Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/1bG5xZQ0H-KzWKogqqN2zPxzCbM.roa
File: 1bG5xZQ0H-KzWKogqqN2zPxzCbM.roa (raw, json)
Hash identifier: U2uhnf2fXsKMihXA4q0MxzgKjZSB5Gysh+eBxqLsxQo=
Subject key identifier: D5:B1:B9:C5:94:34:1F:E2:B3:58:AA:20:AA:A3:76:CC:FC:73:09:B3
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 019D5E9FD4EFC02C78C4F97275E7950D23AA
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/1bG5xZQ0H-KzWKogqqN2zPxzCbM.roa
Signing time: Sun 05 Apr 2026 17:10:26 +0000
ROA not before: Sun 05 Apr 2026 17:10:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 399486
IP address blocks: 2a13:c3c4::/30 maxlen: 30
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 Apr 2026 17:10:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:5e:9f:d4:ef:c0:2c:78:c4:f9:72:75:e7:95:0d:23:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Apr 5 17:10:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d5b1b9c594341fe2b358aa20aaa376ccfc7309b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6b:5c:86:3c:ba:89:8b:b9:6a:66:92:7f:7e:
d2:11:8b:94:15:9e:7b:a9:ec:bd:a5:17:1f:d6:be:
f6:34:a9:93:7f:d4:63:4f:69:2e:48:42:df:94:9c:
a2:53:2a:14:36:b4:93:89:0a:3b:44:2d:09:91:fa:
e1:78:03:e3:05:b0:ee:6d:4e:09:94:3b:04:da:72:
28:4d:a7:d0:22:84:c4:77:9e:30:2a:7f:5b:11:01:
76:0e:7c:d7:0c:2d:c0:5a:f1:8b:76:59:c2:10:d3:
1f:ba:de:f8:0b:df:85:9f:5b:72:6f:df:56:ce:89:
a0:c0:4b:ac:1f:49:f3:43:13:60:8a:fc:99:ef:dd:
cf:6b:52:40:24:86:d3:20:73:45:e2:7a:4f:86:05:
c3:6a:02:0d:2e:27:2f:cf:99:50:83:f8:7f:9c:f8:
e9:a3:4e:2e:30:f7:be:81:6c:21:13:76:b9:1f:2c:
8e:1a:89:9f:33:99:cb:4a:4e:e6:98:06:93:f4:d5:
f2:2b:81:4c:38:de:3b:6a:34:8b:5f:a9:a1:d6:83:
cd:92:6e:3d:7e:ea:fe:a9:cb:fe:0c:6b:ba:27:a6:
7b:84:8a:4a:89:ff:64:29:e4:d2:92:bc:72:c8:41:
d2:92:fb:b1:c7:02:16:71:c9:93:3b:f5:9b:42:82:
7c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:B1:B9:C5:94:34:1F:E2:B3:58:AA:20:AA:A3:76:CC:FC:73:09:B3
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/1bG5xZQ0H-KzWKogqqN2zPxzCbM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:c3c4::/30
Signature Algorithm: sha256WithRSAEncryption
a2:76:e4:0f:d9:d0:c1:52:34:4f:c2:44:83:1a:9e:56:16:2c:
07:95:86:a3:84:c8:a6:14:3d:24:ad:46:50:52:67:c0:14:84:
a8:57:b6:5b:9d:96:b6:19:4a:c3:c7:9b:bd:b6:65:09:6f:c0:
14:56:f5:a3:1c:e6:ef:21:55:15:75:46:4e:40:7d:2b:0c:94:
48:a8:09:a5:fd:d9:9f:da:09:fa:7d:05:7e:d6:e2:2f:bd:39:
d5:eb:c5:66:84:4c:b8:72:53:15:d1:82:cc:8f:ff:0e:f0:77:
6f:42:87:3b:cd:d8:1d:c6:d7:ff:dc:1e:ea:b4:3e:2c:c6:5d:
0a:8d:66:00:66:75:c5:ad:a0:49:7a:90:42:25:e5:5c:d4:42:
1d:de:41:8b:e7:38:c2:57:74:fc:ac:7a:56:91:0d:2d:ae:59:
cf:4b:a8:45:27:c8:7b:9d:48:39:b8:ad:a6:24:c7:c2:34:d0:
80:46:b1:b8:43:fd:eb:66:21:f8:9c:35:42:27:9f:48:c9:28:
71:47:3a:87:1d:6a:66:46:61:04:80:a7:1d:64:73:ac:49:6c:
4c:dc:0e:7e:d9:51:4e:10:60:23:ca:4c:9f:5d:2c:7e:5a:58:
5b:03:1c:fc:65:15:c7:da:24:f8:ac:3b:ca:15:11:ea:a6:3f:
33:93:cc:65
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZ1en9TvwCx4xPlydeeVDSOqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMTQxMTJkMDVlOWQ4NzYxNDlkMjc3OGQ0OGVkYWFhMzI0
ZGIwYTUwHhcNMjYwNDA1MTcxMDI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNWIxYjljNTk0MzQxZmUyYjM1OGFhMjBhYWEzNzZjY2ZjNzMwOWIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2tchjy6iYu5amaSf37SEYuUFZ57
qey9pRcf1r72NKmTf9RjT2kuSELflJyiUyoUNrSTiQo7RC0JkfrheAPjBbDubU4J
lDsE2nIoTafQIoTEd54wKn9bEQF2DnzXDC3AWvGLdlnCENMfut74C9+Fn1tyb99W
zomgwEusH0nzQxNgivyZ793Pa1JAJIbTIHNF4npPhgXDagINLicvz5lQg/h/nPjp
o04uMPe+gWwhE3a5HyyOGomfM5nLSk7mmAaT9NXyK4FMON47ajSLX6mh1oPNkm49
fur+qcv+DGu6J6Z7hIpKif9kKeTSkrxyyEHSkvuxxwIWccmTO/WbQoJ86QIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFNWxucWUNB/is1iqIKqjdsz8cwmzMB8GA1UdIwQY
MBaAFE8UES0F6dh2FJ0neNSO2qoyTbClMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUt
YmFmYmRmYzgxMzJhLzEvMWJHNXhaUTBILUt6V0tvZ3FxTjJ6UHh6Q2JNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUtYmFmYmRmYzgxMzJh
LzEvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUCKhPDxDAN
BgkqhkiG9w0BAQsFAAOCAQEAonbkD9nQwVI0T8JEgxqeVhYsB5WGo4TIphQ9JK1G
UFJnwBSEqFe2W52WthlKw8ebvbZlCW/AFFb1oxzm7yFVFXVGTkB9KwyUSKgJpf3Z
n9oJ+n0FftbiL7051evFZoRMuHJTFdGCzI//DvB3b0KHO83YHcbX/9we6rQ+LMZd
Co1mAGZ1xa2gSXqQQiXlXNRCHd5Bi+c4wld0/Kx6VpENLa5Zz0uoRSfIe51IObit
piTHwjTQgEaxuEP962Yh+Jw1QiefSMkocUc6hx1qZkZhBICnHWRzrElsTNwOftlR
ThBgI8pMn10sflpYWwMc/GUVx9ok+Kw7yhUR6qY/M5PMZQ==
-----END CERTIFICATE-----
Generated at Mon Apr 6 03:33:19 2026 by rpki-client