Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/rva5_beSFvlv21QjcCSAZZLiJ3A.roa
File: rva5_beSFvlv21QjcCSAZZLiJ3A.roa (raw, json)
Hash identifier: YxRgHCmMttNV85CSBClQwsP6VIyVKGds76YTt6iso5I=
Subject key identifier: AE:F6:B9:FD:B7:92:16:F9:6F:DB:54:23:70:24:80:65:92:E2:27:70
Certificate issuer: /CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Certificate serial: 019D0978444C4815EF60EB74377AA6FB4000
Authority key identifier: 67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/rva5_beSFvlv21QjcCSAZZLiJ3A.roa
Signing time: Fri 20 Mar 2026 04:19:29 +0000
ROA not before: Fri 20 Mar 2026 04:19:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200623
IP address blocks: 2a14:67c3:990::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:09:78:44:4c:48:15:ef:60:eb:74:37:7a:a6:fb:40:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Validity
Not Before: Mar 20 04:19:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=aef6b9fdb79216f96fdb54237024806592e22770
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:41:91:b3:e1:f8:4b:84:1a:55:45:9a:fd:3e:
e0:e6:c5:f6:06:49:5e:2c:b5:89:29:b5:29:8a:a3:
6c:71:8f:ec:fd:82:67:1e:cb:3a:12:4a:19:89:b8:
31:50:f8:1f:c8:72:f9:51:9a:d6:30:9e:c7:bb:01:
84:b4:ac:d5:4d:8d:31:27:6a:ed:86:48:29:48:d3:
29:7c:86:2f:fa:d7:15:7e:a2:d3:ed:9c:c2:be:09:
70:44:61:cb:25:e0:7d:91:fd:af:91:fb:04:6e:0b:
3b:ad:d0:4c:10:cb:82:e7:9e:b1:ec:ca:ee:cf:c7:
03:fe:8a:71:8f:6a:fd:1c:8c:9f:8e:4a:76:c4:a3:
33:a4:df:05:1d:ec:96:63:c6:da:a2:2f:d3:49:66:
7c:d2:69:81:57:8d:cf:4e:d3:ee:68:e0:cb:53:f8:
e9:1b:94:a6:3e:34:b0:6a:86:ec:e7:3a:dc:e4:55:
51:83:24:5a:2b:54:89:77:dd:d4:ab:52:06:2b:21:
01:8e:bb:59:0b:6d:58:95:b5:35:32:c7:0d:ab:8f:
ed:35:49:e3:5b:81:4e:5d:b1:37:9a:da:0e:d9:ef:
33:bc:3e:81:98:b2:b7:6d:9b:c7:bb:88:5e:d8:da:
fe:1e:93:01:c0:42:d5:ee:a4:06:2c:07:67:78:e2:
22:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:F6:B9:FD:B7:92:16:F9:6F:DB:54:23:70:24:80:65:92:E2:27:70
X509v3 Authority Key Identifier:
keyid:67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/rva5_beSFvlv21QjcCSAZZLiJ3A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:67c3:990::/44
Signature Algorithm: sha256WithRSAEncryption
93:79:af:31:d7:8c:6f:df:4d:77:05:12:d0:b2:26:d5:0e:8d:
23:c1:a8:6d:c6:f6:ee:f0:74:6b:47:9e:e4:39:2d:9e:6e:e8:
e3:a3:f5:08:a5:71:e2:45:f1:a8:21:8b:6b:e4:ef:b8:b5:83:
49:a6:02:8e:37:de:26:8a:da:67:22:07:5e:cb:cd:50:f3:95:
ec:4e:e2:e8:24:b7:d5:0c:39:e5:57:e9:da:40:cc:12:86:56:
f4:23:1f:5a:e9:2e:28:f1:22:ed:23:64:9f:44:18:03:99:57:
ae:76:38:fd:70:44:b7:50:d3:31:01:e4:8a:75:e6:0b:d0:07:
05:c4:5d:a8:ab:a1:80:15:11:73:b5:c6:cc:6a:43:fc:e1:0e:
b4:a8:24:17:58:e9:02:af:0c:41:f9:43:70:2e:00:ca:f0:8c:
c2:b2:06:dd:bf:59:39:94:16:8d:5b:42:b3:2b:e0:2b:0c:08:
15:1b:32:32:e6:2e:9a:3a:b9:e6:11:e5:4e:c5:5d:31:ee:9c:
6a:f2:c1:47:1b:38:b7:fb:3d:e6:c1:28:38:b6:d0:a9:88:f8:
8d:39:5d:74:b9:fc:8a:a6:3d:86:0b:a0:83:c3:19:a9:4e:f1:
12:76:07:7f:34:18:85:e3:58:0e:c8:10:1f:ab:40:57:9d:db:
6b:93:ca:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:07:00 2026 by rpki-client