Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/7fe015-5cd5-4429-8b7d-22d027197712/1/RM0_cI_um1xR1TbWk1sioYqilNw.roa
File: RM0_cI_um1xR1TbWk1sioYqilNw.roa (raw, json)
Hash identifier: GAj7EIOxgZjQHWck/MITcG0LCQZAIsUGkjfoVKaDnCI=
Subject key identifier: 44:CD:3F:70:8F:EE:9B:5C:51:D5:36:D6:93:5B:22:A1:8A:A2:94:DC
Certificate issuer: /CN=26c672da72a34cc282adc40f282676de75117654
Certificate serial: 019E7658BAD89CE38BBAA71ED72CC669BD74
Authority key identifier: 26:C6:72:DA:72:A3:4C:C2:82:AD:C4:0F:28:26:76:DE:75:11:76:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JsZy2nKjTMKCrcQPKCZ23nURdlQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/7fe015-5cd5-4429-8b7d-22d027197712/1/RM0_cI_um1xR1TbWk1sioYqilNw.roa
Signing time: Sat 30 May 2026 00:46:26 +0000
ROA not before: Sat 30 May 2026 00:46:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396982
IP address blocks: 2a14:f180::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/7fe015-5cd5-4429-8b7d-22d027197712/1/JsZy2nKjTMKCrcQPKCZ23nURdlQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/7fe015-5cd5-4429-8b7d-22d027197712/1/JsZy2nKjTMKCrcQPKCZ23nURdlQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JsZy2nKjTMKCrcQPKCZ23nURdlQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 15:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:76:58:ba:d8:9c:e3:8b:ba:a7:1e:d7:2c:c6:69:bd:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26c672da72a34cc282adc40f282676de75117654
Validity
Not Before: May 30 00:46:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=44cd3f708fee9b5c51d536d6935b22a18aa294dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8c:ec:76:39:e8:2e:82:0c:de:0b:a8:79:c9:
64:85:26:c2:d1:81:59:aa:7b:99:2f:3f:96:aa:f0:
04:34:ee:aa:76:61:a9:52:d5:ee:f6:1c:b4:40:1a:
29:65:c9:6d:42:51:95:b3:d3:14:c6:d7:d7:78:0c:
3d:ff:c0:a1:3e:05:07:81:71:23:c1:11:42:7c:55:
f2:0a:c7:29:85:c5:17:14:3d:c9:d3:98:b8:7f:73:
95:62:ec:c7:40:67:e8:ce:3b:d6:bc:99:ab:a8:ed:
85:18:d4:e6:0e:1b:2d:98:6a:4c:15:2a:ca:69:3d:
49:40:00:bf:55:38:68:c3:b6:a3:75:8d:a1:19:01:
b3:f1:99:d2:4c:77:d5:4b:26:4a:9e:8c:8d:41:01:
a2:e9:d1:b8:fd:41:fe:23:08:45:d3:c9:8f:eb:dc:
52:d0:7c:0a:3f:d9:4d:6a:e6:77:ae:2d:1c:25:12:
51:90:06:93:8b:85:e6:d7:9b:9e:33:bd:25:62:bb:
35:82:73:b0:6c:bb:52:49:91:50:c8:de:92:1e:c0:
10:63:f0:80:b7:dd:d3:fe:7b:b1:6f:46:20:d4:48:
b3:4b:ca:d1:52:ee:45:73:0b:c9:24:0d:86:71:d9:
4f:32:9a:0e:77:96:b2:ec:00:99:91:ae:60:91:7b:
c6:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:CD:3F:70:8F:EE:9B:5C:51:D5:36:D6:93:5B:22:A1:8A:A2:94:DC
X509v3 Authority Key Identifier:
keyid:26:C6:72:DA:72:A3:4C:C2:82:AD:C4:0F:28:26:76:DE:75:11:76:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JsZy2nKjTMKCrcQPKCZ23nURdlQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7fe015-5cd5-4429-8b7d-22d027197712/1/RM0_cI_um1xR1TbWk1sioYqilNw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7fe015-5cd5-4429-8b7d-22d027197712/1/JsZy2nKjTMKCrcQPKCZ23nURdlQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:f180::/29
Signature Algorithm: sha256WithRSAEncryption
c2:7c:63:9a:0f:da:59:e1:97:aa:7d:46:67:c9:06:1a:2d:50:
bd:f2:dd:68:8b:00:23:7c:c2:41:1c:58:73:dc:38:55:7a:33:
4c:35:e0:80:e2:3f:54:27:63:f1:65:6e:af:0b:a4:80:77:f5:
63:fd:69:3b:29:fb:5b:72:e1:99:fd:3d:45:2e:42:72:09:a0:
57:3e:dc:8b:f2:5e:0a:48:09:df:25:00:69:d6:a9:a0:a6:40:
14:88:70:97:24:83:b8:dd:48:90:8c:e8:2d:a4:08:d9:1d:59:
88:5f:2d:32:8f:3c:76:73:2a:8e:02:eb:5d:8a:ff:63:b6:17:
52:a2:82:b9:32:1b:41:7d:5d:ad:4b:01:aa:70:f6:c3:f9:4e:
0f:7a:9e:21:bb:66:37:fc:02:83:dc:ed:e7:1c:96:b1:ef:06:
ed:9d:98:76:ce:19:d8:1b:b8:52:98:4c:4f:b6:79:42:87:47:
d4:27:38:3d:4f:7c:2b:a8:3f:24:f9:59:b0:0b:a6:b2:4f:82:
5a:2d:68:13:57:98:0e:53:91:33:05:eb:29:57:50:ac:4f:8c:
d3:3b:e8:35:54:09:43:22:9a:c3:49:f0:2d:3e:0f:ed:fd:a3:
a4:47:c5:1c:0b:da:b5:e4:c4:5d:af:e9:e5:50:50:95:6f:8e:
2a:2f:17:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:26:44 2026 by rpki-client