Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/XRiJafIXW_9YGkyhDqyiW264qAQ.roa
File: XRiJafIXW_9YGkyhDqyiW264qAQ.roa (raw, json)
Hash identifier: SIPRKBPHVx+kS4WDky65It5WwMsWyscKE4Ur9EYDaUU=
Subject key identifier: 5D:18:89:69:F2:17:5B:FF:58:1A:4C:A1:0E:AC:A2:5B:6E:B8:A8:04
Certificate issuer: /CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Certificate serial: 019C5E077679C77D887C8DA16C30066445FB
Authority key identifier: 67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/XRiJafIXW_9YGkyhDqyiW264qAQ.roa
Signing time: Sat 14 Feb 2026 21:21:13 +0000
ROA not before: Sat 14 Feb 2026 21:21:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201705
IP address blocks: 2a14:67c3:1686::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 12:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:5e:07:76:79:c7:7d:88:7c:8d:a1:6c:30:06:64:45:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Validity
Not Before: Feb 14 21:21:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5d188969f2175bff581a4ca10eaca25b6eb8a804
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ab:4b:16:19:be:c4:af:77:cd:68:6d:98:06:
6b:a3:3d:aa:9a:07:f3:db:b2:c7:b5:1a:40:60:47:
21:ab:c3:6f:b3:f5:b7:0f:63:71:d3:a5:29:ff:22:
cb:88:31:b2:70:96:27:a9:2f:63:1d:af:97:ec:bd:
2f:c5:54:f4:71:56:b4:e1:12:11:02:f9:43:73:ec:
67:61:8d:8e:79:3e:94:8b:d5:ff:7c:30:ae:26:50:
4a:a3:27:d2:cc:ad:e1:c7:b4:1a:4f:89:e2:c4:87:
eb:77:45:d1:5c:12:13:05:14:e8:c7:97:e5:9c:a9:
53:b9:6c:a3:73:9b:47:f7:57:f2:f5:a5:68:81:40:
f3:00:38:fe:ef:ee:db:70:9c:2c:c5:55:fc:b8:73:
77:71:53:f4:34:2a:93:fc:c9:2b:e0:23:85:57:5b:
32:94:3b:79:23:98:54:4e:dd:2d:c3:2f:d5:9a:ce:
70:3b:cb:ea:c1:45:da:f3:78:fe:cc:bd:26:05:06:
ec:4b:71:0e:5b:d3:c6:20:bb:56:6f:0c:bc:40:55:
78:85:5a:09:59:ce:ec:12:8d:80:12:70:7e:ae:da:
41:41:ab:84:08:a6:bc:90:1f:fa:24:23:bf:9d:88:
88:52:ee:37:2d:78:3f:bc:90:4c:07:d4:f1:a4:16:
e9:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:18:89:69:F2:17:5B:FF:58:1A:4C:A1:0E:AC:A2:5B:6E:B8:A8:04
X509v3 Authority Key Identifier:
keyid:67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/XRiJafIXW_9YGkyhDqyiW264qAQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:67c3:1686::/48
Signature Algorithm: sha256WithRSAEncryption
3a:a7:a5:f1:5f:ce:e3:74:34:ab:cd:8c:0d:e4:a3:24:95:06:
87:f3:e6:6d:d4:e0:55:2d:41:16:8a:56:24:43:40:1e:7e:5c:
3d:cd:28:a4:f2:b7:d7:ae:a8:38:77:bd:fb:94:4d:f1:52:10:
73:af:4d:15:65:0e:e3:52:4a:e3:5a:2f:e0:eb:0f:a7:29:76:
0e:6b:6f:71:ae:bc:05:ae:7e:59:60:0b:ec:0f:64:0f:f7:a8:
6a:d3:df:6a:dc:67:82:70:38:7e:3a:07:f3:51:1b:4b:5a:b5:
7a:bf:91:aa:19:a0:d6:ac:10:ae:05:8d:ba:c0:f3:76:3e:a2:
1c:d9:24:4a:70:c8:c8:0b:bc:76:82:31:da:6d:eb:42:d7:94:
31:9b:e9:54:5c:e7:f9:d2:94:69:51:d1:f8:95:0f:a0:be:3c:
7f:f7:63:c6:72:ce:6e:2b:b6:07:54:93:25:1a:c6:b3:61:3f:
50:82:c8:67:66:f8:56:fd:c5:7f:26:d5:4d:fc:11:a4:d7:93:
f1:b7:1c:8e:6b:a4:30:2d:d3:1b:72:fc:fb:a7:ed:1a:61:f0:
a6:9b:e7:60:d7:85:6b:af:75:e8:e6:21:80:67:f3:4c:66:c0:
82:ad:b6:26:9c:36:f5:25:ed:8b:e1:95:87:9e:23:90:f8:d5:
46:81:97:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:59:16 2026 by rpki-client