Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/9TL8cfDYb0k7vXQpBxDjacfiIqo.roa
File: 9TL8cfDYb0k7vXQpBxDjacfiIqo.roa (raw, json)
Hash identifier: hxWGhuucvopJ/jqoa5YsWV6aNRIOxwXeLOe0sXRPWUs=
Subject key identifier: F5:32:FC:71:F0:D8:6F:49:3B:BD:74:29:07:10:E3:69:C7:E2:22:AA
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 019DBF191CDC105313391ED2A62FD28466E9
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/9TL8cfDYb0k7vXQpBxDjacfiIqo.roa
Signing time: Fri 24 Apr 2026 10:46:27 +0000
ROA not before: Fri 24 Apr 2026 10:46:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213734
IP address blocks: 2a0b:ac00::/29 maxlen: 29
2a13:c340::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:bf:19:1c:dc:10:53:13:39:1e:d2:a6:2f:d2:84:66:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Apr 24 10:46:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f532fc71f0d86f493bbd74290710e369c7e222aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:45:54:05:47:63:83:33:f7:0e:eb:e8:fd:7d:
db:15:85:38:47:a0:62:1c:f6:da:f8:78:01:ef:7e:
48:0d:61:a8:a2:dc:b7:2e:5f:a3:c0:78:a1:7c:c5:
18:db:0a:0a:1f:20:c9:85:21:12:8d:ef:0b:75:a9:
f0:39:62:ce:39:dc:86:99:df:d0:49:a5:ed:8c:7d:
f8:90:b1:9e:74:8f:48:54:23:f0:b1:7b:b6:ae:6f:
3c:50:fa:bd:b3:49:69:19:65:44:14:0b:7c:fb:a3:
b4:d7:bc:e9:f7:bf:e4:47:87:c4:17:c4:f1:f5:21:
0d:71:40:6f:51:67:e3:8e:43:5b:b5:22:ce:6a:84:
9e:2a:0c:b9:eb:14:cc:9a:b2:61:cb:78:57:2f:49:
f2:7b:9d:0a:87:02:3d:c1:59:04:9c:0d:b4:8c:56:
f8:bc:6d:f8:a5:3e:d2:ad:b2:5b:83:2b:8c:5b:65:
9a:94:73:ec:5c:34:11:6c:b4:50:d0:e4:8f:81:01:
21:98:26:cc:3a:b1:bb:d6:33:73:ee:29:07:de:1e:
9d:2f:27:b6:ac:b8:d2:27:6b:f7:07:cf:16:87:6a:
a8:6c:61:63:1b:15:a6:66:19:e6:94:0a:23:8a:11:
3a:3c:e8:25:4b:24:16:e2:5c:b0:8c:96:6a:a5:c4:
43:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:32:FC:71:F0:D8:6F:49:3B:BD:74:29:07:10:E3:69:C7:E2:22:AA
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/9TL8cfDYb0k7vXQpBxDjacfiIqo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:ac00::/29
2a13:c340::/29
Signature Algorithm: sha256WithRSAEncryption
3d:0c:86:f1:ab:e0:d3:0a:b8:e9:38:9d:7c:ab:2e:a5:97:a8:
da:32:df:5c:8d:ae:05:2a:7f:e4:e6:b6:33:b9:6f:5a:a4:bb:
ca:1c:41:d3:cb:ee:8b:5d:50:51:b8:1f:1a:b8:89:65:c3:37:
74:0a:e6:16:a5:57:e5:12:14:4a:a7:39:71:f4:bd:4b:a8:5c:
d1:13:df:f7:84:86:31:fa:95:96:95:eb:7a:53:9d:7c:71:3b:
3c:7a:c1:7a:4e:85:b2:5d:b8:27:03:c1:a5:3e:30:af:05:19:
1e:f5:be:cd:05:f3:15:c7:8f:e7:6f:69:a9:41:3b:00:d5:02:
7a:df:98:52:f4:25:0c:cb:9c:f6:01:6a:9f:5b:48:99:7d:40:
61:e6:39:ed:3d:b2:bb:56:47:69:a7:d8:32:c6:f0:3d:99:31:
88:b7:f0:d0:1d:c9:59:32:01:81:47:84:6a:66:10:41:ab:55:
af:69:a2:22:8e:93:62:dd:a9:7e:7f:36:d0:82:31:9f:fa:1f:
1c:2b:61:02:da:45:65:d3:54:26:1a:f8:cc:ae:df:0a:ac:5e:
b3:91:2c:2e:e4:b2:f0:31:41:e6:a6:cd:d6:46:45:41:ea:04:
5d:88:78:d3:0d:47:c6:f3:4d:2f:5c:ee:1b:3b:3c:8e:2c:ca:
e6:b0:b4:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 25 03:38:55 2026 by rpki-client