Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/i1E_K4hzdXrjQHuwT7luEsfXqWI.roa
File: i1E_K4hzdXrjQHuwT7luEsfXqWI.roa (raw, json)
Hash identifier: U3t4NOafwZ7P+c220vznGwvfiDUefuLvHEm79bz7Vig=
Subject key identifier: 8B:51:3F:2B:88:73:75:7A:E3:40:7B:B0:4F:B9:6E:12:C7:D7:A9:62
Certificate issuer: /CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Certificate serial: 019DFC7EF6F45AB2B60AAD814253D8A7CF46
Authority key identifier: 67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/i1E_K4hzdXrjQHuwT7luEsfXqWI.roa
Signing time: Wed 06 May 2026 08:54:32 +0000
ROA not before: Wed 06 May 2026 08:54:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212890
IP address blocks: 2a14:67c3:11::/48 maxlen: 48
2a14:67c3:12::/48 maxlen: 48
2a14:67c3:13::/48 maxlen: 48
2a14:67c3:14::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 04:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:fc:7e:f6:f4:5a:b2:b6:0a:ad:81:42:53:d8:a7:cf:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Validity
Not Before: May 6 08:54:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8b513f2b8873757ae3407bb04fb96e12c7d7a962
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:d6:15:83:10:09:34:23:8f:24:0e:c2:b1:7e:
bf:13:49:36:f0:59:ea:4c:a7:04:4d:c7:96:a4:af:
9e:c0:05:f9:99:17:e1:8a:da:d3:dc:84:77:82:6c:
00:76:af:81:1a:cc:c9:18:1c:05:24:b0:7e:d5:13:
9c:dc:d7:0f:f1:f6:07:6d:1f:0f:ae:1d:eb:9c:df:
cf:ce:67:8a:29:0c:2f:42:a8:be:bd:2b:3b:81:c9:
cc:77:3f:86:a5:8a:dd:8d:bc:6f:be:22:6d:c7:01:
46:90:ef:ae:4f:fe:0f:e2:84:27:2f:18:6c:43:cb:
13:51:82:1e:d4:9c:da:74:61:aa:03:42:8f:e7:44:
82:9e:4f:24:85:2c:21:26:33:2b:8b:35:6c:dc:4f:
93:c8:da:d9:b4:fd:4f:ea:3c:05:fe:89:ec:3f:4a:
3e:79:c0:38:38:e3:cc:93:6b:23:c5:ad:65:d8:8a:
8e:fa:42:a8:02:7d:48:f1:36:5a:d5:af:88:ea:30:
af:5a:d5:f2:6f:d6:88:1d:cc:31:17:bd:c4:bd:c9:
5e:bc:d7:75:5c:c6:62:52:0e:12:75:97:ab:4c:f1:
55:7a:c3:a0:86:d8:c8:2b:ea:0c:c6:9c:56:4d:05:
af:b2:b3:6b:71:fa:6d:dc:af:56:80:da:14:ff:d1:
08:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:51:3F:2B:88:73:75:7A:E3:40:7B:B0:4F:B9:6E:12:C7:D7:A9:62
X509v3 Authority Key Identifier:
keyid:67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/i1E_K4hzdXrjQHuwT7luEsfXqWI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:67c3:11::-2a14:67c3:14:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
43:2b:47:3f:3f:2b:d8:2f:43:6a:2f:d8:8e:3a:35:33:fb:41:
2d:63:63:c1:70:8c:50:4d:26:a5:a8:c8:91:fc:30:00:32:04:
4b:07:59:9e:af:60:3c:5d:7e:67:d8:eb:0d:d2:e6:a3:6e:fe:
3d:d9:e5:d7:cb:95:d0:60:44:0f:07:6c:6d:0a:6a:47:e6:e0:
88:0f:8c:cb:d1:ce:46:5a:d9:db:fb:cf:a5:12:f2:57:9d:a1:
9e:4e:a8:2f:d8:c0:af:36:b5:04:ae:7e:be:a7:90:cc:65:09:
3e:c5:b2:00:59:be:6c:bc:d8:d4:55:23:5d:1f:8d:6d:c8:6f:
14:d0:9d:0d:8e:4b:e4:9b:f0:08:f0:f5:d9:14:d6:d4:8d:ef:
27:68:b2:07:1f:a8:66:72:73:c3:88:98:7c:16:7e:d8:72:71:
b2:91:db:6d:5c:0b:98:d8:cc:90:3a:0f:3b:52:ac:bd:2d:45:
b3:60:e8:a1:5a:87:72:23:a6:26:2d:dc:5b:d0:6e:91:93:86:
8f:65:24:8b:f5:c1:aa:4e:c9:07:67:4d:37:79:01:f0:59:47:
7e:c1:6c:7e:f0:c5:2e:10:91:6b:b2:a7:4a:33:62:f3:13:d6:
14:76:e3:92:c8:77:a4:47:5b:c9:0e:86:58:21:9c:0e:1f:7d:
85:c1:c4:71
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 12:24:20 2026 by rpki-client