Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/Kf4qHHnXF3ECGM14NVf54LCzLo8.roa
File: Kf4qHHnXF3ECGM14NVf54LCzLo8.roa (raw, json)
Hash identifier: X2BTjKYEpr9fk4VVVgJU9hYafSBZYYTPowWkAzkr8Dc=
Subject key identifier: 29:FE:2A:1C:79:D7:17:71:02:18:CD:78:35:57:F9:E0:B0:B3:2E:8F
Certificate issuer: /CN=d716209d7def98a2bb34977f65009b3520da256e
Certificate serial: 01A13BBAB1D8249D9D8A9A5A3A934B659AEF
Authority key identifier: D7:16:20:9D:7D:EF:98:A2:BB:34:97:7F:65:00:9B:35:20:DA:25:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/Kf4qHHnXF3ECGM14NVf54LCzLo8.roa
Signing time: Wed 14 Oct 2026 18:44:13 +0000
ROA not before: Wed 14 Oct 2026 18:44:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197210
IP address blocks: 2a14:1bc0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3b:ba:b1:d8:24:9d:9d:8a:9a:5a:3a:93:4b:65:9a:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d716209d7def98a2bb34977f65009b3520da256e
Validity
Not Before: Oct 14 18:44:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=29fe2a1c79d717710218cd783557f9e0b0b32e8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:83:05:44:fd:09:b9:96:93:14:08:8d:3b:55:
75:93:c3:3f:61:64:68:58:77:29:e4:89:b1:23:f5:
6f:12:f4:2e:aa:c3:d9:99:fc:29:5e:33:13:ba:4b:
ad:9e:83:29:02:b4:dd:35:13:d4:fd:8c:ff:f1:7e:
45:31:4b:32:bc:9e:14:d1:7f:54:50:64:e1:2e:ea:
fc:39:e9:89:32:54:df:78:58:d5:4b:d4:ff:16:9d:
77:ff:18:11:57:7f:19:8c:34:ff:1c:7c:70:66:2b:
fb:a0:06:19:94:2d:aa:fe:77:c4:95:d2:64:40:01:
f2:b3:37:cb:ce:c3:41:70:47:34:b4:6b:0e:f3:3d:
de:47:9e:2c:f4:ed:f5:92:2c:1c:70:c5:a9:05:66:
71:8a:97:8b:38:99:c9:5f:cd:2c:8c:61:05:4e:9a:
73:8c:48:69:94:c3:5a:c7:7a:f3:bd:de:4b:22:91:
ab:52:e6:eb:c6:92:7e:dd:ae:e7:59:d2:5a:fd:22:
5a:ef:2e:65:df:08:33:02:30:73:f4:77:18:cc:64:
9b:82:4c:a8:cd:98:e8:e4:b0:50:b7:ea:0c:82:bb:
69:20:aa:e2:bc:f0:a1:6a:d8:f4:3a:51:e0:ae:8e:
e0:d6:a3:bf:79:61:f9:83:00:88:cc:b0:f5:fb:91:
0a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:FE:2A:1C:79:D7:17:71:02:18:CD:78:35:57:F9:E0:B0:B3:2E:8F
X509v3 Authority Key Identifier:
keyid:D7:16:20:9D:7D:EF:98:A2:BB:34:97:7F:65:00:9B:35:20:DA:25:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/Kf4qHHnXF3ECGM14NVf54LCzLo8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:1bc0::/29
Signature Algorithm: sha256WithRSAEncryption
2f:db:f2:a7:6a:47:f0:62:f9:35:38:06:cc:2c:a9:a3:b1:22:
ff:38:47:f7:45:fa:11:aa:95:60:19:c1:f2:e2:3a:2a:ed:2b:
e8:9a:29:80:90:c5:81:4c:cb:86:c2:a2:6b:15:d5:83:1f:7c:
1f:fc:d4:c9:b3:f7:11:03:fa:ab:3e:8f:be:ab:a4:e0:3d:f1:
da:22:77:ff:89:de:d5:9f:69:26:ea:46:05:60:88:96:ac:90:
7a:3d:a1:67:66:3d:c8:67:1a:20:ae:a9:8e:e3:0d:0b:78:b6:
98:24:08:ae:aa:69:bf:23:ac:79:0d:ff:55:39:63:f4:0f:d3:
a6:1a:5d:e8:ec:3a:6b:ae:47:d3:f1:b1:6e:c7:92:84:0a:69:
c7:d6:3c:14:61:fa:b1:54:27:b0:00:c2:c6:87:69:e4:32:c9:
71:ff:db:01:6f:fa:df:5e:17:86:a5:4c:fc:fe:fd:04:86:e4:
9c:65:16:27:83:e2:5d:68:f4:e0:33:e4:bb:93:32:b9:fe:51:
d0:ba:59:91:a4:68:00:e7:51:ad:c3:39:a1:69:d5:67:52:de:
d4:18:a6:1c:d7:7c:03:22:44:3b:76:c8:b0:ad:50:ef:d5:f2:
74:42:26:4e:ea:a7:cc:b0:30:03:1d:63:08:dc:9c:a5:d4:09:
bb:cf:66:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 20:54:52 2026 by rpki-client