Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/405VjlxhXrjQ4rP2jz6Bhlhu0JY.roa
File: 405VjlxhXrjQ4rP2jz6Bhlhu0JY.roa (raw, json)
Hash identifier: 1ZF0JesEnveyURLla94PGW6Dtl2j68OqZQ/5OxigEPg=
Subject key identifier: E3:4E:55:8E:5C:61:5E:B8:D0:E2:B3:F6:8F:3E:81:86:58:6E:D0:96
Certificate issuer: /CN=a7a4e23482268475c1b935637d0002c2fd2993b8
Certificate serial: 019C103B58E248303114B1374948917C2BFE
Authority key identifier: A7:A4:E2:34:82:26:84:75:C1:B9:35:63:7D:00:02:C2:FD:29:93:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/405VjlxhXrjQ4rP2jz6Bhlhu0JY.roa
Signing time: Fri 30 Jan 2026 18:47:30 +0000
ROA not before: Fri 30 Jan 2026 18:47:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20473
IP address blocks: 2a14:ae00:5::/48 maxlen: 48
2a14:ae00:c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 08:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:10:3b:58:e2:48:30:31:14:b1:37:49:48:91:7c:2b:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7a4e23482268475c1b935637d0002c2fd2993b8
Validity
Not Before: Jan 30 18:47:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e34e558e5c615eb8d0e2b3f68f3e8186586ed096
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6d:98:3a:85:c5:02:5a:b6:26:bf:c0:9f:2c:
54:c7:60:e8:27:2e:c5:5e:0c:8e:54:e7:70:7a:3c:
c7:36:5f:3b:50:8d:72:43:03:b8:b3:3b:d2:e2:50:
65:d0:b1:c2:63:e7:95:3c:bc:33:a8:92:8e:4c:f0:
bb:55:02:ce:cd:28:76:26:01:b6:af:28:83:34:f2:
4e:2f:98:44:5b:a9:af:d0:55:2e:0c:bf:0d:67:72:
18:4f:46:44:0b:28:3e:c9:77:bb:d9:99:bb:54:60:
b3:ea:88:00:3b:f3:35:c0:05:47:a0:b2:50:39:1f:
20:7b:e0:25:96:49:df:78:ba:d9:15:6f:20:36:d0:
17:2f:81:92:41:fd:26:e5:b4:92:dc:bd:17:9b:94:
6d:4f:e7:b1:89:66:97:86:4d:5f:92:ba:9c:61:b0:
b9:38:6a:69:b9:40:30:e5:d2:51:58:0d:b2:2f:d5:
37:3b:e8:90:b5:7e:89:61:a1:bf:9b:7d:ac:af:89:
71:51:46:fb:b3:73:f9:50:b0:d5:82:78:9a:4f:65:
03:c0:06:ac:fb:75:97:87:5f:c4:53:de:df:78:b3:
93:57:f9:9c:d7:b9:d5:9d:e5:87:fe:cc:8d:69:d2:
b8:38:81:3d:6e:8b:69:c9:d2:9f:2d:60:b6:1b:76:
dc:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:4E:55:8E:5C:61:5E:B8:D0:E2:B3:F6:8F:3E:81:86:58:6E:D0:96
X509v3 Authority Key Identifier:
keyid:A7:A4:E2:34:82:26:84:75:C1:B9:35:63:7D:00:02:C2:FD:29:93:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/405VjlxhXrjQ4rP2jz6Bhlhu0JY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:ae00:5::/48
2a14:ae00:c::/48
Signature Algorithm: sha256WithRSAEncryption
81:79:f8:d9:93:60:35:d0:2f:f2:27:79:c7:37:a0:92:e1:57:
db:e3:5d:e7:c3:4c:80:12:10:8a:c1:c0:d2:9c:e2:f4:b7:66:
dd:2f:50:a5:90:57:95:a6:0b:b9:f1:d8:74:27:1f:98:ec:eb:
73:ed:a9:bb:af:67:97:54:ac:90:dd:e4:fd:c6:c8:2d:73:34:
24:9d:a1:f4:8b:2e:86:26:ca:cf:31:b1:14:b9:16:ea:51:88:
ac:ae:8f:b0:a6:f9:76:90:14:b2:8f:c1:ad:d2:34:d8:e0:ed:
5f:6d:42:ee:b4:3b:db:ac:5b:40:3b:d1:29:88:98:58:0d:fc:
f4:4f:45:c8:a6:af:a3:8f:89:25:5e:fa:3f:4f:44:c5:b1:5e:
15:35:69:89:4c:46:06:ab:6f:c1:8c:7f:29:82:95:4c:57:c0:
e8:79:b8:a9:8b:02:53:a1:cb:4f:1a:0e:3e:8a:9f:74:b2:13:
00:5c:37:32:8c:fa:ad:e8:5a:7a:0c:75:73:36:86:f6:a2:a6:
6c:9e:16:84:34:0f:67:4f:df:c9:4a:37:82:03:87:cf:ca:de:
59:d1:e5:d5:1d:f3:7d:7d:5b:b5:95:53:c2:21:c9:9d:a2:3a:
c5:ec:2e:cf:45:db:63:24:7a:63:1a:9b:9a:c8:43:0d:c0:bd:
de:d9:7f:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:05:27 2026 by rpki-client