Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/F0DsUwtjcsCFIkHdf0uZYEsNk1A.roa
File: F0DsUwtjcsCFIkHdf0uZYEsNk1A.roa (raw, json)
Hash identifier: MJldlBmmTbUuFNsIiIy5OrIVclgIPB0rA5Rez/d3Fz4=
Subject key identifier: 17:40:EC:53:0B:63:72:C0:85:22:41:DD:7F:4B:99:60:4B:0D:93:50
Certificate issuer: /CN=a7a4e23482268475c1b935637d0002c2fd2993b8
Certificate serial: 019F8D5EE5541F13022E6EDD9E326D5E6656
Authority key identifier: A7:A4:E2:34:82:26:84:75:C1:B9:35:63:7D:00:02:C2:FD:29:93:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/F0DsUwtjcsCFIkHdf0uZYEsNk1A.roa
Signing time: Thu 23 Jul 2026 05:07:14 +0000
ROA not before: Thu 23 Jul 2026 05:07:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214456
IP address blocks: 2a14:ae00:4::/48 maxlen: 48
2a14:ae00:105::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8d:5e:e5:54:1f:13:02:2e:6e:dd:9e:32:6d:5e:66:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7a4e23482268475c1b935637d0002c2fd2993b8
Validity
Not Before: Jul 23 05:07:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1740ec530b6372c0852241dd7f4b99604b0d9350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:45:7a:17:93:23:b5:c8:38:66:c1:21:14:65:
7f:e2:3a:2e:b4:0a:fe:46:63:b6:aa:90:8d:85:b0:
b0:80:b8:b9:54:8f:19:2c:6a:fd:da:2f:3b:83:f6:
ff:69:a6:73:b0:38:42:ae:fb:f1:ef:32:e9:14:28:
68:df:20:c8:57:c1:24:c5:1d:57:a3:f5:a0:ab:79:
46:3d:0f:8f:b9:cb:5f:13:b7:37:a9:4a:31:ab:63:
00:0d:2b:9d:3f:95:7d:fe:84:3f:7e:64:c1:7b:61:
3b:13:8d:35:f6:12:0b:f8:18:b7:c2:48:40:b4:a4:
43:60:24:4f:a5:74:ca:fa:16:1d:37:8a:af:2e:4b:
8e:5c:7c:fe:84:49:f5:e4:d8:d4:a4:62:92:d5:64:
ae:66:0a:6d:11:f7:f0:7e:94:5b:97:77:c4:67:9f:
5f:3d:69:c3:3c:17:38:55:08:bd:49:b0:d5:79:6a:
9b:ce:9e:b9:25:69:8b:58:a7:df:f7:d2:7b:ff:7d:
af:67:6c:4a:d1:bd:5a:e5:35:15:f0:af:9e:33:ce:
a7:60:a9:fb:cb:56:31:2d:4e:9b:8b:8f:7e:56:24:
e5:f1:80:36:1d:fb:db:75:a3:45:cc:e7:60:19:c1:
9a:0a:20:3e:05:a6:3d:c2:4c:10:47:00:ec:2e:55:
3a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:40:EC:53:0B:63:72:C0:85:22:41:DD:7F:4B:99:60:4B:0D:93:50
X509v3 Authority Key Identifier:
keyid:A7:A4:E2:34:82:26:84:75:C1:B9:35:63:7D:00:02:C2:FD:29:93:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/F0DsUwtjcsCFIkHdf0uZYEsNk1A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:ae00:4::/48
2a14:ae00:105::/48
Signature Algorithm: sha256WithRSAEncryption
a0:1a:0e:05:bb:b2:2f:4c:c8:b6:b2:43:fb:40:42:8d:3c:c0:
4c:86:d5:7f:7f:18:a4:ef:0f:d3:f8:a4:4b:5b:cd:84:87:11:
7f:ad:11:25:c5:75:80:34:13:06:97:95:3d:53:47:3d:b6:da:
cc:07:7e:ec:2b:81:ff:28:ff:5f:0c:3c:27:76:36:53:d6:2f:
4c:ce:58:c1:03:12:5d:b6:c3:a3:57:b9:a8:c6:d8:84:0c:fa:
b4:39:04:e9:d2:2c:0c:15:d5:8d:21:5e:b7:43:28:82:cc:06:
e2:f2:23:a7:ac:90:86:4f:97:7d:8f:a2:6e:c2:71:3c:74:00:
9d:74:3f:bb:dd:8e:81:a7:d5:67:fd:1e:85:e2:b6:d9:9b:93:
64:54:87:69:a3:9b:6d:7a:e0:2f:45:02:11:c1:cc:d0:21:55:
5b:0d:fe:e5:b6:7d:0d:94:d3:1f:81:c2:b8:d3:31:28:5b:b2:
42:4b:b7:a9:d7:b1:be:08:71:93:41:c7:b7:72:14:a7:90:8f:
82:b4:44:8c:8a:c0:51:15:2e:75:b9:53:e2:7b:32:3e:03:04:
73:1d:f9:0b:af:23:d0:e3:dd:7a:b2:c4:14:3b:12:47:be:5a:
a2:fd:cb:c5:b0:7a:1a:dd:f3:17:c4:2e:c4:04:e5:ed:83:25:
be:55:f0:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:19:52 2026 by rpki-client