Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/fOFmhN3fX6vX86FHhMpi-J-clKQ.roa
File: fOFmhN3fX6vX86FHhMpi-J-clKQ.roa (raw, json)
Hash identifier: 5XSxOs32LMiWr0T2y/oScxTyQKmFpXXYcmYwuUDStIo=
Subject key identifier: 7C:E1:66:84:DD:DF:5F:AB:D7:F3:A1:47:84:CA:62:F8:9F:9C:94:A4
Certificate issuer: /CN=a7a4e23482268475c1b935637d0002c2fd2993b8
Certificate serial: 019EB8304538376E7050A0AC3C6114AEE2EC
Authority key identifier: A7:A4:E2:34:82:26:84:75:C1:B9:35:63:7D:00:02:C2:FD:29:93:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/fOFmhN3fX6vX86FHhMpi-J-clKQ.roa
Signing time: Thu 11 Jun 2026 19:37:11 +0000
ROA not before: Thu 11 Jun 2026 19:37:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219463
IP address blocks: 2a14:ae00:108::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 16:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:30:45:38:37:6e:70:50:a0:ac:3c:61:14:ae:e2:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7a4e23482268475c1b935637d0002c2fd2993b8
Validity
Not Before: Jun 11 19:37:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7ce16684dddf5fabd7f3a14784ca62f89f9c94a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f2:26:2b:d8:02:0f:e9:00:67:22:94:7c:62:
8d:26:e8:23:66:d1:8f:75:fa:5e:95:b2:d3:ab:8b:
5a:2c:d4:d7:0d:54:b5:c4:a9:51:a5:e2:7d:df:19:
99:3d:c0:3f:9a:3b:07:29:0b:77:eb:03:81:17:2f:
ef:20:00:25:b5:ca:9f:0d:3f:16:65:ac:4f:29:76:
5b:ee:91:83:a8:45:71:d1:88:f0:d2:4e:29:34:ae:
ea:55:13:c4:f6:31:a9:6a:cf:de:d8:3f:13:67:bd:
5c:a9:45:b5:19:85:7f:82:c0:7b:ac:94:91:47:b6:
62:6a:65:b0:0a:49:ef:ec:41:dd:92:a3:c3:cd:84:
fd:ae:8d:0f:d1:a2:17:a3:10:a0:9b:1d:bf:2f:2d:
e7:f7:99:44:e1:7a:99:37:1a:e2:09:90:5f:95:1f:
92:64:6c:d0:d8:c8:3b:c4:b0:1b:1c:dc:ac:fa:ef:
30:11:27:b3:44:fa:b8:99:4e:1b:bb:7f:6b:cf:2a:
87:c2:d7:6a:5a:80:20:b5:9c:b7:ee:3c:bf:44:53:
0f:c5:4d:d9:c8:68:5d:aa:55:78:16:79:f4:ca:e8:
8b:02:eb:2c:41:92:b7:6e:4e:51:f2:03:a5:a7:43:
4d:6d:c4:59:dc:86:b4:7d:ef:62:71:12:97:4b:5b:
d7:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:E1:66:84:DD:DF:5F:AB:D7:F3:A1:47:84:CA:62:F8:9F:9C:94:A4
X509v3 Authority Key Identifier:
keyid:A7:A4:E2:34:82:26:84:75:C1:B9:35:63:7D:00:02:C2:FD:29:93:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/fOFmhN3fX6vX86FHhMpi-J-clKQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:ae00:108::/48
Signature Algorithm: sha256WithRSAEncryption
2c:c5:0c:e6:e7:5d:39:f2:95:f6:68:50:88:8b:ce:c6:07:74:
8e:7a:67:0a:e3:f9:74:99:ed:0f:fb:a4:bc:e1:5f:8e:6f:73:
a2:8b:2c:db:57:22:ec:20:b1:82:a0:ac:f1:9f:e6:34:7c:26:
78:78:d9:8c:27:33:4b:7f:49:98:1d:b0:26:81:8b:51:45:84:
2e:c1:58:22:6c:c9:74:12:a7:6c:ea:77:07:ad:d9:e8:ac:e1:
fa:52:66:57:c6:8a:b9:b9:33:63:39:62:17:d9:cd:58:5d:6d:
2e:46:04:a5:d0:9c:db:bb:35:86:52:fb:55:2d:2f:6a:15:dc:
dc:78:a0:35:6f:32:b6:c7:65:60:90:85:be:d8:32:58:b2:db:
3b:7d:25:c8:01:a8:73:06:3d:da:35:3d:bd:40:a9:fe:3d:c2:
5c:ad:d0:9f:3e:96:5c:41:d6:45:15:ec:79:ed:07:be:17:dc:
74:56:13:cc:6b:76:0b:9f:f1:6d:a4:a4:b5:ce:c9:cc:69:fa:
f5:a9:81:a9:10:ee:71:78:df:e9:65:97:74:32:31:48:be:02:
ef:63:61:14:e8:06:55:a0:52:51:72:1e:0d:d4:74:9b:3f:45:
dd:50:41:81:07:a2:38:d2:4c:e9:e8:94:53:70:b1:fd:c1:78:
b1:1d:e4:80
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZ64MEU4N25wUKCsPGEUruLsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3YTRlMjM0ODIyNjg0NzVjMWI5MzU2MzdkMDAwMmMyZmQy
OTkzYjgwHhcNMjYwNjExMTkzNzExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3Y2UxNjY4NGRkZGY1ZmFiZDdmM2ExNDc4NGNhNjJmODlmOWM5NGE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfImK9gCD+kAZyKUfGKNJugjZtGP
dfpelbLTq4taLNTXDVS1xKlRpeJ93xmZPcA/mjsHKQt36wOBFy/vIAAltcqfDT8W
ZaxPKXZb7pGDqEVx0Yjw0k4pNK7qVRPE9jGpas/e2D8TZ71cqUW1GYV/gsB7rJSR
R7ZiamWwCknv7EHdkqPDzYT9ro0P0aIXoxCgmx2/Ly3n95lE4XqZNxriCZBflR+S
ZGzQ2Mg7xLAbHNys+u8wESezRPq4mU4bu39rzyqHwtdqWoAgtZy37jy/RFMPxU3Z
yGhdqlV4Fnn0yuiLAussQZK3bk5R8gOlp0NNbcRZ3Ia0fe9icRKXS1vX8wIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFHzhZoTd31+r1/OhR4TKYvifnJSkMB8GA1UdIwQY
MBaAFKek4jSCJoR1wbk1Y30AAsL9KZO4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcDZUaU5JSW1oSFhCdVRWamZRQUN3djBwazdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8wN2Y2MjMtMTRmYi00YTgwLTlmNDYt
MjMzMzFiNjQ5MTZjLzEvZk9GbWhOM2ZYNnZYODZGSGhNcGktSi1jbEtRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy8wN2Y2MjMtMTRmYi00YTgwLTlmNDYtMjMzMzFiNjQ5MTZj
LzEvcDZUaU5JSW1oSFhCdVRWamZRQUN3djBwazdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhSuAAEI
MA0GCSqGSIb3DQEBCwUAA4IBAQAsxQzm51058pX2aFCIi87GB3SOemcK4/l0me0P
+6S84V+Ob3OiiyzbVyLsILGCoKzxn+Y0fCZ4eNmMJzNLf0mYHbAmgYtRRYQuwVgi
bMl0Eqds6ncHrdnorOH6UmZXxoq5uTNjOWIX2c1YXW0uRgSl0JzbuzWGUvtVLS9q
FdzceKA1bzK2x2VgkIW+2DJYsts7fSXIAahzBj3aNT29QKn+PcJcrdCfPpZcQdZF
Fex57Qe+F9x0VhPMa3YLn/FtpKS1zsnMafr1qYGpEO5xeN/pZZd0MjFIvgLvY2EU
6AZVoFJRch4N1HSbP0XdUEGBB6I40kzp6JRTcLH9wXixHeSA
-----END CERTIFICATE-----
Generated at Sat Jun 13 21:52:25 2026 by rpki-client