Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/sAGamYEhbnHCnU7m8PZEoIKvEMY.roa
File: sAGamYEhbnHCnU7m8PZEoIKvEMY.roa (raw, json)
Hash identifier: kYoAzOYWIAnrZzFCKREU7TViuU3EVuBWBB8vGTGQyn4=
Subject key identifier: B0:01:9A:99:81:21:6E:71:C2:9D:4E:E6:F0:F6:44:A0:82:AF:10:C6
Certificate issuer: /CN=a7a4e23482268475c1b935637d0002c2fd2993b8
Certificate serial: 019C9F980897A7CFC6608EF278F2E9826FF9
Authority key identifier: A7:A4:E2:34:82:26:84:75:C1:B9:35:63:7D:00:02:C2:FD:29:93:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/sAGamYEhbnHCnU7m8PZEoIKvEMY.roa
Signing time: Fri 27 Feb 2026 14:54:26 +0000
ROA not before: Fri 27 Feb 2026 14:54:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200546
IP address blocks: 2a14:ae00:e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:9f:98:08:97:a7:cf:c6:60:8e:f2:78:f2:e9:82:6f:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7a4e23482268475c1b935637d0002c2fd2993b8
Validity
Not Before: Feb 27 14:54:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b0019a9981216e71c29d4ee6f0f644a082af10c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:13:d5:dc:64:76:69:54:f1:d5:1d:30:d8:78:
d9:c7:bd:7d:cd:fa:89:54:8b:66:39:06:02:bb:31:
17:2a:18:13:ce:a6:d4:35:c5:e1:bd:59:25:d2:69:
12:0c:a6:11:f2:8a:f6:78:97:98:ce:84:37:6c:25:
35:2a:89:94:8e:c4:7b:c1:4e:cd:35:4a:8e:3b:6a:
99:b9:0d:8a:56:1a:0d:24:84:fe:24:3d:68:fc:7b:
cc:ef:41:da:a7:a5:4a:f2:be:b0:f2:1f:09:58:a7:
81:42:16:97:e5:91:5b:50:f9:a0:1c:8e:76:55:16:
fe:53:93:85:c8:ec:fd:af:c5:cc:6f:e6:26:1c:f1:
6d:3c:1c:a5:7c:90:d9:23:3b:97:38:ef:3a:f6:cb:
fb:cc:da:7a:0f:aa:13:a7:60:b1:2b:44:bd:a0:0f:
1c:b6:c8:67:3f:dd:57:11:9a:29:9d:d7:72:2d:2c:
51:68:9a:c7:1a:5e:89:c7:d4:3c:b8:3d:80:dd:6a:
6d:ea:91:4f:9d:ee:35:da:a3:78:76:37:12:f0:1b:
3e:ae:bd:fa:c2:d9:8b:66:c3:4b:ab:86:52:7b:49:
c6:a8:32:bf:b5:0d:72:a7:bf:fb:50:05:46:eb:2a:
57:3f:f6:83:90:63:36:4c:6d:a9:6e:77:98:ba:e5:
26:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:01:9A:99:81:21:6E:71:C2:9D:4E:E6:F0:F6:44:A0:82:AF:10:C6
X509v3 Authority Key Identifier:
keyid:A7:A4:E2:34:82:26:84:75:C1:B9:35:63:7D:00:02:C2:FD:29:93:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/sAGamYEhbnHCnU7m8PZEoIKvEMY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:ae00:e::/48
Signature Algorithm: sha256WithRSAEncryption
8d:49:e7:cc:5b:68:57:fe:93:32:36:d6:52:88:4d:7b:e6:15:
0f:b0:59:a0:59:eb:fb:c9:8b:41:d9:3f:20:cf:bb:31:d3:d3:
0b:71:d0:68:74:58:91:41:80:62:eb:bf:0f:51:71:fe:cd:60:
c6:65:b5:da:ea:d2:93:2b:36:b4:41:b1:4d:ac:a6:ae:ac:40:
6c:fa:4c:74:7c:c1:0d:96:61:81:a1:c0:75:68:39:85:11:0b:
bc:f7:68:f6:d4:ec:41:09:91:98:10:c4:1b:f4:79:1f:79:4e:
58:23:28:5b:16:56:77:1c:e3:7c:22:3c:e7:54:70:9f:8c:c0:
b7:55:f2:2c:3e:16:99:e4:ef:82:8f:dd:89:c7:b2:3a:57:26:
9c:09:e8:f8:2e:69:84:1b:f7:95:eb:e6:37:46:0f:6f:e0:97:
7b:83:c3:9e:ff:c3:34:2d:bd:76:8d:0e:52:4e:23:e2:ab:f8:
dd:34:c6:44:1d:3e:79:08:b2:97:ae:ab:53:37:b6:3f:e8:b2:
95:e1:75:95:9c:0f:39:4e:81:f5:4f:f7:17:ee:6b:10:1c:20:
a6:52:0a:fe:c3:a7:4e:b0:db:d1:54:eb:c2:8d:72:cb:d9:89:
d6:18:9f:81:be:c6:fe:b2:3d:a5:b8:96:56:eb:9b:d9:78:f2:
15:3b:24:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:56:14 2026 by rpki-client