Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/nVvWiVFUWk5xU_QxdG5WMTrBP7o.roa
File: nVvWiVFUWk5xU_QxdG5WMTrBP7o.roa (raw, json)
Hash identifier: IkvpCjizseztm8ptjXmBpCTOT/92SKkuHmzEAvTFl/4=
Subject key identifier: 9D:5B:D6:89:51:54:5A:4E:71:53:F4:31:74:6E:56:31:3A:C1:3F:BA
Certificate issuer: /CN=a7a4e23482268475c1b935637d0002c2fd2993b8
Certificate serial: 019D9AFB19DADC4258641D53C5741E43DC6B
Authority key identifier: A7:A4:E2:34:82:26:84:75:C1:B9:35:63:7D:00:02:C2:FD:29:93:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/nVvWiVFUWk5xU_QxdG5WMTrBP7o.roa
Signing time: Fri 17 Apr 2026 10:27:20 +0000
ROA not before: Fri 17 Apr 2026 10:27:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198790
IP address blocks: 2a14:ae00:102::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:fb:19:da:dc:42:58:64:1d:53:c5:74:1e:43:dc:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7a4e23482268475c1b935637d0002c2fd2993b8
Validity
Not Before: Apr 17 10:27:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9d5bd68951545a4e7153f431746e56313ac13fba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:32:72:1b:5b:c2:65:a1:88:a4:20:3a:04:98:
2a:d4:a8:8a:bb:79:fa:37:ca:15:a3:ec:0e:4f:14:
95:c0:0a:df:ce:f2:15:7b:96:09:96:6b:87:ca:bb:
8e:2a:df:5f:3c:08:87:43:28:15:9c:86:fa:f1:d8:
a1:ed:7e:be:de:92:6a:d5:ea:ab:f6:8d:0f:30:64:
c5:0c:e9:b5:6b:8d:2b:66:09:a3:9c:c2:36:62:60:
6b:14:65:38:2c:14:0a:b5:26:3c:d2:51:c4:ee:c8:
29:33:f2:62:07:d5:c6:a5:c5:11:3f:a2:c3:6a:18:
da:10:70:6c:97:49:3a:1e:ec:37:c0:29:0c:73:7b:
d1:94:7c:f0:f3:c9:95:d7:35:7d:99:7d:f9:ed:2d:
05:52:7b:0e:02:ac:e8:fb:c9:92:64:73:f1:f6:5a:
a3:df:03:5c:73:ee:f5:37:88:23:cb:47:69:46:b4:
48:a1:05:81:29:c6:1c:87:01:bf:09:e8:26:87:94:
e9:f1:ef:ba:01:4a:ca:1a:f6:97:a5:08:cc:71:5d:
1a:a7:bb:b5:4f:12:b6:3a:47:6b:45:22:0d:46:88:
c3:4b:c6:85:3e:d5:e6:23:2d:4a:2f:96:25:5c:38:
10:22:89:2f:6a:c9:65:fa:33:c9:85:15:d9:b2:4b:
27:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:5B:D6:89:51:54:5A:4E:71:53:F4:31:74:6E:56:31:3A:C1:3F:BA
X509v3 Authority Key Identifier:
keyid:A7:A4:E2:34:82:26:84:75:C1:B9:35:63:7D:00:02:C2:FD:29:93:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/nVvWiVFUWk5xU_QxdG5WMTrBP7o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:ae00:102::/48
Signature Algorithm: sha256WithRSAEncryption
65:23:1d:a0:ff:f9:a0:a9:f6:dc:ec:95:57:58:96:31:b9:e4:
ff:b4:cf:8b:5d:db:77:a6:76:1d:11:34:46:87:e2:92:d5:c5:
d1:8c:00:2e:79:10:ae:80:87:20:ab:67:fb:89:95:ef:25:bb:
c5:4f:14:7c:60:b2:0b:94:74:23:90:fc:f0:1d:b9:28:80:b6:
1a:30:c6:22:ff:9f:05:74:58:dd:13:3a:43:84:e2:47:5c:49:
04:58:c0:b8:0a:fb:ca:14:85:09:b7:f7:04:44:d1:18:f8:55:
ab:a4:f8:a8:8a:a5:3f:0c:d6:bd:88:bb:11:7b:b6:02:84:f6:
c5:5c:df:c0:f0:1c:c5:00:15:a3:ec:39:99:9a:77:66:ff:fe:
40:80:df:3e:9e:28:01:47:05:a7:4a:32:76:e8:46:2e:1c:ef:
1f:b8:a5:61:60:1d:98:23:71:44:30:29:da:f1:41:05:47:98:
26:5a:69:3f:c6:a3:aa:18:1c:08:92:9a:1b:40:ac:cf:c6:15:
3c:96:6c:75:70:7c:76:c0:07:90:4e:45:1e:25:95:bf:fc:8a:
35:73:3b:a0:a4:9f:73:b7:4e:f2:7c:c1:30:ad:8e:83:e7:19:
c4:87:ef:66:db:74:bf:1e:5c:41:b4:ef:35:29:ec:67:51:71:
d1:2d:99:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:54:30 2026 by rpki-client