Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/aw-QGRNuD6Yql2R3CP4wTG81dfg.roa
File: aw-QGRNuD6Yql2R3CP4wTG81dfg.roa (raw, json)
Hash identifier: hdhIBbfcRuvHgo5OSRZviu8L0toDawzaEXg7g3WBJEs=
Subject key identifier: 6B:0F:90:19:13:6E:0F:A6:2A:97:64:77:08:FE:30:4C:6F:35:75:F8
Certificate issuer: /CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Certificate serial: 019C9DCE46790512BEE0E01FDB7FD8ACB963
Authority key identifier: 67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/aw-QGRNuD6Yql2R3CP4wTG81dfg.roa
Signing time: Fri 27 Feb 2026 06:34:27 +0000
ROA not before: Fri 27 Feb 2026 06:34:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200625
IP address blocks: 2a14:67c3:670::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:9d:ce:46:79:05:12:be:e0:e0:1f:db:7f:d8:ac:b9:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Validity
Not Before: Feb 27 06:34:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6b0f9019136e0fa62a97647708fe304c6f3575f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:57:41:9a:42:24:f9:a5:c5:d2:92:7a:f6:7d:
eb:b0:82:a5:a7:8b:46:e7:e0:8f:94:34:b5:85:59:
b5:7a:46:d6:36:c5:80:ee:83:e8:4c:f9:b2:ae:81:
53:e4:1f:67:10:84:b5:a1:3e:ec:b1:01:cc:12:f2:
9f:8c:1c:67:f6:9c:c5:75:50:8d:17:d4:28:ae:a5:
b0:d2:4d:4d:95:d5:d4:cc:1b:09:02:00:fa:76:20:
c4:6b:ed:ee:8c:c3:5f:b6:1f:41:14:7b:91:72:aa:
54:45:8d:27:ac:96:4d:68:ea:9a:16:b1:24:3e:2e:
b3:08:a8:8d:f7:17:29:ef:e9:58:35:8e:26:c3:87:
c8:4c:d0:70:12:9f:50:52:a1:63:14:5b:65:27:20:
3e:12:96:9d:89:22:de:e0:25:2c:3d:33:1c:86:96:
c9:06:72:7e:fd:3c:c3:29:2f:ab:dd:40:b6:df:fa:
9c:74:e2:73:14:92:5f:5a:66:30:de:36:19:d2:74:
56:58:84:10:95:da:8c:85:57:10:cc:27:7e:9f:04:
33:00:ea:0c:ad:0e:c3:e5:17:aa:d1:7c:82:8d:77:
7d:a0:30:d8:ac:0d:91:f1:ae:10:2e:e4:d7:88:7d:
7f:18:c6:e9:8a:04:65:00:5e:88:be:8c:21:c2:87:
21:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:0F:90:19:13:6E:0F:A6:2A:97:64:77:08:FE:30:4C:6F:35:75:F8
X509v3 Authority Key Identifier:
keyid:67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/aw-QGRNuD6Yql2R3CP4wTG81dfg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:67c3:670::/44
Signature Algorithm: sha256WithRSAEncryption
38:29:04:86:70:1a:f1:8b:71:2f:34:35:00:ad:de:96:a0:ff:
b9:a8:ea:d5:f5:17:5f:0d:64:7d:20:d1:0d:55:9d:22:86:fb:
e5:bd:45:94:92:92:6d:e6:1a:c3:9f:ef:ed:f8:c9:43:50:71:
fb:e7:f1:42:f4:1f:bf:b6:9c:a6:cf:81:df:94:62:a3:de:29:
a9:fd:a5:07:88:ea:02:85:c3:2b:46:e6:e0:9a:cd:ce:68:12:
94:75:90:1e:57:7d:2e:96:58:90:8e:f0:86:f6:93:cd:4d:d2:
25:2c:47:fe:a6:55:98:92:ee:a2:ef:b8:93:e6:ec:33:e5:1b:
8a:d4:21:c8:ae:8f:24:94:0b:9d:a2:89:16:eb:f8:cc:6b:97:
c1:c6:f7:b0:47:d7:56:c7:7f:d6:29:26:07:6a:75:9c:58:0c:
41:28:00:f5:c1:2d:c0:df:66:cb:d5:c9:19:b7:22:cf:32:af:
47:f1:d0:0d:7b:fb:d7:26:c7:c7:1d:ef:ae:20:89:c7:06:88:
24:b6:3b:cc:7a:60:5f:e0:d2:51:a4:e3:19:ea:51:29:68:8d:
ca:06:5b:e2:b9:eb:8d:ab:c3:83:9c:d9:e8:9a:af:29:a7:6c:
43:90:bf:cb:88:28:c9:c9:ad:6d:f5:17:a8:3b:21:dd:b5:3e:
92:aa:be:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:19:44 2026 by rpki-client