Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/0pZH-yP2v1LoDsuEATNBqk-3uNA.roa
File: 0pZH-yP2v1LoDsuEATNBqk-3uNA.roa (raw, json)
Hash identifier: exp+k6XTe/xUCmXWXxJsy5dJWXzcsHXqYRQMRKewPPA=
Subject key identifier: D2:96:47:FB:23:F6:BF:52:E8:0E:CB:84:01:33:41:AA:4F:B7:B8:D0
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 01A18734D02BAD48925416376C03831347B9
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/0pZH-yP2v1LoDsuEATNBqk-3uNA.roa
Signing time: Thu 29 Oct 2026 10:29:07 +0000
ROA not before: Thu 29 Oct 2026 10:29:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 2a06:5fc0::/29 maxlen: 29
2a0b:ac00::/29 maxlen: 29
2a10:b40::/29 maxlen: 29
2a10:3c81::/32 maxlen: 32
2a10:3f80::/29 maxlen: 29
2a10:77c0::/29 maxlen: 29
2a13:b4c0::/29 maxlen: 29
2a13:b9c0::/29 maxlen: 29
2a13:c340::/29 maxlen: 29
2a14:62c0::/29 maxlen: 29
2a14:68c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 14:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:87:34:d0:2b:ad:48:92:54:16:37:6c:03:83:13:47:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Oct 29 10:29:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d29647fb23f6bf52e80ecb84013341aa4fb7b8d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:7c:0a:ef:77:3d:6f:74:37:a8:19:7a:39:fc:
4d:ea:64:ea:a6:21:d4:dc:d0:4b:02:f6:b7:80:d8:
7b:05:6d:7f:41:eb:4f:72:8e:60:66:e4:51:c3:0f:
09:6e:9e:33:27:67:4e:b3:2b:95:b1:68:14:ea:dc:
96:28:c9:37:2d:80:d3:b3:35:f0:0d:d8:6c:72:83:
f2:fc:ef:23:f8:ed:0e:d1:d1:1a:45:50:e8:9a:68:
a5:29:c4:9b:63:ee:f4:fe:1e:87:b7:4b:4f:ce:d5:
37:7b:9f:58:1d:cb:72:98:fe:ea:fc:27:e1:7a:0b:
78:3a:8d:89:a6:d3:71:2d:c4:f0:7f:e3:2f:c2:33:
8d:0b:fb:ae:e1:5c:18:a8:05:c8:63:f6:9a:b5:c8:
91:a2:0f:07:33:5b:76:9c:52:5f:7d:b6:24:04:46:
36:b6:c6:45:b9:08:46:0c:94:7b:44:7d:79:a3:fa:
ec:02:0e:ef:c5:0c:a5:f5:f7:9d:c3:cc:38:29:ef:
df:45:f4:48:9d:3d:d1:be:b8:e9:b3:59:dd:16:9e:
c9:d9:00:d2:6d:2d:48:47:67:7c:d0:93:65:1f:9f:
bf:b6:4c:2e:7f:6a:84:08:f2:3a:4e:fd:ef:a0:f1:
ae:e8:9a:d1:c6:39:47:2e:03:ed:ee:28:fb:d3:bc:
eb:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:96:47:FB:23:F6:BF:52:E8:0E:CB:84:01:33:41:AA:4F:B7:B8:D0
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/0pZH-yP2v1LoDsuEATNBqk-3uNA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:5fc0::/29
2a0b:ac00::/29
2a10:b40::/29
2a10:3c81::/32
2a10:3f80::/29
2a10:77c0::/29
2a13:b4c0::/29
2a13:b9c0::/29
2a13:c340::/29
2a14:62c0::/29
2a14:68c0::/29
Signature Algorithm: sha256WithRSAEncryption
b9:ca:a5:ec:6d:c2:8c:c2:63:0c:7a:fc:cd:6a:42:17:ea:5f:
4f:96:85:d9:e4:33:01:44:04:13:50:b1:e4:dd:14:23:32:2d:
aa:f5:97:6b:d9:af:53:1b:5e:dc:66:dd:92:74:23:c9:33:a8:
16:c8:8a:f5:88:3b:e4:0e:c9:ca:a1:21:ab:36:dd:27:e9:8d:
19:62:4c:2c:4a:2d:15:ff:47:1a:74:8a:e1:c3:c2:cc:59:b7:
45:4d:cc:76:77:c4:a6:1c:5b:d4:52:35:c3:1b:4e:0c:83:d0:
bd:7f:95:a9:3d:b9:b4:b9:73:53:ea:e4:06:f2:35:7e:27:6c:
a2:b4:31:68:1b:39:1c:0c:93:80:dd:48:7c:25:a9:7c:2f:ad:
d5:60:44:87:48:c3:9f:c4:48:64:e0:ff:b4:d0:76:38:3e:a2:
5e:5b:62:ba:62:8e:b8:15:af:37:7a:d2:a4:bb:6c:bb:3c:b0:
4c:ca:70:11:92:04:d5:bd:dd:c4:6b:e9:e3:02:2e:f6:d2:49:
99:28:2c:ff:26:44:39:8b:4b:4f:4c:2e:eb:ad:bf:8c:2f:ed:
74:35:3d:3c:6a:5c:f4:8f:79:6d:3d:47:0e:aa:34:46:31:5c:
5f:20:e6:2b:06:83:e6:9b:d0:46:19:af:dc:6e:b7:e3:b4:e9:
67:4b:2e:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 23:13:45 2026 by rpki-client