Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/85ee8d-1d25-453a-bbbd-c8e15540c806/1/ia14Tnc-_EagLBaYG89muNNODFc.roa
File: ia14Tnc-_EagLBaYG89muNNODFc.roa (raw, json)
Hash identifier: TkKKwndRj9fKI51PKJUky4rdGBCgaRMhiWosKrEchf4=
Subject key identifier: 89:AD:78:4E:77:3E:FC:46:A0:2C:16:98:1B:CF:66:B8:D3:4E:0C:57
Certificate issuer: /CN=54137c32249107f26b1741451cf10039380b8bc3
Certificate serial: 01A0B15BEE79F1A2CD83877C1F1E71478144
Authority key identifier: 54:13:7C:32:24:91:07:F2:6B:17:41:45:1C:F1:00:39:38:0B:8B:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VBN8MiSRB_JrF0FFHPEAOTgLi8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/85ee8d-1d25-453a-bbbd-c8e15540c806/1/ia14Tnc-_EagLBaYG89muNNODFc.roa
Signing time: Thu 17 Sep 2026 21:53:07 +0000
ROA not before: Thu 17 Sep 2026 21:53:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 2a14:eb80::/29 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/85ee8d-1d25-453a-bbbd-c8e15540c806/1/VBN8MiSRB_JrF0FFHPEAOTgLi8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/85ee8d-1d25-453a-bbbd-c8e15540c806/1/VBN8MiSRB_JrF0FFHPEAOTgLi8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/VBN8MiSRB_JrF0FFHPEAOTgLi8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 04:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b1:5b:ee:79:f1:a2:cd:83:87:7c:1f:1e:71:47:81:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54137c32249107f26b1741451cf10039380b8bc3
Validity
Not Before: Sep 17 21:53:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=89ad784e773efc46a02c16981bcf66b8d34e0c57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:3c:fe:0d:32:96:ab:2d:1c:95:8f:02:6f:fa:
2e:bf:87:f4:b9:e2:cb:73:d7:91:27:da:5c:11:b4:
13:56:ff:da:a8:e4:4a:40:11:82:bb:9d:23:4b:d7:
e0:e8:af:eb:ae:6f:d5:92:0b:98:52:9c:2c:da:1b:
77:61:4c:cf:55:43:c8:6b:b3:b3:b7:94:ec:16:70:
20:c8:6b:94:6f:84:76:98:6a:b2:eb:ce:c7:cd:37:
24:92:93:a7:8b:09:ba:ef:61:c6:c3:d3:10:63:1f:
83:94:aa:95:e0:f7:51:02:31:aa:9c:50:83:ba:8f:
9f:e2:9b:a9:aa:00:d0:30:c0:6b:43:fe:8f:b7:d4:
43:21:dd:ee:ea:66:8c:1b:27:5a:b7:39:af:6a:00:
ab:34:ba:3b:f3:45:93:24:9c:a1:de:9e:17:e1:f2:
aa:6b:18:20:9b:5d:d1:17:6f:79:eb:1f:1c:c4:7f:
83:bc:e5:e3:15:fc:4e:96:bb:69:31:8f:36:e6:f5:
6e:7e:be:cf:18:34:10:31:f7:e2:c8:66:85:ee:89:
99:5e:28:25:85:85:84:3c:05:2b:4a:fa:9a:ad:ef:
dc:c1:4b:ed:0d:2e:b7:27:83:5b:98:06:15:a2:66:
ff:ba:48:56:df:bd:4d:36:ea:e6:28:dc:e5:d6:53:
d7:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:AD:78:4E:77:3E:FC:46:A0:2C:16:98:1B:CF:66:B8:D3:4E:0C:57
X509v3 Authority Key Identifier:
keyid:54:13:7C:32:24:91:07:F2:6B:17:41:45:1C:F1:00:39:38:0B:8B:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VBN8MiSRB_JrF0FFHPEAOTgLi8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/85ee8d-1d25-453a-bbbd-c8e15540c806/1/ia14Tnc-_EagLBaYG89muNNODFc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/85ee8d-1d25-453a-bbbd-c8e15540c806/1/VBN8MiSRB_JrF0FFHPEAOTgLi8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:eb80::/29
Signature Algorithm: sha256WithRSAEncryption
9e:fb:a6:e2:a4:1a:6e:d0:d1:96:75:2a:b5:c2:be:fe:f2:a3:
93:f2:04:8a:40:66:e9:1b:4e:ef:eb:02:43:77:88:8d:f4:3a:
db:2f:fa:43:b9:7c:d1:5a:48:ea:34:b9:96:23:03:68:ea:b9:
04:8a:e0:18:bd:8d:5a:3b:c3:3e:a0:5f:cf:c8:a9:cd:b4:9f:
0a:80:65:48:ea:42:0a:66:d0:89:53:f8:96:49:88:45:13:a4:
dd:15:3c:88:30:71:6a:3f:3d:2a:04:2c:2b:6e:1b:ff:f8:30:
f8:e2:db:fb:f7:ee:f1:b5:21:03:82:97:22:84:c1:7a:55:08:
a2:6e:4d:7d:09:24:fa:10:76:35:c7:17:4c:e4:05:80:52:59:
31:37:37:03:39:15:de:0e:cd:7e:d9:09:3f:c9:a7:7b:2f:2f:
59:f1:f6:66:f9:a5:f4:ef:91:0e:94:a0:e5:21:45:f4:ea:df:
86:55:43:dc:38:21:69:f6:fa:07:16:0e:68:90:5b:f2:30:cb:
54:ce:26:79:4e:cf:0d:ef:94:50:28:d6:88:79:18:16:fb:6b:
ac:bb:48:50:75:c4:e2:61:3b:c2:29:68:85:31:7e:85:9d:2e:
24:88:f8:f2:6f:22:98:2f:9d:b1:a7:7c:e0:b5:09:ff:4f:29:
ef:3b:27:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:29:19 2026 by rpki-client