Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/4tr3DagnPP6NOsJOtUPE7tySS4g.roa
File: 4tr3DagnPP6NOsJOtUPE7tySS4g.roa (raw, json)
Hash identifier: 3SsGG63hRR1b8fiH96HLaSQiP883paadgbIWiUGKQAU=
Subject key identifier: E2:DA:F7:0D:A8:27:3C:FE:8D:3A:C2:4E:B5:43:C4:EE:DC:92:4B:88
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 01A1295EB78890D09B83E6C8602E13915972
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/4tr3DagnPP6NOsJOtUPE7tySS4g.roa
Signing time: Sun 11 Oct 2026 05:10:35 +0000
ROA not before: Sun 11 Oct 2026 05:10:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 2a06:5fc0::/29 maxlen: 29
2a0b:ac00::/29 maxlen: 29
2a10:b40::/29 maxlen: 29
2a10:3c81::/32 maxlen: 32
2a10:3f80::/29 maxlen: 29
2a10:77c0::/29 maxlen: 29
2a13:b4c0::/29 maxlen: 29
2a13:b9c0::/29 maxlen: 29
2a13:c340::/29 maxlen: 29
2a14:68c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 23:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:29:5e:b7:88:90:d0:9b:83:e6:c8:60:2e:13:91:59:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Oct 11 05:10:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e2daf70da8273cfe8d3ac24eb543c4eedc924b88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:75:82:f0:82:24:9b:6d:f4:94:5c:4d:83:cc:
30:da:39:7d:cb:8f:29:cb:13:f7:b3:cc:2f:34:5d:
8d:2e:da:95:6a:f9:76:a4:3f:ea:9f:b5:72:60:11:
9e:a3:eb:dc:7a:3d:a1:f0:de:54:bf:c2:0e:c6:1f:
38:80:d3:fd:4b:14:37:66:fb:f3:61:77:f9:69:31:
73:d6:89:ee:1c:8b:6f:45:e8:a5:62:71:1b:3a:5e:
dc:7e:be:07:ae:6e:cd:8e:d6:60:ef:c7:b7:3d:95:
1a:fc:35:38:e8:04:2e:92:f2:51:4d:30:18:b4:4c:
2a:c6:70:58:72:77:2d:30:6d:75:10:b9:0b:60:27:
d1:37:66:d7:5f:8e:10:73:42:46:5a:fd:5b:14:e6:
4f:85:d7:83:62:db:81:a3:19:7f:ce:0e:88:5b:7f:
0e:df:8e:d6:3a:31:a9:57:aa:5f:2e:87:67:0b:50:
d3:45:57:50:4a:d8:eb:c6:68:27:b0:27:85:56:1b:
6a:58:c8:d3:38:d8:3e:8d:64:b8:2f:e2:ca:19:bd:
9f:08:30:de:4b:5d:38:3a:bc:2e:93:ca:d7:49:88:
32:93:83:33:5f:c8:04:c6:24:1e:a1:25:45:40:90:
6c:0f:b1:fb:89:09:1b:8c:69:49:83:75:38:22:c2:
3c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:DA:F7:0D:A8:27:3C:FE:8D:3A:C2:4E:B5:43:C4:EE:DC:92:4B:88
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/4tr3DagnPP6NOsJOtUPE7tySS4g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:5fc0::/29
2a0b:ac00::/29
2a10:b40::/29
2a10:3c81::/32
2a10:3f80::/29
2a10:77c0::/29
2a13:b4c0::/29
2a13:b9c0::/29
2a13:c340::/29
2a14:68c0::/29
Signature Algorithm: sha256WithRSAEncryption
13:d9:ae:a6:3c:27:60:0d:32:a2:ea:c1:03:d1:0c:3f:00:b6:
1e:a3:d3:37:dc:ac:bc:dc:6b:17:de:cc:00:8e:cc:9c:d1:db:
b8:ca:72:c3:ad:a3:34:8c:03:03:3e:3a:bd:64:0f:84:56:47:
07:30:52:9a:52:64:aa:03:2a:82:dd:a8:88:39:e5:1f:1f:42:
cc:ab:13:d1:de:ed:a6:10:31:18:97:de:5f:da:92:21:c2:38:
8b:55:d8:89:8b:6c:cf:21:58:e4:69:d4:0f:f8:f2:f1:1d:5c:
9d:d5:eb:07:af:f8:0c:c7:3e:e3:4d:a6:ad:b5:59:05:0e:d9:
e8:5e:8a:f9:a5:84:f6:95:36:f2:9a:c5:eb:e4:61:31:6f:9c:
b0:56:83:7a:84:b5:38:77:8a:cd:2d:c2:20:e6:24:35:d7:dd:
b2:ec:5c:f9:4c:52:a6:30:12:c4:2d:d2:9d:c0:52:04:f3:8f:
a5:2a:db:32:03:7f:f2:b0:ff:79:83:26:bd:b5:8e:db:af:8d:
8c:9f:c9:46:9b:b0:82:ae:74:0a:c0:87:4c:bb:59:4b:d8:34:
a4:c7:6e:b1:db:94:39:ea:0c:b3:a4:e2:33:ab:f5:13:95:23:
53:5e:0b:6f:0b:79:9c:19:27:31:59:36:64:f5:25:38:ea:7e:
21:e6:4b:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 06:12:32 2026 by rpki-client