Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/898bj9bVUKpWh9woBw7i8mjUW3Y.roa
File: 898bj9bVUKpWh9woBw7i8mjUW3Y.roa (raw, json)
Hash identifier: aLhVjLTis0bhyAFYqczuYbgFHU4R6ClLrc1yOI8InRo=
Subject key identifier: F3:DF:1B:8F:D6:D5:50:AA:56:87:DC:28:07:0E:E2:F2:68:D4:5B:76
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 019E99708B663FC27261AB4F3A4D22120F54
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/898bj9bVUKpWh9woBw7i8mjUW3Y.roa
Signing time: Fri 05 Jun 2026 20:19:10 +0000
ROA not before: Fri 05 Jun 2026 20:19:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5511
IP address blocks: 2a10:3f80::/29 maxlen: 29
2a10:3f80::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Jun 2026 12:28:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:99:70:8b:66:3f:c2:72:61:ab:4f:3a:4d:22:12:0f:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Jun 5 20:19:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f3df1b8fd6d550aa5687dc28070ee2f268d45b76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:4a:93:7f:29:62:c1:5c:02:d0:a1:b0:08:d4:
8c:6e:19:a5:61:b7:04:0e:6e:19:a6:22:97:e4:97:
1a:39:62:1e:12:78:6d:53:06:84:5f:c7:13:a8:de:
ee:6d:7c:a8:79:23:ab:fa:f1:57:e5:d7:37:76:03:
1e:f7:8e:fe:ab:43:15:6a:62:91:51:e4:8b:06:3c:
d3:bf:c3:98:fc:df:53:04:25:97:dd:b7:de:f5:36:
92:2c:82:a8:9b:e7:95:aa:0b:bb:2d:1c:4e:a3:ad:
9d:56:30:93:72:ea:b3:36:b8:ef:24:2e:5a:90:b7:
ae:f2:ac:7b:f2:c4:e6:b5:2c:0f:7f:74:27:6a:9e:
97:af:d7:d3:3f:f6:26:97:12:58:50:c7:b2:bb:62:
2e:75:6b:2e:7d:16:17:d4:11:cb:90:b5:b0:dc:84:
7c:ef:e6:2f:0c:7c:6c:a5:00:ca:23:92:9a:bb:0e:
84:ab:11:22:fe:c6:e8:0b:92:3a:17:bb:ed:5b:e8:
50:37:92:ef:82:22:8e:7c:9c:22:32:68:09:d8:09:
b6:45:cc:59:5b:a4:ec:25:c1:1e:b8:a6:a2:80:b9:
e8:32:82:79:3f:45:69:f5:09:81:45:73:b7:ee:ec:
5c:ff:33:c9:96:43:8e:05:ba:53:f9:82:e6:88:68:
12:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:DF:1B:8F:D6:D5:50:AA:56:87:DC:28:07:0E:E2:F2:68:D4:5B:76
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/898bj9bVUKpWh9woBw7i8mjUW3Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:3f80::/29
Signature Algorithm: sha256WithRSAEncryption
53:75:59:a4:d5:07:b5:49:37:23:c2:00:ee:bb:84:fc:d3:31:
f4:9e:0b:c4:26:7c:93:95:f6:6f:7e:d4:4e:50:d5:80:15:af:
21:fc:9a:95:06:8c:f1:07:73:96:00:a4:03:4e:c3:aa:ae:a0:
3f:ea:84:86:a6:84:bb:28:e5:23:11:79:b7:3b:be:99:0a:b5:
33:6d:53:3b:c7:2a:60:c2:a8:19:74:2a:af:71:34:6c:42:3a:
a3:1f:f1:f8:66:3a:c0:02:17:7d:6b:14:ca:a0:26:93:00:e6:
00:fc:83:63:14:69:ad:1a:ce:9b:e5:6c:22:73:a3:49:6b:2a:
84:3a:f1:db:9f:86:0d:46:91:32:53:98:15:92:6a:a7:3d:49:
00:9d:f1:1c:5b:b5:24:e9:80:34:3b:57:29:88:55:21:c1:fc:
69:d5:cb:d0:a7:25:83:17:65:9c:bb:7e:23:4d:f3:04:2b:42:
22:b6:c3:2b:86:96:7c:6f:be:fb:98:7b:83:d1:d5:16:04:52:
83:61:fc:42:28:86:c7:f7:ee:4f:8c:56:ef:59:dc:45:33:76:
3c:87:5c:0e:67:b8:81:9c:2c:95:f1:c4:0d:cb:8c:22:76:b6:
23:9f:f0:b3:e7:c7:2e:8e:b7:cf:0b:b2:22:42:8d:cf:bb:2e:
83:a6:a2:d1
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZ6ZcItmP8JyYatPOk0iEg9UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMTQxMTJkMDVlOWQ4NzYxNDlkMjc3OGQ0OGVkYWFhMzI0
ZGIwYTUwHhcNMjYwNjA1MjAxOTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmM2RmMWI4ZmQ2ZDU1MGFhNTY4N2RjMjgwNzBlZTJmMjY4ZDQ1Yjc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4EqTfyliwVwC0KGwCNSMbhmlYbcE
Dm4ZpiKX5JcaOWIeEnhtUwaEX8cTqN7ubXyoeSOr+vFX5dc3dgMe947+q0MVamKR
UeSLBjzTv8OY/N9TBCWX3bfe9TaSLIKom+eVqgu7LRxOo62dVjCTcuqzNrjvJC5a
kLeu8qx78sTmtSwPf3Qnap6Xr9fTP/YmlxJYUMeyu2IudWsufRYX1BHLkLWw3IR8
7+YvDHxspQDKI5Kauw6EqxEi/sboC5I6F7vtW+hQN5LvgiKOfJwiMmgJ2Am2RcxZ
W6TsJcEeuKaigLnoMoJ5P0Vp9QmBRXO37uxc/zPJlkOOBbpT+YLmiGgS3wIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPPfG4/W1VCqVofcKAcO4vJo1Ft2MB8GA1UdIwQY
MBaAFE8UES0F6dh2FJ0neNSO2qoyTbClMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUt
YmFmYmRmYzgxMzJhLzEvODk4Ymo5YlZVS3BXaDl3b0J3N2k4bWpVVzNZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUtYmFmYmRmYzgxMzJh
LzEvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhA/gDAN
BgkqhkiG9w0BAQsFAAOCAQEAU3VZpNUHtUk3I8IA7ruE/NMx9J4LxCZ8k5X2b37U
TlDVgBWvIfyalQaM8QdzlgCkA07Dqq6gP+qEhqaEuyjlIxF5tzu+mQq1M21TO8cq
YMKoGXQqr3E0bEI6ox/x+GY6wAIXfWsUyqAmkwDmAPyDYxRprRrOm+VsInOjSWsq
hDrx25+GDUaRMlOYFZJqpz1JAJ3xHFu1JOmANDtXKYhVIcH8adXL0KclgxdlnLt+
I03zBCtCIrbDK4aWfG+++5h7g9HVFgRSg2H8QiiGx/fuT4xW71ncRTN2PIdcDme4
gZwslfHEDcuMIna2I5/ws+fHLo63zwuyIkKNz7sug6ai0Q==
-----END CERTIFICATE-----
Generated at Sun Jun 7 22:49:02 2026 by rpki-client