71:ed:7a:8d:59:4e:d3:e4:44:0d:37:c8:
20:aa:35:e0:d4:de:61:60:1d:5a:7a:61:10:0b:82:bb:92:59:
5a:af:1e:97:97:80:17:f9:b2:47:ac:2b:45:7f:23:16:8a:33:
59:17:18:ad:f2:41:c2:89:69:df:c5:46:e4:fc:c0:18:b8:7f:
dc:66:03:a0:72:6c:87:5f:ea:b3:25:d9:bc:3a:05:4f:94:22:
60:f4:f8:d0
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZySPXZNeBSqDLrji/2K+QfaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3ZjMxYmRlNDY1MTYzNDdmNGVkZmNiZTMwZWRhYzlhMDll
NGUwZTAwHhcNMjYwMjI1MDA0MDI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMWFhZGFiYTNmNzQ3MjE5NDNjYjQ2NjM1OWZlYmIwMTk4MzA1MjJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnyYlPuT330QrKWi+/LlaHEpg7zFJ
t2IQaWaTn611FG+b9MvEH2rUOPMN69aQmvau/Pm17zgC9P3FR4LoQ5+274EH1IHs
exTELwW24wd3BwS5HSlQOjXZeEc+II/IO8jIrNUwB36hdrZZdAJrtSPpK5SKyd3n
08KDwUVIx6KhfCORbS8Nq7aWTSW5LmcDnH+F4oDX2wBny0ZxQXYUn7jlhLTWa0Rk
QvHa38chW1PX20MHsY3vlTrbleRgHqMkLHNR6/xCYPHgkFmZ9TiBTbn5pEbth1m8
oQfbn8VWi5laNeoZEFDSwYiXagNPBdTtst2STgKBdVTG0aRBr5GwwfhLQQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFNGq2ro/dHIZQ8tGY1n+uwGYMFIuMB8GA1UdIwQY
MBaAFGfzG95GUWNH9O38vjDtrJoJ5ODgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWl9NYjNrWlJZMGYwN2Z5LU1PMnNtZ25rNE9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC83MzJiNmMtNDhlNC00MzUwLThhNTYt
ZjZjYzRlZjBmN2RmLzEvMGFyYXVqOTBjaGxEeTBaaldmNjdBWmd3VWk0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC83MzJiNmMtNDhlNC00MzUwLThhNTYtZjZjYzRlZjBmN2Rm
LzEvWl9NYjNrWlJZMGYwN2Z5LU1PMnNtZ25rNE9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhRnwwGw
MA0GCSqGSIb3DQEBCwUAA4IBAQAIYTp4g676PBTzH0lbzuBSceVGVe/3sNtlfHWy
7tggaKuiz3fuINoXjbAGB3IpLL/wQgfI2LlVNcoueeIfK2c4iJsW1Qtx8sd6YoK4
iwpyn2p8jGcWC35DOFa0KE4ZFwbi2s82mnLROa/MIUbcl2JIQY2tqzWzYpfankDD
PlJ/kfyyHglkI39fwNG9jfRbBf/7MFA46yYhzdcpj3ex5RfKZsQQhuk8/lJx7XqN
WU7T5EQNN8ggqjXg1N5hYB1aemEQC4K7kllarx6Xl4AX+bJHrCtFfyMWijNZFxit
8kHCiWnfxUbk/MAYuH/cZgOgcmyHX+qzJdm8OgVPlCJg9PjQ
-----END CERTIFICATE-----
Generated at Sun Mar 1 16:25:06 2026 by rpki-client