Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/Dz46KAYraGcTikQMGoMJVAAInHQ.roa
File: Dz46KAYraGcTikQMGoMJVAAInHQ.roa (raw, json)
Hash identifier: NU2HWGZh7sQrY1k6J9xhsLm4R4NqLLcBXrqTHwrCQfs=
Subject key identifier: 0F:3E:3A:28:06:2B:68:67:13:8A:44:0C:1A:83:09:54:00:08:9C:74
Certificate issuer: /CN=1fd0875cd0051d0c0925aca041034e7840a6770b
Certificate serial: 01A0AF2747AA8EFEA7A8AB09004D396DB291
Authority key identifier: 1F:D0:87:5C:D0:05:1D:0C:09:25:AC:A0:41:03:4E:78:40:A6:77:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H9CHXNAFHQwJJaygQQNOeECmdws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/Dz46KAYraGcTikQMGoMJVAAInHQ.roa
Signing time: Thu 17 Sep 2026 11:36:22 +0000
ROA not before: Thu 17 Sep 2026 11:36:22 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207724
IP address blocks: 2a14:4f80:c00::/38 maxlen: 38
2a14:4f80:1800::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/H9CHXNAFHQwJJaygQQNOeECmdws.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/H9CHXNAFHQwJJaygQQNOeECmdws.mft
rsync://rpki.ripe.net/repository/DEFAULT/H9CHXNAFHQwJJaygQQNOeECmdws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 02:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:af:27:47:aa:8e:fe:a7:a8:ab:09:00:4d:39:6d:b2:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fd0875cd0051d0c0925aca041034e7840a6770b
Validity
Not Before: Sep 17 11:36:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0f3e3a28062b6867138a440c1a83095400089c74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:91:22:0e:a6:19:36:e7:4f:00:ec:b3:9b:00:
99:5c:b5:ac:4a:d0:5a:2a:a0:63:e1:69:e4:a1:87:
b5:ed:bd:25:b5:40:ec:25:a1:60:dd:e9:15:c4:4a:
c7:a2:a5:86:ad:40:fa:2c:2e:8c:df:99:a1:e1:78:
5a:be:e8:e1:80:da:a4:3c:87:fa:6a:9a:bc:ad:89:
30:52:5b:8c:38:34:16:6f:30:e8:06:6c:76:4e:9d:
cc:61:29:b9:26:25:97:40:fd:6f:8c:37:dd:9a:71:
85:da:f4:c4:3f:4e:01:5e:fa:b2:13:6b:8a:ba:e6:
3f:b7:93:0e:91:7e:40:14:91:df:9d:dc:21:8d:19:
04:b2:ba:1b:00:6f:0b:84:b4:d1:4f:c8:2e:32:b8:
d1:61:d8:a2:c8:3a:16:90:40:e1:21:af:c5:45:0c:
21:ca:83:81:e2:c9:b5:f2:f0:38:f6:b4:80:0e:17:
31:4b:29:54:e8:a0:21:21:19:ba:68:66:ab:37:ce:
18:e8:45:04:9d:31:5b:ea:b3:26:85:14:54:98:7e:
e4:03:de:16:5f:0c:0a:12:4b:ef:b7:9b:10:b4:e8:
02:51:cc:eb:33:8c:47:a8:63:fa:b9:71:c7:a3:5c:
e3:9e:1e:c7:9b:60:0b:fe:f2:eb:5a:6f:b7:79:d3:
46:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:3E:3A:28:06:2B:68:67:13:8A:44:0C:1A:83:09:54:00:08:9C:74
X509v3 Authority Key Identifier:
keyid:1F:D0:87:5C:D0:05:1D:0C:09:25:AC:A0:41:03:4E:78:40:A6:77:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H9CHXNAFHQwJJaygQQNOeECmdws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/Dz46KAYraGcTikQMGoMJVAAInHQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/H9CHXNAFHQwJJaygQQNOeECmdws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:4f80:c00::/38
2a14:4f80:1800::/38
Signature Algorithm: sha256WithRSAEncryption
68:9f:f4:f0:28:28:b0:67:64:44:93:b8:22:ad:4f:a1:08:5c:
9f:c7:c9:cb:1a:57:84:2f:6c:6c:c2:92:b4:70:97:85:42:27:
3a:21:1e:55:27:cc:12:ad:df:65:dc:90:b8:56:10:44:9a:ec:
2b:51:cc:ed:5e:5a:98:66:d1:a5:01:1e:2b:5e:24:00:2c:6a:
d8:53:4f:b7:7a:a8:f7:90:54:bb:4f:fc:2a:6b:64:a9:dd:c9:
7e:ed:c8:ca:4b:8d:51:98:4a:16:bf:b6:7c:e4:d7:1f:9e:2b:
4c:c6:a8:53:b1:8b:24:39:10:d8:5b:1d:30:e5:95:8a:3a:ff:
4a:98:55:0a:7d:5a:30:3e:ce:06:40:e6:d0:7b:52:dc:3f:d2:
71:50:cd:bf:1d:95:0f:9e:b3:f4:6e:cd:87:8b:93:4f:b3:6e:
ec:78:7b:7f:af:b9:77:d6:ea:0d:ca:5f:d5:a1:19:b9:81:30:
62:a6:f8:75:6e:4e:e1:b2:0c:cd:f4:0a:1b:62:27:8a:25:82:
0d:1d:e7:56:e8:df:2e:2f:63:a7:ca:fb:71:5d:ad:90:13:dd:
22:15:94:fa:ed:14:e3:18:8d:87:58:76:4c:c8:be:39:e9:a4:
40:5c:c4:f9:d2:5f:42:83:21:e0:3c:dc:82:00:35:55:b5:95:
a7:17:16:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 10:15:11 2026 by rpki-client