Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/9c5vdKgHzyOZwXdqcZN8dzT0Xgc.roa
File: 9c5vdKgHzyOZwXdqcZN8dzT0Xgc.roa (raw, json)
Hash identifier: d1kTybQji+83QMBeS1ShD6qnVoJM2WKb/sGfUyRcNFk=
Subject key identifier: F5:CE:6F:74:A8:07:CF:23:99:C1:77:6A:71:93:7C:77:34:F4:5E:07
Certificate issuer: /CN=a7a4e23482268475c1b935637d0002c2fd2993b8
Certificate serial: 019FA79D09A3DDD6B11CAF815CEB93DAB486
Authority key identifier: A7:A4:E2:34:82:26:84:75:C1:B9:35:63:7D:00:02:C2:FD:29:93:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/9c5vdKgHzyOZwXdqcZN8dzT0Xgc.roa
Signing time: Tue 28 Jul 2026 07:25:14 +0000
ROA not before: Tue 28 Jul 2026 07:25:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219129
IP address blocks: 2a14:ae00:109::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:9d:09:a3:dd:d6:b1:1c:af:81:5c:eb:93:da:b4:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7a4e23482268475c1b935637d0002c2fd2993b8
Validity
Not Before: Jul 28 07:25:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f5ce6f74a807cf2399c1776a71937c7734f45e07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:2b:61:de:bf:e1:3b:27:9a:3d:f1:fb:3e:78:
55:74:5d:a7:45:41:d4:be:41:07:aa:eb:8b:05:11:
e3:c2:7b:53:15:02:f2:c8:a3:6f:a7:ae:03:ef:a0:
88:36:09:47:3a:e4:8c:17:fe:67:f7:18:5e:ac:ea:
58:03:e3:9b:fd:90:3f:0e:a6:b5:bb:fc:63:f1:08:
51:5b:cc:e0:7e:f0:b5:c6:77:52:5d:46:0d:3f:7f:
62:86:e9:63:6d:58:44:5b:2c:dc:a8:f6:ae:e1:a6:
99:f8:24:e4:31:45:2b:d3:a6:66:db:cb:b4:d6:af:
3d:8f:92:9f:14:28:72:81:e3:1f:5a:da:b0:93:d8:
79:03:fe:2c:86:b4:75:fa:0f:33:96:80:d2:3f:f7:
8a:38:dc:3c:fa:95:39:5f:e3:3b:bb:cc:3c:2f:0c:
d1:51:04:50:b5:17:08:1e:4c:78:8f:7c:4b:a3:0f:
23:f8:bf:18:d0:4f:01:3c:cc:d3:4d:9e:79:3a:9c:
ef:9e:90:29:6f:07:5d:e3:57:b0:6d:1f:5f:7e:a3:
f5:cb:3d:3c:1d:6c:d7:d0:4a:2a:80:6f:6c:3d:c3:
3a:ef:32:60:1b:9a:89:4d:c4:df:cb:d0:cf:b6:44:
25:8a:96:06:f9:88:c4:79:b5:21:40:69:85:0e:97:
68:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:CE:6F:74:A8:07:CF:23:99:C1:77:6A:71:93:7C:77:34:F4:5E:07
X509v3 Authority Key Identifier:
keyid:A7:A4:E2:34:82:26:84:75:C1:B9:35:63:7D:00:02:C2:FD:29:93:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/9c5vdKgHzyOZwXdqcZN8dzT0Xgc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:ae00:109::/48
Signature Algorithm: sha256WithRSAEncryption
92:72:9f:ac:9b:65:38:98:52:10:e5:84:3d:74:eb:58:ea:33:
22:d8:6b:b4:f8:30:3e:ef:d3:36:60:d8:cc:93:40:7a:bc:e3:
b8:b0:b8:12:4a:0f:fd:fa:49:21:42:d8:09:00:45:9c:f5:1d:
52:78:6a:7d:2f:11:c7:13:0f:fe:5d:27:70:5e:d9:70:dd:be:
e0:63:a7:95:e2:21:70:1a:96:a1:2c:4d:b1:98:c5:6c:38:0f:
35:9f:90:89:38:83:a7:9a:88:d8:6c:a4:8a:3e:79:49:e4:eb:
ce:d7:22:c2:40:a6:de:d3:bb:bd:62:4b:27:b7:d3:8e:75:f4:
16:80:ea:c2:89:d1:25:03:0f:21:05:cc:f8:e8:6d:e2:53:8d:
03:93:f3:f5:fd:f2:87:30:45:32:e7:dd:16:1c:0e:ee:89:c4:
8c:b9:f0:dc:09:af:9e:d8:ed:1e:c3:d9:b9:59:5f:4b:10:8c:
d4:21:3d:9e:00:b6:41:d7:d4:21:e2:70:e4:43:6a:35:ee:a2:
bf:47:31:d7:12:6c:00:a5:bf:72:0e:1b:d0:fa:84:3b:7e:9e:
50:a8:c4:e1:54:a4:5d:f9:99:df:70:91:44:aa:65:c2:fb:3c:
80:9a:94:bc:fb:d6:b7:72:8b:17:a3:99:b2:58:71:7a:ce:c9:
64:c8:fc:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:49:00 2026 by rpki-client