Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/svWEszFv5dKf78AClJHrb93VnWo.roa
File: svWEszFv5dKf78AClJHrb93VnWo.roa (raw, json)
Hash identifier: NyVIZ3KZ6tzahPGlj4zQMFq4gM1r8/ntjUDyYyEPHeY=
Subject key identifier: B2:F5:84:B3:31:6F:E5:D2:9F:EF:C0:02:94:91:EB:6F:DD:D5:9D:6A
Certificate issuer: /CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Certificate serial: 019C1EE418FB58DAB310B9C5B575913D35EE
Authority key identifier: 67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/svWEszFv5dKf78AClJHrb93VnWo.roa
Signing time: Mon 02 Feb 2026 15:06:30 +0000
ROA not before: Mon 02 Feb 2026 15:06:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201765
IP address blocks: 2a14:67c2:4400::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 12:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:1e:e4:18:fb:58:da:b3:10:b9:c5:b5:75:91:3d:35:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Validity
Not Before: Feb 2 15:06:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b2f584b3316fe5d29fefc0029491eb6fddd59d6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:0d:15:df:00:20:73:ce:b0:f4:e7:1f:4f:6a:
46:6a:e1:23:41:8e:ba:d7:48:6d:7f:7e:89:7e:5f:
be:7e:c9:01:0b:fc:52:87:26:62:0e:7a:7f:4f:8e:
1b:06:56:85:60:f8:ed:e7:78:07:2f:46:29:6b:33:
19:ad:da:c6:b4:01:25:85:e8:81:80:db:89:45:33:
37:e5:45:df:27:f7:b8:01:71:23:17:94:32:9f:db:
6c:a8:6a:25:29:26:8b:e6:4e:e6:b8:e4:d1:7d:5a:
26:33:c3:66:77:73:e3:5b:12:ff:14:d5:45:50:43:
15:97:ee:c2:a5:8a:7b:d6:b3:23:8b:74:0a:e3:79:
e7:6e:ca:dc:46:e5:5b:70:c7:3c:35:77:00:6d:98:
af:41:73:64:3a:b4:89:92:f3:1d:67:d9:83:fd:c6:
10:10:da:f4:c1:85:f0:c1:29:68:78:8b:eb:d7:8d:
fd:16:72:74:72:6a:52:4a:05:15:7c:ce:90:c9:8d:
33:15:ba:c5:f1:0a:d9:00:7a:fb:f9:dc:a2:0e:fb:
f0:c7:90:78:d1:06:f0:c4:d9:3e:33:4f:0c:f3:bf:
e3:e0:a4:4f:fe:b4:3c:d1:a4:cc:9a:30:4a:3d:f3:
62:08:f2:68:e0:25:28:15:22:81:a8:5d:10:15:59:
37:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:F5:84:B3:31:6F:E5:D2:9F:EF:C0:02:94:91:EB:6F:DD:D5:9D:6A
X509v3 Authority Key Identifier:
keyid:67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/svWEszFv5dKf78AClJHrb93VnWo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:67c2:4400::/40
Signature Algorithm: sha256WithRSAEncryption
97:3d:ba:ea:da:46:46:cd:ad:fd:bb:14:da:17:7c:f1:87:ee:
a1:cd:57:17:bb:d9:5d:d8:d1:ae:38:1f:97:9b:83:d1:4a:36:
aa:bf:1a:32:18:3c:d5:dc:9a:1d:c1:f6:05:1d:d3:79:1a:1d:
1e:1d:21:24:97:b5:ea:9e:2a:36:e1:19:b6:44:e1:2b:09:40:
67:5a:cb:01:c5:25:a1:12:a6:a3:c4:4e:f5:d2:ee:78:33:d0:
21:07:1b:5e:89:2f:ac:83:36:77:52:3a:79:37:df:1d:ec:19:
aa:d6:05:7e:fa:22:d7:d6:d1:d2:37:86:a4:ee:6a:e9:41:0c:
1a:ca:61:44:26:52:19:21:f0:ee:01:a5:b6:b4:56:74:3e:9f:
eb:a4:ff:ea:24:4e:95:e9:9e:02:4b:e5:04:9e:41:83:bf:b8:
1e:17:8b:62:ec:65:c4:ec:98:24:7e:9a:6e:d6:28:a3:63:3a:
a0:91:b0:c4:b8:af:a2:df:d7:ea:8f:ae:fb:43:7e:ae:6e:14:
c3:01:85:e8:ea:22:68:37:cd:57:82:41:76:b7:2a:c2:2f:c0:
d1:8e:98:ce:8d:79:5a:44:9f:12:07:c7:57:fc:8f:0b:a3:e4:
74:17:82:33:63:e5:9d:3b:cd:ea:d1:23:ff:3a:39:7b:e7:24:
91:89:c8:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:53:25 2026 by rpki-client