Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/rCa2bIEuSNy0vriz74sKer-6j_k.roa
File: rCa2bIEuSNy0vriz74sKer-6j_k.roa (raw, json)
Hash identifier: 5tunsshZjP7jtSFBKTUctI53+E5fYVlMOPx1vm0wARw=
Subject key identifier: AC:26:B6:6C:81:2E:48:DC:B4:BE:B8:B3:EF:8B:0A:7A:BF:BA:8F:F9
Certificate issuer: /CN=32d44919fdd08afb9a4d0a8778923011251dd7f0
Certificate serial: 01A0AFD06C03F942C21691290C338D123178
Authority key identifier: 32:D4:49:19:FD:D0:8A:FB:9A:4D:0A:87:78:92:30:11:25:1D:D7:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MtRJGf3QivuaTQqHeJIwESUd1_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/rCa2bIEuSNy0vriz74sKer-6j_k.roa
Signing time: Thu 17 Sep 2026 14:41:07 +0000
ROA not before: Thu 17 Sep 2026 14:41:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6079
IP address blocks: 64.49.160.0/19 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/MtRJGf3QivuaTQqHeJIwESUd1_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/MtRJGf3QivuaTQqHeJIwESUd1_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/MtRJGf3QivuaTQqHeJIwESUd1_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:af:d0:6c:03:f9:42:c2:16:91:29:0c:33:8d:12:31:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32d44919fdd08afb9a4d0a8778923011251dd7f0
Validity
Not Before: Sep 17 14:41:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ac26b66c812e48dcb4beb8b3ef8b0a7abfba8ff9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:97:86:eb:60:94:7c:95:35:fc:1d:9c:f4:e2:
4c:49:b6:99:f3:a5:71:46:cc:35:47:2a:f3:24:44:
25:8d:3a:91:85:9c:d5:2c:98:bf:11:fb:bf:13:b6:
1b:0b:5a:4e:e1:c5:7a:58:fd:18:ae:c3:5f:9e:61:
32:08:dd:d0:fa:c9:b2:e7:0d:be:54:ec:27:9c:72:
e0:95:e8:c8:84:3c:8e:26:db:05:b5:44:db:1c:3a:
a4:17:0d:1b:05:a7:f7:81:4e:a5:36:cf:35:92:a8:
7f:11:02:78:6e:1b:99:03:09:e7:84:e8:be:bd:2b:
bd:a0:ee:e1:f7:0f:7c:b2:67:15:9f:6b:51:9d:2e:
87:2c:48:f9:fd:79:f7:94:4c:73:2b:f3:92:be:aa:
11:17:e7:55:51:52:25:5b:9c:15:28:6f:49:6d:02:
bb:fc:c2:fb:2b:0e:a0:d9:d7:1d:c0:0e:32:1e:c8:
78:bb:fc:02:31:cc:17:c0:1c:65:50:5a:e2:d0:8f:
d6:f9:e0:5e:9f:1e:b5:b7:50:ff:93:69:a7:af:ae:
c2:4b:53:a9:d5:ef:75:7a:a0:84:52:e7:98:24:30:
78:10:65:6c:61:d8:19:a3:16:b5:b3:49:45:11:06:
3a:55:bd:2c:e1:8e:c7:31:82:eb:c8:f6:3a:fc:5f:
5b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:26:B6:6C:81:2E:48:DC:B4:BE:B8:B3:EF:8B:0A:7A:BF:BA:8F:F9
X509v3 Authority Key Identifier:
keyid:32:D4:49:19:FD:D0:8A:FB:9A:4D:0A:87:78:92:30:11:25:1D:D7:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MtRJGf3QivuaTQqHeJIwESUd1_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/rCa2bIEuSNy0vriz74sKer-6j_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/MtRJGf3QivuaTQqHeJIwESUd1_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.49.160.0/19
Signature Algorithm: sha256WithRSAEncryption
52:35:c6:c8:57:ca:a7:2c:72:fa:0f:1e:b8:26:52:5e:15:79:
be:5b:84:5d:2e:e4:85:15:fc:c8:ba:b5:05:5f:85:2e:5a:ad:
fa:1d:65:0d:7f:8c:d9:5d:e1:a8:2f:da:ac:79:b5:fb:93:ab:
e8:d1:30:b4:34:15:ae:c3:96:d9:67:a5:7d:bc:56:c7:f0:57:
ee:ca:a4:d9:03:f8:18:70:8f:02:1e:3b:49:38:83:68:44:d9:
3e:9e:12:50:22:ca:84:1e:c8:30:c1:55:cb:a6:19:88:82:55:
9d:39:0d:c3:ae:9e:3a:8c:38:1b:41:5e:52:a5:c4:8d:00:78:
6f:19:9e:5b:44:66:38:5a:b0:a9:12:65:d2:dd:92:ad:ca:ae:
f2:86:c7:73:dd:c1:17:8b:30:d0:04:a1:64:d6:f7:46:67:78:
a9:3e:a4:0d:0d:47:36:03:cf:1e:6c:b4:3b:f5:17:9a:48:90:
96:17:cf:58:bc:9e:e2:a9:6a:01:e0:56:b8:ad:86:31:de:ca:
52:e6:d4:2f:1a:1f:4d:ba:fa:41:44:a9:22:ee:6b:29:37:83:
e3:6d:05:b3:f4:4f:50:4e:e4:92:3e:b4:ab:a9:37:ec:1f:a2:
7d:0c:cd:64:d8:ae:d9:44:d2:ea:a5:62:0a:91:86:16:e5:db:
b1:c0:b0:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:38:41 2026 by rpki-client