Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/07IIkvcGUCccFKE_bIpQcqqEF3E.roa
File: 07IIkvcGUCccFKE_bIpQcqqEF3E.roa (raw, json)
Hash identifier: /QsECVqOnIBp10ZhNROvhrPngAr5rseZNKopIghSpWo=
Subject key identifier: D3:B2:08:92:F7:06:50:27:1C:14:A1:3F:6C:8A:50:72:AA:84:17:71
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 019E3C820EE04947CBCA351A99D13442D7D6
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/07IIkvcGUCccFKE_bIpQcqqEF3E.roa
Signing time: Mon 18 May 2026 19:13:36 +0000
ROA not before: Mon 18 May 2026 19:13:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25198
IP address blocks: 2a10:3c82::/32 maxlen: 32
2a10:3c86::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 20 May 2026 13:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:3c:82:0e:e0:49:47:cb:ca:35:1a:99:d1:34:42:d7:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: May 18 19:13:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d3b20892f70650271c14a13f6c8a5072aa841771
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:5d:7b:f0:23:01:c0:9d:27:97:64:df:3d:0d:
f5:4e:de:b0:f8:14:29:be:2f:24:bd:1e:e3:dd:6f:
1c:02:8e:ae:f4:10:dd:b3:dd:d6:44:89:1b:cc:2b:
48:9a:f1:51:7f:f9:91:19:e5:cd:a3:25:8a:85:ef:
b9:58:16:18:61:c0:ec:ab:cf:ce:21:9e:a0:58:a8:
76:de:2d:47:8e:80:69:51:ac:6d:8c:1b:58:ea:d7:
86:c4:7b:90:88:72:d7:ca:29:0e:ea:be:3e:52:49:
b6:2d:0f:74:aa:2f:85:c5:08:b9:e0:4c:a2:3d:4b:
d4:94:09:a9:a4:ce:3e:6b:6d:46:47:83:91:a4:3b:
d7:aa:53:72:c0:80:36:3e:f4:6f:bd:03:ae:86:07:
a4:c8:69:1f:0e:a6:08:1e:ba:07:29:de:f0:74:0f:
e7:1b:12:af:98:2f:94:19:09:94:10:64:65:ce:4c:
91:07:8b:10:05:70:72:a8:f3:91:6a:1d:1a:44:0f:
6e:48:4e:e6:58:f6:f5:f4:ba:b7:50:2c:c4:1f:4e:
8c:92:61:34:e3:56:04:0d:79:05:07:59:b2:1c:ac:
53:fb:37:9b:40:5c:e3:df:e2:e7:4e:a0:c8:60:8d:
56:11:ce:7a:aa:16:8e:0d:f0:27:96:ca:94:e0:85:
1b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:B2:08:92:F7:06:50:27:1C:14:A1:3F:6C:8A:50:72:AA:84:17:71
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/07IIkvcGUCccFKE_bIpQcqqEF3E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:3c82::/32
2a10:3c86::/32
Signature Algorithm: sha256WithRSAEncryption
66:c2:04:4f:8d:7e:d5:ed:99:bd:fa:93:40:35:92:2a:e5:c5:
2a:f8:f6:f1:6f:6d:8f:60:96:53:60:ba:c7:e9:68:99:18:fa:
5a:b9:98:1f:c7:6d:9f:bc:3f:c7:04:09:69:7d:fa:6c:9b:c1:
29:63:2a:ca:1b:ad:73:50:16:99:47:08:a1:80:51:da:da:12:
b3:23:9d:b2:d1:27:dc:fc:7d:be:7d:84:f2:3d:8c:40:d0:72:
e5:c0:c1:f4:8c:e6:b2:38:05:bd:c6:f4:82:df:67:fb:84:16:
cd:f4:b5:d3:58:28:d8:62:e4:9d:96:3c:d3:12:b8:6c:74:f3:
44:00:7e:06:64:07:17:47:49:fe:18:dc:f2:fe:4d:1e:f6:a6:
5a:47:40:84:9a:08:b0:59:f5:22:35:d2:fb:1c:91:2d:93:c8:
49:27:f4:ea:9f:a4:bf:d5:91:a6:04:fe:de:a0:6c:d8:b3:9b:
66:e2:0d:a8:ec:06:6c:2d:e8:53:15:27:9d:5a:ee:58:0a:ea:
8a:9f:df:c2:76:07:1a:3b:c2:a5:57:83:87:83:9a:a1:64:c2:
cc:a9:f6:47:89:06:54:b7:a3:e5:8c:54:cb:10:f5:fb:11:b4:
8a:89:74:7e:9e:28:32:29:57:91:57:bd:10:67:f2:77:5b:e9:
fe:ec:25:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 19 22:45:50 2026 by rpki-client