Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/4Q2XGqRZSVELE51IERXugt-cYEc.roa
File: 4Q2XGqRZSVELE51IERXugt-cYEc.roa (raw, json)
Hash identifier: u6DTjthKJA5oL/NFuVQLUpZrcljB5ymPjzGx4Imf1jg=
Subject key identifier: E1:0D:97:1A:A4:59:49:51:0B:13:9D:48:11:15:EE:82:DF:9C:60:47
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019CACF1B946C2E0E6D161EB95061A452A8C
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/4Q2XGqRZSVELE51IERXugt-cYEc.roa
Signing time: Mon 02 Mar 2026 05:07:28 +0000
ROA not before: Mon 02 Mar 2026 05:07:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215110
IP address blocks: 2a02:2fc0:1b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Mar 2026 16:05:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:f1:b9:46:c2:e0:e6:d1:61:eb:95:06:1a:45:2a:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Mar 2 05:07:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e10d971aa45949510b139d481115ee82df9c6047
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:55:09:7c:94:25:29:c0:88:30:c0:3f:e7:00:
7d:f9:bb:b2:36:5c:9c:70:2a:19:18:19:6c:81:0b:
75:0f:f0:56:ad:f2:bf:4e:ae:44:f5:71:77:30:ad:
b5:c9:2e:93:d1:ad:a7:b9:6c:56:9a:34:76:b0:04:
23:41:ec:32:85:48:93:0d:a0:aa:fa:3e:3e:cb:c5:
dd:7f:80:27:bd:ef:de:06:2f:35:a7:47:4b:d8:e1:
f3:92:21:84:f6:23:a7:36:cf:61:23:39:18:3c:87:
70:59:c4:eb:27:12:bd:b4:68:ec:7c:6e:b8:c1:31:
a7:ff:20:39:84:80:39:94:86:d6:67:23:07:fc:b4:
d9:9a:1f:8e:7c:9e:bf:38:9e:f9:6e:38:7a:86:1a:
e1:0f:35:63:14:34:c8:4f:ff:71:4b:71:69:c1:2f:
c8:4f:94:29:00:4c:04:da:80:ee:18:78:cc:cf:0d:
8f:13:b3:d0:42:27:2e:16:72:c3:fb:ff:40:c6:f6:
d0:52:2a:04:d4:08:bf:60:bc:1c:ad:0b:2b:f5:42:
3a:31:bb:62:94:16:4d:e2:19:cf:4d:e8:b4:7a:4b:
d3:50:46:99:da:2b:49:98:88:18:c2:b6:45:30:09:
93:20:0e:ee:d3:8d:d3:50:c8:39:4b:66:54:af:9d:
4f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:0D:97:1A:A4:59:49:51:0B:13:9D:48:11:15:EE:82:DF:9C:60:47
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/4Q2XGqRZSVELE51IERXugt-cYEc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:2fc0:1b::/48
Signature Algorithm: sha256WithRSAEncryption
29:74:fa:c1:6b:89:a7:0b:cc:d7:25:01:e5:02:fa:dd:5c:ca:
58:4b:c3:fb:48:63:a4:ea:9f:71:8e:af:a9:82:39:31:a2:d8:
2d:e9:83:80:74:d1:ce:dd:56:11:b0:0c:b1:2c:b0:64:c9:1c:
ab:77:86:7b:7e:b6:31:19:e4:ea:0d:c6:f5:5a:2b:a2:a0:85:
de:76:72:fa:f3:3d:22:c0:28:10:b9:af:2b:37:01:00:77:37:
3c:27:86:05:6d:b1:80:62:7e:ba:94:48:59:da:7e:49:46:11:
71:ef:43:ea:07:21:32:d6:d0:3e:30:92:8d:a7:81:8a:a4:51:
1b:ac:03:aa:37:7a:a1:7b:09:8c:ca:3d:f8:1b:60:ed:fa:ac:
dc:c1:73:35:fa:b3:08:6e:dd:a0:b6:68:ff:31:58:22:5c:37:
37:80:ed:17:ac:e3:24:7a:3f:d0:fe:ab:1b:24:58:9a:b6:c9:
f7:23:c9:cd:5e:95:c4:32:09:33:43:89:ed:14:4a:ba:42:eb:
90:37:41:a7:eb:4b:c6:73:8d:36:0c:6d:97:22:54:b1:17:e4:
91:3a:36:d5:67:bf:4a:73:07:e1:3a:7b:7f:c4:b2:5f:67:2a:
99:01:16:0d:8e:62:d7:5d:5d:ad:17:3f:61:ad:be:79:d6:96:
55:d7:03:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 23:39:07 2026 by rpki-client