Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/gRctUEFtImgXMWVw8iA46tlp-hA.roa
File: gRctUEFtImgXMWVw8iA46tlp-hA.roa (raw, json)
Hash identifier: THgiYp/POLSUlNuaLGJhiJUzxk+vuqzoLLmZlA1a2K8=
Subject key identifier: 81:17:2D:50:41:6D:22:68:17:31:65:70:F2:20:38:EA:D9:69:FA:10
Certificate issuer: /CN=a7a4e23482268475c1b935637d0002c2fd2993b8
Certificate serial: 019D767C23485EADBB2E5A3A6CDB9667B819
Authority key identifier: A7:A4:E2:34:82:26:84:75:C1:B9:35:63:7D:00:02:C2:FD:29:93:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/gRctUEFtImgXMWVw8iA46tlp-hA.roa
Signing time: Fri 10 Apr 2026 08:22:20 +0000
ROA not before: Fri 10 Apr 2026 08:22:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20473
IP address blocks: 2a14:ae00:5::/48 maxlen: 48
2a14:ae00:c::/48 maxlen: 48
2a14:ae00:100::/48 maxlen: 48
2a14:ae07::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:76:7c:23:48:5e:ad:bb:2e:5a:3a:6c:db:96:67:b8:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7a4e23482268475c1b935637d0002c2fd2993b8
Validity
Not Before: Apr 10 08:22:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=81172d50416d226817316570f22038ead969fa10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:00:8e:f7:60:42:8c:02:03:52:ff:e8:d6:f0:
2d:13:cf:c6:76:e0:72:0f:16:7b:d5:76:c1:8f:17:
a2:bc:19:02:c6:a3:b9:cb:8c:e0:fa:3c:b4:dc:7c:
fa:d6:5f:59:69:3f:61:28:39:e9:34:37:7e:83:00:
fc:30:fe:ce:b7:bd:aa:3e:b5:5d:89:93:80:88:8a:
5a:7f:c2:bf:5e:f4:6b:34:80:b3:61:64:e5:2c:a4:
14:1b:ac:3e:fd:cb:e2:8b:9c:01:b4:a1:0c:98:db:
08:a4:41:6d:a6:fe:bb:18:30:65:e7:68:e1:3e:23:
52:cd:85:b2:66:ff:07:d7:f8:3a:05:fa:df:88:6d:
ab:fb:3c:b8:7c:79:e9:40:22:b5:75:93:d5:2c:59:
90:87:79:05:6b:29:81:15:7b:e8:37:01:e5:f2:14:
7c:1b:3a:cc:fa:a6:91:8b:53:01:c5:20:9c:0f:6f:
8a:ad:b2:fc:a1:3e:93:be:da:ab:c8:e6:55:20:ba:
27:58:c7:e1:3e:5a:76:d0:f2:86:6c:0e:64:86:96:
d4:69:1b:7a:23:f3:12:bd:1c:b2:4e:23:f6:b0:58:
cb:34:18:f3:a8:88:42:cd:a4:92:10:15:e1:e9:f0:
c5:20:d5:a7:54:24:87:a0:87:d5:ab:9f:55:60:22:
1d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:17:2D:50:41:6D:22:68:17:31:65:70:F2:20:38:EA:D9:69:FA:10
X509v3 Authority Key Identifier:
keyid:A7:A4:E2:34:82:26:84:75:C1:B9:35:63:7D:00:02:C2:FD:29:93:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/gRctUEFtImgXMWVw8iA46tlp-hA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:ae00:5::/48
2a14:ae00:c::/48
2a14:ae00:100::/48
2a14:ae07::/48
Signature Algorithm: sha256WithRSAEncryption
78:7e:19:8b:30:68:b8:fb:3d:a8:3e:48:80:5d:40:0c:db:93:
29:dc:10:59:24:68:57:b1:f1:e5:30:af:1e:5e:e9:24:4b:f8:
31:35:ff:c3:e3:c9:10:14:b6:c0:f1:0c:07:db:5b:ac:08:36:
1e:68:e2:7b:a6:74:d2:dd:82:70:c0:f7:ae:ad:c9:a2:11:59:
31:1a:cb:2d:4b:5f:f8:8c:7b:64:39:8c:79:de:4f:10:28:ed:
80:77:08:2b:a9:14:36:8c:8c:ae:d8:c0:ec:6b:23:89:d2:00:
d3:61:49:69:5d:5d:33:b8:00:75:43:65:a3:ac:0f:e8:90:4d:
d9:b4:1e:1f:64:0f:bb:b6:cf:69:44:ad:bb:1a:a9:b1:e2:ac:
bd:8a:fa:cf:2b:ca:9c:34:31:2d:fe:c5:9d:53:94:ff:20:73:
77:2e:30:14:84:7f:25:b0:93:13:13:c1:aa:1e:ca:4c:17:a3:
c6:b4:e1:a7:71:dd:75:28:9f:89:73:9c:88:0c:b5:39:14:8d:
a4:c8:f7:16:f7:e1:04:d5:07:c5:f2:bd:56:6b:35:29:98:6a:
48:1f:87:94:4f:5d:ed:34:bb:c5:6f:9d:c0:3b:bb:fc:7c:ee:
e3:8f:d1:22:ee:84:13:98:be:8b:7f:79:cb:a8:44:06:62:41:
fa:2f:51:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:52:42 2026 by rpki-client