Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/SIVhfOqz4_ZwZRIWPrAs9TLD0QI.roa
File: SIVhfOqz4_ZwZRIWPrAs9TLD0QI.roa (raw, json)
Hash identifier: kRtJ8SNMjyDbUxu98aNT/p/eOM2tAQZf30u+RPiQ1f8=
Subject key identifier: 48:85:61:7C:EA:B3:E3:F6:70:65:12:16:3E:B0:2C:F5:32:C3:D1:02
Certificate issuer: /CN=d8d3ca2c231afdf3b0355c77a7cbb226f81b74de
Certificate serial: 019C28EF6023FBD9CF793450232773646121
Authority key identifier: D8:D3:CA:2C:23:1A:FD:F3:B0:35:5C:77:A7:CB:B2:26:F8:1B:74:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2NPKLCMa_fOwNVx3p8uyJvgbdN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/SIVhfOqz4_ZwZRIWPrAs9TLD0QI.roa
Signing time: Wed 04 Feb 2026 13:55:02 +0000
ROA not before: Wed 04 Feb 2026 13:55:02 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201705
IP address blocks: 2a14:7dc0:510::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2NPKLCMa_fOwNVx3p8uyJvgbdN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:28:ef:60:23:fb:d9:cf:79:34:50:23:27:73:64:61:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8d3ca2c231afdf3b0355c77a7cbb226f81b74de
Validity
Not Before: Feb 4 13:55:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4885617ceab3e3f6706512163eb02cf532c3d102
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:ff:d2:95:ea:71:ec:e3:2d:d8:40:2f:45:a6:
8d:c0:19:db:b4:0b:6b:24:59:56:a8:e6:9e:2a:3c:
4c:26:0e:48:61:8b:eb:49:bc:54:9a:01:d8:9d:d6:
e9:80:d2:3a:41:63:57:6b:98:3e:a5:5c:3c:aa:3a:
f4:9c:72:39:19:72:02:85:42:0f:ef:fb:7f:2f:d8:
90:f3:8f:96:bb:93:27:be:89:38:a0:43:8e:fa:26:
57:7c:c2:9c:36:d7:10:2f:4d:0a:c7:7a:c0:c1:8f:
81:29:a2:f5:45:13:1f:8d:f0:36:ef:30:fe:9c:49:
7f:f9:e2:51:29:6f:87:7b:bb:5a:9a:e8:37:0a:26:
38:36:a1:d8:a4:00:08:11:7f:94:05:b2:96:9c:6b:
c3:3e:2f:a2:f1:e1:52:81:29:71:9a:5b:7b:f0:2c:
dd:0e:b6:52:b8:df:a2:3d:72:0a:b5:27:ef:26:4e:
12:42:d1:bf:56:14:28:f2:64:a5:2e:f1:3a:28:08:
8c:43:16:a6:d6:3a:37:77:75:5d:0c:96:c6:15:c7:
19:25:90:3b:1f:5a:8a:b4:4e:38:e2:1c:bc:ef:39:
16:2e:01:bc:7a:6f:d7:aa:49:45:c4:5c:a8:dc:b7:
f0:ba:12:3e:60:52:16:af:8b:07:09:87:78:e7:a8:
f9:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:85:61:7C:EA:B3:E3:F6:70:65:12:16:3E:B0:2C:F5:32:C3:D1:02
X509v3 Authority Key Identifier:
keyid:D8:D3:CA:2C:23:1A:FD:F3:B0:35:5C:77:A7:CB:B2:26:F8:1B:74:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2NPKLCMa_fOwNVx3p8uyJvgbdN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/SIVhfOqz4_ZwZRIWPrAs9TLD0QI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7dc0:510::/44
Signature Algorithm: sha256WithRSAEncryption
7c:28:7d:96:84:a7:a7:9d:36:d8:52:09:1c:29:85:7d:80:d3:
d4:26:05:24:7f:1c:bf:08:a9:32:2b:9f:c8:dc:e8:af:1b:b4:
d1:46:ec:57:43:81:56:e7:20:7c:26:29:3d:44:13:1f:2b:e3:
b8:14:35:0b:f4:2a:f0:fe:86:cb:65:66:2e:fe:46:41:b8:4d:
37:4f:03:a3:5d:c8:09:df:a4:4e:21:b5:c7:7a:0c:0e:c2:59:
68:ae:56:bb:8c:37:b6:d3:08:ef:24:80:30:bb:bc:6b:33:bb:
04:6c:e9:66:f6:85:ec:ef:31:c3:49:42:c9:e8:aa:1d:19:67:
7e:b7:b9:b6:23:d4:34:f2:22:cd:76:3a:89:e0:34:22:d5:00:
73:a4:07:bb:92:e0:8c:34:49:e3:8f:d8:23:f5:90:2b:c3:ad:
06:c5:6c:93:f0:fd:e4:1b:b3:78:e3:79:ed:29:3f:2b:d4:f2:
9f:fd:3e:1a:5e:d8:95:82:af:9b:c6:62:06:c4:60:66:df:31:
52:63:8c:3b:ff:c8:7c:0d:9c:c2:fa:ac:81:30:94:30:05:4f:
bf:97:71:cd:e9:8b:8f:62:df:49:e7:1b:10:e6:5b:72:3c:b7:
ee:1b:8b:60:a1:40:66:ac:c4:f2:91:44:f9:4d:36:1d:be:3d:
bb:34:58:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:56:04 2026 by rpki-client