Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/rGdw8XcljogeRBNXiwZ5G2FflXY.roa
File: rGdw8XcljogeRBNXiwZ5G2FflXY.roa (raw, json)
Hash identifier: PZJcfeeOrcQED7AGo1cD2/clvw+B/3TgERqo5CruyWg=
Subject key identifier: AC:67:70:F1:77:25:8E:88:1E:44:13:57:8B:06:79:1B:61:5F:95:76
Certificate issuer: /CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Certificate serial: 019E1DBEB1AFEF72DA1E25AD578DF45A78EE
Authority key identifier: 67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/rGdw8XcljogeRBNXiwZ5G2FflXY.roa
Signing time: Tue 12 May 2026 19:51:37 +0000
ROA not before: Tue 12 May 2026 19:51:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199277
IP address blocks: 2a14:67c3:790::/44 maxlen: 64
2a14:67c3:79f::/48 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:be:b1:af:ef:72:da:1e:25:ad:57:8d:f4:5a:78:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Validity
Not Before: May 12 19:51:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ac6770f177258e881e4413578b06791b615f9576
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:16:40:b8:e1:2e:4a:09:c4:5b:c0:57:2b:64:
a5:0c:bb:69:aa:96:97:eb:69:52:32:a7:3c:88:43:
d3:bf:a3:dd:35:3a:eb:77:df:3c:78:42:37:11:80:
97:66:99:7e:df:18:de:de:42:13:67:6d:06:0b:ee:
c7:4d:11:9c:0f:10:0f:18:96:86:cc:3b:77:77:c7:
20:3b:5e:fa:59:1d:40:f2:03:09:af:1e:df:8a:0c:
eb:ce:2a:26:92:e3:c7:0e:bb:c0:28:84:6b:64:34:
47:77:f4:33:a0:cb:a5:94:21:c6:31:67:fe:b9:b7:
98:f3:79:b5:fc:ad:89:76:b0:17:c5:25:89:73:d3:
3d:1a:a8:e1:03:01:cd:6e:f8:91:03:87:5d:7c:76:
20:99:07:ed:05:5b:e0:57:15:6f:75:90:a6:f3:63:
ba:29:24:80:07:f7:b2:83:42:92:e0:2f:b8:06:97:
a2:88:10:d8:d2:43:2a:29:c9:6a:57:95:db:e5:cd:
d9:52:85:0e:2d:c9:e8:1c:d0:82:f1:ab:62:ee:39:
28:bc:b0:98:f9:1e:ea:22:cc:5d:34:b4:1d:69:3d:
4a:ff:3a:a3:d4:a7:a4:80:67:c1:74:76:29:22:85:
87:b2:c0:ed:2e:fc:92:1b:6f:04:d2:1a:54:83:8d:
b1:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:67:70:F1:77:25:8E:88:1E:44:13:57:8B:06:79:1B:61:5F:95:76
X509v3 Authority Key Identifier:
keyid:67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/rGdw8XcljogeRBNXiwZ5G2FflXY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:67c3:790::/44
Signature Algorithm: sha256WithRSAEncryption
83:5e:70:50:d4:0a:9b:8e:ff:24:88:89:64:c7:ea:49:93:0e:
e0:98:ac:9e:2d:51:e1:be:72:6d:bc:87:6c:65:4e:4c:73:7c:
10:b3:75:c3:4b:d1:16:58:97:1e:c7:77:4d:3d:f2:7f:e7:3b:
82:db:73:da:f3:fa:87:d1:a2:a0:bc:b2:78:dc:8a:0b:34:d9:
f9:d0:66:3e:59:c5:5e:5c:31:ca:c3:24:4a:cb:a3:63:6e:d9:
55:8a:20:6f:d5:ce:26:be:59:8c:07:49:60:a0:e1:e4:44:1e:
64:35:79:93:a2:28:d8:ff:c4:40:e5:eb:7b:2e:f2:b6:c0:67:
73:c3:db:70:c5:31:81:cf:4b:76:5d:a0:ee:bc:36:97:64:eb:
fc:05:1e:b1:14:c4:5f:c2:db:2f:9b:38:b0:f9:62:a0:e0:49:
92:3b:b7:4f:5f:6c:4c:97:bf:da:7a:68:f0:c2:e1:18:23:93:
b0:40:2f:10:81:a0:26:09:c2:5a:13:0f:c1:c2:3c:95:ec:2b:
7d:b1:06:7f:29:04:21:c8:d5:35:f9:03:e8:80:0b:92:fc:2a:
32:81:06:29:17:82:2d:f4:b1:f0:73:54:91:eb:53:ac:36:14:
f7:12:41:da:d9:39:58:12:bf:2a:22:50:fc:1e:f5:6d:76:9e:
68:c9:95:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:40:05 2026 by rpki-client