Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/aVQTuNDiPY3nD3y0L_bAHXPf-68.roa
File: aVQTuNDiPY3nD3y0L_bAHXPf-68.roa (raw, json)
Hash identifier: TITL6JYmV/5qhu7tF0yo0lAqcJ0IQDIvVOCyyxcKm68=
Subject key identifier: 69:54:13:B8:D0:E2:3D:8D:E7:0F:7C:B4:2F:F6:C0:1D:73:DF:FB:AF
Certificate issuer: /CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Certificate serial: 019C28D5422E0E0695F47A42EF3A59B25EE4
Authority key identifier: 67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/aVQTuNDiPY3nD3y0L_bAHXPf-68.roa
Signing time: Wed 04 Feb 2026 13:26:30 +0000
ROA not before: Wed 04 Feb 2026 13:26:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215467
IP address blocks: 2a14:67c3:2ab::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:28:d5:42:2e:0e:06:95:f4:7a:42:ef:3a:59:b2:5e:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Validity
Not Before: Feb 4 13:26:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=695413b8d0e23d8de70f7cb42ff6c01d73dffbaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d0:8f:c3:dd:5f:f0:60:b8:4f:b4:66:14:7d:
5a:aa:c1:35:e5:46:a0:7b:b4:65:98:aa:b2:47:58:
6a:d3:70:34:da:87:67:2d:ee:15:ac:92:f8:f3:99:
d6:92:bb:53:f3:00:ca:84:82:e3:29:48:71:d0:d3:
be:7a:ae:17:bd:d2:21:ec:f6:60:d9:58:37:61:8e:
3f:ad:7d:ca:db:d3:99:04:76:f0:29:52:9e:a6:cf:
92:5e:e6:c8:31:04:7d:d4:dd:2a:5d:a3:39:db:8f:
a7:5a:2e:f7:5d:04:66:23:21:61:0d:03:c8:b3:de:
8c:bf:21:d5:80:35:3a:07:8f:e4:b0:8e:ad:0f:9a:
49:b4:3d:52:05:f5:6a:b7:17:55:7d:92:23:ce:c7:
3f:cf:84:bd:36:e1:87:32:00:0c:4d:bc:45:95:3c:
af:21:d5:21:43:d9:92:26:65:1a:dc:72:35:96:f2:
0d:f7:22:a2:e6:2d:ee:85:1b:44:b8:bf:7b:7a:1b:
81:75:de:0a:1d:c9:7f:d4:dd:0a:a7:bb:40:2f:48:
81:5e:0a:d8:ab:2e:da:b6:ba:da:c9:37:da:4e:61:
ff:92:ed:32:6d:5c:3b:4f:93:0e:c1:06:31:7e:c5:
2c:ba:ff:e4:a0:2b:b2:f3:92:52:42:3c:2a:aa:74:
45:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:54:13:B8:D0:E2:3D:8D:E7:0F:7C:B4:2F:F6:C0:1D:73:DF:FB:AF
X509v3 Authority Key Identifier:
keyid:67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/aVQTuNDiPY3nD3y0L_bAHXPf-68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:67c3:2ab::/48
Signature Algorithm: sha256WithRSAEncryption
2f:f5:38:42:51:2e:19:54:97:43:9c:b2:b2:19:7d:57:9d:e8:
b7:73:66:5d:c2:a2:9c:7e:3e:9a:20:cd:99:e3:be:ab:e3:bf:
1e:04:bb:c8:e2:85:48:76:e5:99:63:11:58:14:ff:3a:63:2e:
52:4a:df:ab:08:ad:9c:e2:11:82:78:22:66:c5:e7:f4:3e:95:
7c:94:f6:11:c7:d1:44:79:67:f0:93:5a:b6:24:51:63:d6:7e:
86:cc:8f:52:73:f4:e5:87:a6:3d:3d:07:ac:f2:f2:ea:63:04:
f3:45:4c:df:73:ab:23:eb:8c:7a:37:b8:d0:53:34:58:b3:01:
98:73:05:be:d3:8a:ad:6e:6d:7d:7e:a1:cd:b8:a0:cd:e8:c8:
bc:c6:5a:3d:fc:91:23:9e:5c:78:e2:34:30:5b:c0:cb:a6:d9:
e5:42:d6:7f:27:53:84:88:3d:a8:6a:e6:6b:d8:bd:d1:ea:35:
54:df:09:08:5c:b8:57:75:af:38:52:74:e5:ab:59:84:8b:cb:
64:ac:ac:aa:63:f9:7d:11:cd:da:fd:23:3f:e4:24:29:3b:69:
7a:33:56:e6:06:08:5d:cd:3c:1a:72:e0:f1:b1:1e:99:6a:6f:
78:53:56:3d:eb:06:bb:e4:c9:22:09:0f:fe:b5:3b:6e:a5:19:
75:3b:56:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 14:42:59 2026 by rpki-client