Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/BEltqMu_QI7HEFnGAGACjR32zpo.roa
File: BEltqMu_QI7HEFnGAGACjR32zpo.roa (raw, json)
Hash identifier: NoZYyYDDJvJ3iCWu0e/OGYIkK764aq/xcd4Rnzdsdxg=
Subject key identifier: 04:49:6D:A8:CB:BF:40:8E:C7:10:59:C6:00:60:02:8D:1D:F6:CE:9A
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 019D9AF9469BF0EF1EF877390BA4A7ECF52F
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/BEltqMu_QI7HEFnGAGACjR32zpo.roa
Signing time: Fri 17 Apr 2026 10:25:20 +0000
ROA not before: Fri 17 Apr 2026 10:25:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62563
IP address blocks: 2a0f:9b40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:f9:46:9b:f0:ef:1e:f8:77:39:0b:a4:a7:ec:f5:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Apr 17 10:25:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=04496da8cbbf408ec71059c60060028d1df6ce9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:71:23:53:8c:32:e9:99:e4:70:d5:60:5a:ea:
e3:3b:0e:98:57:70:31:33:44:11:e4:ee:f9:44:47:
41:35:b4:e6:61:3b:72:f0:82:44:13:52:0a:87:e1:
68:5e:75:90:23:2c:28:52:53:c1:8e:27:a1:a3:3e:
08:32:8b:84:21:f6:de:b3:bc:cb:27:79:7e:88:6f:
76:0e:8e:2e:5b:55:ab:bc:59:c7:74:b0:20:7b:94:
3c:fc:10:34:a8:34:f5:c3:d6:0b:6e:cc:a1:63:d5:
a7:d8:0b:a2:4e:7e:34:88:cd:5c:3c:c7:c3:47:bc:
20:5f:0f:52:63:26:28:66:26:61:ed:c0:c0:a2:30:
e8:03:bb:cf:73:27:4b:7d:81:5d:4c:69:95:0d:11:
04:22:cc:ad:c6:40:df:64:7f:b0:90:b7:7b:c8:58:
b0:05:bd:6c:d9:94:68:17:82:9d:6a:04:0d:ac:00:
ee:cf:64:8d:88:be:a5:9d:20:8d:d8:62:ea:52:4d:
b2:07:1f:02:5e:e3:e3:40:14:fe:76:08:c1:ca:4b:
f8:62:43:0f:c5:42:d9:6d:2b:30:11:63:5a:bc:c0:
a0:ac:b3:d2:cd:fa:ee:90:7f:71:a5:46:c3:bc:79:
df:aa:92:e6:64:8b:71:e4:d1:59:41:23:af:be:ac:
99:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:49:6D:A8:CB:BF:40:8E:C7:10:59:C6:00:60:02:8D:1D:F6:CE:9A
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/BEltqMu_QI7HEFnGAGACjR32zpo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9b40::/29
Signature Algorithm: sha256WithRSAEncryption
94:15:31:0b:fe:9a:e3:3f:17:dc:30:7a:b8:b4:0a:bb:20:77:
99:78:f7:7e:8a:a3:2a:89:cd:b0:74:df:46:4e:50:63:53:b6:
99:47:16:14:e2:67:1c:6c:9c:c4:b7:5b:43:9c:d0:44:57:1d:
6c:83:fe:60:ab:f1:fd:7a:59:8e:b7:18:0c:ed:a0:10:0a:5b:
37:aa:ec:0e:66:6c:d6:79:f9:5a:11:9d:24:b5:a8:86:24:86:
c5:b1:02:4d:fe:26:32:85:7c:30:df:8b:c7:c3:e7:1f:97:56:
63:4d:1c:9e:bc:e2:d1:0e:8a:f7:b3:19:9a:1e:aa:98:16:82:
7f:d0:75:b2:35:04:23:34:f6:02:e2:d2:00:51:cc:cb:fb:c1:
d6:79:57:92:91:ac:8f:ba:7c:11:10:d2:47:4c:b8:3d:f1:74:
d6:3f:ab:9d:14:63:e8:7c:ab:6b:3c:11:b7:d1:76:b1:bc:10:
2f:61:24:b8:d9:cb:ea:b4:71:d5:82:6a:fa:82:e9:65:2b:e1:
e8:b4:43:71:68:b9:22:5c:55:0e:23:84:20:14:8b:36:42:b2:
7b:8b:73:2e:6d:44:d2:fa:a0:fa:05:d5:b4:0b:fe:29:36:62:
cd:e2:83:b2:ad:9c:26:36:7c:8e:15:f2:a9:e3:d1:cc:8b:cd:
24:50:35:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:26:18 2026 by rpki-client