Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/14gmHyQe4PBetMf4RzBQhNC2FOk.roa
File: 14gmHyQe4PBetMf4RzBQhNC2FOk.roa (raw, json)
Hash identifier: GGBNsYzCN+EF6PiC/qvnbnXzs5PIoYQwa6DEc9vP7DY=
Subject key identifier: D7:88:26:1F:24:1E:E0:F0:5E:B4:C7:F8:47:30:50:84:D0:B6:14:E9
Certificate issuer: /CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Certificate serial: 019F713B86CCF6812E6020544A3B75E18123
Authority key identifier: E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/14gmHyQe4PBetMf4RzBQhNC2FOk.roa
Signing time: Fri 17 Jul 2026 17:59:14 +0000
ROA not before: Fri 17 Jul 2026 17:59:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202294
IP address blocks: 2a0a:37c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft
rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:71:3b:86:cc:f6:81:2e:60:20:54:4a:3b:75:e1:81:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Validity
Not Before: Jul 17 17:59:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d788261f241ee0f05eb4c7f847305084d0b614e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a5:a8:02:75:42:8d:1a:06:00:3e:a5:62:38:
65:54:5a:4b:6a:3b:7b:20:75:97:be:33:52:4e:e9:
36:91:64:30:15:3b:4f:e2:40:59:48:ca:db:ff:ad:
58:4c:2b:bf:3f:24:8e:da:f1:58:1c:dc:50:3a:3b:
88:3f:e8:95:74:5c:8e:62:e8:d9:a7:8f:17:9b:48:
42:7d:5d:0e:35:4a:74:73:7f:16:9e:5e:40:fb:88:
a3:23:67:42:b9:5f:69:d2:0b:b4:6d:de:48:2b:6f:
6b:53:1e:63:a7:7d:9c:c3:4c:02:1a:6e:2c:b7:ba:
86:47:ad:9d:7b:2d:64:0b:7d:b1:1b:a7:1a:b3:e8:
49:4a:d1:e2:26:00:3a:7f:d4:2f:ce:83:02:71:e7:
a7:79:c0:2a:29:0d:6d:29:23:b7:e8:51:8d:9f:c1:
c2:37:47:57:95:6b:dd:7b:c0:ba:fb:d4:57:56:72:
09:1d:8d:02:74:64:1e:de:7c:82:3a:4a:aa:11:12:
c6:71:7e:55:e0:e1:7d:db:73:86:b7:f4:0e:bb:16:
d3:fa:21:ca:20:67:33:87:d9:97:fd:6e:bd:2e:30:
01:13:fc:9b:d2:e2:1c:4d:00:5d:ea:c7:59:d6:c1:
09:74:82:66:9f:24:74:13:b4:c4:dd:94:5d:8b:6a:
44:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:88:26:1F:24:1E:E0:F0:5E:B4:C7:F8:47:30:50:84:D0:B6:14:E9
X509v3 Authority Key Identifier:
keyid:E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/14gmHyQe4PBetMf4RzBQhNC2FOk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:37c0::/29
Signature Algorithm: sha256WithRSAEncryption
6b:1e:e0:82:46:c1:5f:99:7d:81:7a:4b:d6:3b:9b:f3:c9:70:
fb:53:0b:aa:f4:2a:df:e5:de:82:bb:11:92:4d:be:6a:d6:6c:
be:04:60:05:0f:d3:62:75:06:87:46:d5:98:b2:f0:92:86:90:
49:79:c0:d0:03:b9:e0:15:f2:5f:57:3e:92:fa:a2:2b:fb:59:
46:8b:37:46:09:89:58:96:04:84:c3:cf:f1:8f:9c:4b:c4:fa:
d9:dd:4e:01:98:ce:4f:ae:84:be:d6:0d:31:ad:ae:64:b7:0d:
0b:43:6c:8e:70:b9:bb:d6:63:27:06:70:bc:6d:7f:b4:b7:0e:
9a:2b:a9:8f:3c:12:5c:55:7f:a3:68:81:2a:d4:00:86:b9:49:
db:65:6d:ac:32:dd:99:08:12:d2:aa:61:f8:fe:d1:93:70:4b:
32:6d:96:e5:93:ed:ff:39:7b:76:5e:e7:1c:01:1b:78:5a:af:
31:07:bf:8c:2d:66:2d:f2:d5:b6:c3:3f:e5:75:e9:af:7f:d8:
0a:67:9a:e1:e8:6d:a5:ca:9e:77:51:05:e3:af:bf:d1:da:50:
1a:d2:df:4c:20:93:ad:43:db:a9:0a:04:03:c2:24:bd:c4:7a:
c9:ae:ee:c3:69:df:5c:86:f5:d6:24:fa:9d:4e:b8:9b:c4:5c:
14:ca:66:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:30:12 2026 by rpki-client