Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/4WkSsluIVPvOQ75uo-CwC7bAJAI.roa
File: 4WkSsluIVPvOQ75uo-CwC7bAJAI.roa (raw, json)
Hash identifier: iLoEphNORlY6upCSD3B79ceZRAJUkFM+nGa9d9Pk0ys=
Subject key identifier: E1:69:12:B2:5B:88:54:FB:CE:43:BE:6E:A3:E0:B0:0B:B6:C0:24:02
Certificate issuer: /CN=a7a4e23482268475c1b935637d0002c2fd2993b8
Certificate serial: 01A0C81705FFD9C6C4BB965A9BAB3A5BF3AB
Authority key identifier: A7:A4:E2:34:82:26:84:75:C1:B9:35:63:7D:00:02:C2:FD:29:93:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/4WkSsluIVPvOQ75uo-CwC7bAJAI.roa
Signing time: Tue 22 Sep 2026 07:49:07 +0000
ROA not before: Tue 22 Sep 2026 07:49:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205054
IP address blocks: 2a14:ae00:3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 07:03:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:17:05:ff:d9:c6:c4:bb:96:5a:9b:ab:3a:5b:f3:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7a4e23482268475c1b935637d0002c2fd2993b8
Validity
Not Before: Sep 22 07:49:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e16912b25b8854fbce43be6ea3e0b00bb6c02402
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:8c:4d:21:f3:20:65:b9:13:53:78:e5:96:6c:
bf:e5:a7:03:70:90:36:3d:b0:b5:4d:c7:22:b3:be:
74:7b:6d:ec:5f:d9:46:76:cd:c0:e6:8f:d6:39:ea:
97:29:40:4b:c6:0e:39:71:9f:2c:5f:ed:46:b3:7d:
a4:0d:ce:79:3a:5c:a2:4b:00:8e:c4:d7:91:e3:44:
e2:cc:c8:83:44:d3:48:6f:3c:40:2a:bc:95:78:6a:
33:13:15:82:25:fe:f8:fc:b4:ad:50:a9:b0:86:e6:
4b:75:3f:75:6b:e6:8a:ac:a8:b1:26:c1:0f:37:8c:
95:95:9a:c2:65:b8:d1:89:98:a2:9a:04:2c:56:64:
bb:20:3a:bd:e3:af:79:45:92:45:2b:6a:00:54:71:
6c:1d:cc:1c:90:a7:17:24:ee:b2:8d:da:a2:d0:73:
dc:60:c9:c1:66:1d:92:96:7b:c2:6a:ff:20:5a:43:
42:2c:26:e4:96:cc:0a:6f:b6:ba:29:31:88:15:ab:
32:b7:f1:f1:5c:65:72:21:cc:ec:44:14:e3:f8:1d:
3d:3e:e8:b7:56:c2:26:c1:72:4b:8c:32:cd:93:f6:
f0:fa:8a:9b:f9:22:07:66:e3:f6:0d:f3:74:ff:a0:
6c:79:f5:75:ac:13:0b:8c:3e:c8:95:39:a7:ae:1f:
0a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:69:12:B2:5B:88:54:FB:CE:43:BE:6E:A3:E0:B0:0B:B6:C0:24:02
X509v3 Authority Key Identifier:
keyid:A7:A4:E2:34:82:26:84:75:C1:B9:35:63:7D:00:02:C2:FD:29:93:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/4WkSsluIVPvOQ75uo-CwC7bAJAI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:ae00:3::/48
Signature Algorithm: sha256WithRSAEncryption
46:66:a5:97:82:53:20:d0:ae:7c:91:b0:79:e5:e4:24:38:eb:
36:53:ed:32:36:27:9f:12:b9:04:de:8b:91:6b:b7:8f:a7:f1:
72:80:84:c4:92:82:38:3a:16:6b:a9:78:2f:9d:23:30:5d:66:
bd:8a:59:2e:e9:69:8f:29:17:70:b5:4c:97:a5:2d:20:4d:17:
83:f0:ef:1c:cf:60:dd:82:21:51:99:6f:64:21:eb:ab:22:e0:
89:bd:cd:e9:d0:9f:2e:58:a9:b7:99:b9:1c:27:c8:ba:4a:4b:
d1:00:6b:fe:57:86:cf:15:bd:cc:ab:f2:bd:06:a4:b2:78:64:
71:69:09:a5:8e:c9:75:87:22:e8:98:c8:d0:e9:d6:9c:48:3b:
36:da:46:a7:91:08:12:e5:83:b3:df:99:f7:76:8e:e9:95:bb:
0f:b5:fe:fd:42:65:38:1e:b8:ed:42:a6:07:6c:16:43:c6:3b:
a7:ba:36:52:05:79:b2:e4:b4:f2:1d:ef:80:9f:2e:be:ad:7e:
5a:19:7d:1f:7e:ec:27:d9:f4:5f:a3:30:b2:aa:ab:68:a6:c4:
08:47:e6:9c:7c:0f:77:32:f7:fa:ee:91:6d:e6:c3:99:87:14:
27:eb:11:de:d8:1c:e2:a6:72:bd:03:05:40:2b:24:41:86:9e:
e4:37:b1:6e
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAaDIFwX/2cbEu5Zam6s6W/OrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3YTRlMjM0ODIyNjg0NzVjMWI5MzU2MzdkMDAwMmMyZmQy
OTkzYjgwHhcNMjYwOTIyMDc0OTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMTY5MTJiMjViODg1NGZiY2U0M2JlNmVhM2UwYjAwYmI2YzAyNDAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4xNIfMgZbkTU3jllmy/5acDcJA2
PbC1Tccis750e23sX9lGds3A5o/WOeqXKUBLxg45cZ8sX+1Gs32kDc55OlyiSwCO
xNeR40TizMiDRNNIbzxAKryVeGozExWCJf74/LStUKmwhuZLdT91a+aKrKixJsEP
N4yVlZrCZbjRiZiimgQsVmS7IDq94695RZJFK2oAVHFsHcwckKcXJO6yjdqi0HPc
YMnBZh2SlnvCav8gWkNCLCbklswKb7a6KTGIFasyt/HxXGVyIczsRBTj+B09Pui3
VsImwXJLjDLNk/bw+oqb+SIHZuP2DfN0/6BsefV1rBMLjD7IlTmnrh8KdwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFOFpErJbiFT7zkO+bqPgsAu2wCQCMB8GA1UdIwQY
MBaAFKek4jSCJoR1wbk1Y30AAsL9KZO4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcDZUaU5JSW1oSFhCdVRWamZRQUN3djBwazdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8wN2Y2MjMtMTRmYi00YTgwLTlmNDYt
MjMzMzFiNjQ5MTZjLzEvNFdrU3NsdUlWUHZPUTc1dW8tQ3dDN2JBSkFJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy8wN2Y2MjMtMTRmYi00YTgwLTlmNDYtMjMzMzFiNjQ5MTZj
LzEvcDZUaU5JSW1oSFhCdVRWamZRQUN3djBwazdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhSuAAAD
MA0GCSqGSIb3DQEBCwUAA4IBAQBGZqWXglMg0K58kbB55eQkOOs2U+0yNiefErkE
3ouRa7ePp/FygITEkoI4OhZrqXgvnSMwXWa9ilku6WmPKRdwtUyXpS0gTReD8O8c
z2DdgiFRmW9kIeurIuCJvc3p0J8uWKm3mbkcJ8i6SkvRAGv+V4bPFb3Mq/K9BqSy
eGRxaQmljsl1hyLomMjQ6dacSDs22kankQgS5YOz35n3do7plbsPtf79QmU4Hrjt
QqYHbBZDxjunujZSBXmy5LTyHe+Any6+rX5aGX0ffuwn2fRfozCyqqtopsQIR+ac
fA93Mvf67pFt5sOZhxQn6xHe2BzipnK9AwVAKyRBhp7kN7Fu
-----END CERTIFICATE-----
Generated at Fri Sep 25 17:28:41 2026 by rpki-client