Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/whJoIdht_JJNkCrZ3nWBZBbf_YQ.roa
File: whJoIdht_JJNkCrZ3nWBZBbf_YQ.roa (raw, json)
Hash identifier: /2V/RW4Z9DB28TR56MpQxnwbXRWL+M3Fsfa7stmnP48=
Subject key identifier: C2:12:68:21:D8:6D:FC:92:4D:90:2A:D9:DE:75:81:64:16:DF:FD:84
Certificate issuer: /CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Certificate serial: 019CEC2231F6E80DB8B24B572C9F8C09D377
Authority key identifier: 67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/whJoIdht_JJNkCrZ3nWBZBbf_YQ.roa
Signing time: Sat 14 Mar 2026 11:36:29 +0000
ROA not before: Sat 14 Mar 2026 11:36:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203662
IP address blocks: 2a14:67c3:2aa::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 10:47:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ec:22:31:f6:e8:0d:b8:b2:4b:57:2c:9f:8c:09:d3:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Validity
Not Before: Mar 14 11:36:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c2126821d86dfc924d902ad9de75816416dffd84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6b:99:11:db:e7:90:c5:59:95:f8:71:ee:52:
20:60:15:42:1c:78:a7:02:ca:64:86:ef:19:40:64:
60:0c:02:29:43:21:81:99:b1:c5:b2:2f:ae:4b:7d:
be:a2:42:a9:71:0b:ff:11:f2:1f:2a:02:62:88:96:
58:93:91:1f:e2:30:0e:b7:0a:14:29:56:bf:63:b4:
a9:23:1c:33:42:63:2b:db:b6:71:20:fc:ae:d3:81:
f7:29:e8:ac:f3:1c:eb:2a:3c:40:5e:2e:a7:6f:03:
1e:51:e7:1b:c2:ca:f4:d6:d9:44:fb:a0:5d:11:cd:
c2:41:73:f1:70:16:41:6c:6b:f4:b7:ea:f7:41:24:
ae:a0:7f:c7:7c:1f:5b:fa:93:96:00:91:24:14:0f:
e8:aa:0b:e8:75:d1:55:80:dc:1d:b9:77:f5:05:29:
dc:6a:c3:c1:59:72:f0:20:35:46:32:32:fd:93:e0:
d2:2a:65:ad:43:e7:8f:b3:1a:68:59:06:1c:c4:e3:
74:96:00:70:a4:a1:71:f5:73:1e:db:b7:11:3c:f3:
08:64:bb:98:f8:13:a1:47:8b:c9:08:c8:67:8f:48:
e7:64:da:2f:96:1b:32:c6:65:2e:e8:5b:09:02:4e:
cd:bd:21:a8:fa:a1:0b:e1:a0:7d:49:7e:f0:dd:cb:
97:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:12:68:21:D8:6D:FC:92:4D:90:2A:D9:DE:75:81:64:16:DF:FD:84
X509v3 Authority Key Identifier:
keyid:67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/whJoIdht_JJNkCrZ3nWBZBbf_YQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:67c3:2aa::/48
Signature Algorithm: sha256WithRSAEncryption
59:78:66:a9:4e:06:e4:e9:ef:b9:89:c4:ae:30:a4:d2:87:b1:
4b:56:d6:16:d5:24:e2:f1:74:e4:f0:1f:79:14:26:81:8d:af:
8c:12:d9:ea:91:2d:2f:90:5d:d7:16:90:78:29:99:d2:72:18:
08:ce:f2:a6:b0:fe:9b:92:46:6f:8b:34:32:c4:ed:ea:f8:d9:
e1:a9:f8:63:9c:c8:fe:db:df:d4:59:c3:bd:06:a0:13:42:6c:
ab:00:07:0c:f5:28:41:e1:b2:e9:75:b7:71:e7:53:aa:16:15:
6c:02:65:c5:5a:37:28:2a:50:30:bd:e4:97:71:e3:80:df:0c:
95:96:62:93:94:41:e9:90:20:e7:d5:e0:40:2f:c4:d7:1e:65:
bb:9d:5d:f1:51:91:a1:98:65:8e:d5:2c:31:a6:aa:e5:ce:f9:
b5:67:d7:7c:54:1e:f8:f7:14:b0:75:7b:bd:7c:2b:14:7e:9b:
a4:2c:41:c8:68:1f:94:78:62:2f:21:11:df:67:56:21:d8:70:
93:25:c0:be:bc:41:f3:58:24:22:4e:06:c6:bf:c1:ca:84:05:
9e:64:69:ff:e5:89:c2:46:71:ce:24:d3:d0:3f:44:82:89:6a:
0b:e1:d9:d5:00:a9:f2:28:34:c0:9d:49:b6:d8:e6:fd:a9:b0:
2d:db:da:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:27:32 2026 by rpki-client