Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/21p-nNlBjWDRImIwTnEcg-xbhhQ.roa
File: 21p-nNlBjWDRImIwTnEcg-xbhhQ.roa (raw, json)
Hash identifier: e5NNXjvrBe0aJaEFMzVszqGIBhSjffSWQwd4+GDSPBY=
Subject key identifier: DB:5A:7E:9C:D9:41:8D:60:D1:22:62:30:4E:71:1C:83:EC:5B:86:14
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 019F835A816BE377EE0B2EA978705B0A9A61
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/21p-nNlBjWDRImIwTnEcg-xbhhQ.roa
Signing time: Tue 21 Jul 2026 06:26:14 +0000
ROA not before: Tue 21 Jul 2026 06:26:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25198
IP address blocks: 2a10:3c82::/32 maxlen: 32
2a10:3c83::/32 maxlen: 32
2a13:b9c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 07:03:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:83:5a:81:6b:e3:77:ee:0b:2e:a9:78:70:5b:0a:9a:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Jul 21 06:26:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=db5a7e9cd9418d60d12262304e711c83ec5b8614
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:40:d0:28:85:39:d7:b8:57:6e:45:cc:83:c9:
2c:91:ba:49:0a:65:84:1a:1b:97:c0:c7:95:fb:83:
42:4d:84:c1:f6:56:ba:ec:b1:39:14:f6:ae:35:86:
c0:70:d9:e8:61:b9:bf:22:7a:d3:22:da:07:ae:fb:
7e:65:d3:1f:bc:89:97:4c:3a:16:59:97:50:d7:b5:
94:7a:42:83:a4:97:54:22:1b:88:76:f8:f0:52:46:
4a:0b:ea:e5:42:b2:20:87:ad:de:96:c3:6e:a2:62:
b2:53:ad:f3:51:08:19:a4:0a:6f:a9:eb:a5:c6:1c:
7d:2e:0b:4d:45:a9:34:bd:6c:71:6a:76:d0:35:70:
33:d7:b2:75:d0:af:97:5d:b0:dc:cf:0b:a7:10:3e:
11:3d:e9:0e:a7:f1:48:6d:d3:46:1d:8f:b9:f9:6b:
e0:74:a2:f1:a4:e8:16:2c:d1:d5:63:78:84:47:a2:
5b:02:78:b7:52:91:00:a2:a6:4c:cb:c4:87:59:83:
b1:ed:7a:0d:d1:12:b5:4a:66:f9:9b:10:28:5b:a9:
7c:69:bb:43:08:f2:0b:62:71:5b:c2:38:04:98:30:
c0:1d:6f:63:9f:b9:a8:48:40:a9:b8:a6:28:31:a6:
32:f0:5b:89:41:2c:14:14:af:b9:3b:f0:a3:97:c7:
39:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:5A:7E:9C:D9:41:8D:60:D1:22:62:30:4E:71:1C:83:EC:5B:86:14
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/21p-nNlBjWDRImIwTnEcg-xbhhQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:3c82::/31
2a13:b9c0::/29
Signature Algorithm: sha256WithRSAEncryption
0d:6e:6a:b3:f3:d4:67:d3:82:ba:e5:61:95:1c:ae:6d:53:b6:
bb:a9:93:19:93:bf:81:b8:bd:a9:e7:71:a3:c6:c4:98:c2:f4:
17:13:d6:a8:68:92:13:24:9f:df:a0:76:68:00:bf:3e:c9:1c:
72:d0:06:81:6e:6a:52:6a:da:fb:07:6a:58:26:bc:04:0b:59:
e6:10:a6:20:21:44:9d:a5:02:70:e7:88:61:95:a2:54:ad:23:
9f:de:ee:52:7a:8c:22:94:32:d6:c9:95:65:cc:3b:c6:04:51:
42:a7:41:32:77:bb:a2:da:89:44:c2:9a:d9:97:89:bb:9f:14:
f8:73:ac:f7:40:5d:d6:22:f6:be:0f:ed:bb:03:f9:e7:f8:e4:
0a:f2:e2:58:90:ae:ac:11:08:3e:95:cb:91:39:24:9c:79:00:
89:be:f9:4d:5e:29:3d:20:a1:bd:92:7b:03:58:16:8e:97:1e:
b1:85:4a:08:fe:fa:12:bc:fb:08:33:58:7f:c3:f0:5f:21:32:
a8:cb:6b:71:7a:bc:3a:96:ca:d1:dc:d4:7b:e2:d4:49:63:b1:
bf:66:0d:7f:60:82:01:e8:c0:13:04:0c:11:5d:75:7f:15:32:
aa:8d:4e:9a:a1:42:1e:23:70:70:a8:62:9a:1f:13:74:af:a3:
b9:67:e2:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 11:35:27 2026 by rpki-client