Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/C12tsRbS4zxgQQDnavmBSs7shXY.roa
File: C12tsRbS4zxgQQDnavmBSs7shXY.roa (raw, json)
Hash identifier: 5DzGZCrc6DO4/y5mkcAp3k1Me/NKSGwDqudkqiB6vYs=
Subject key identifier: 0B:5D:AD:B1:16:D2:E3:3C:60:41:00:E7:6A:F9:81:4A:CE:EC:85:76
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 019FB425ACDC841871534FBC7845A138E64D
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/C12tsRbS4zxgQQDnavmBSs7shXY.roa
Signing time: Thu 30 Jul 2026 17:49:55 +0000
ROA not before: Thu 30 Jul 2026 17:49:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63023
IP address blocks: 2a13:c240::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Aug 2026 11:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b4:25:ac:dc:84:18:71:53:4f:bc:78:45:a1:38:e6:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Jul 30 17:49:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0b5dadb116d2e33c604100e76af9814aceec8576
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:fa:bd:7c:96:e9:73:51:0c:cb:ab:1f:79:4a:
88:7e:a1:55:ce:63:5f:e1:b4:f5:2c:4b:0f:dc:89:
9f:a7:45:54:23:ae:10:af:4d:fe:9c:e4:d6:b2:ba:
23:d1:7a:91:3a:a9:e6:48:a1:f8:d7:08:52:24:05:
d5:7f:4f:c7:16:3f:b6:b2:ee:06:6d:7e:b9:d5:e2:
91:e7:8c:e2:19:22:6b:03:4d:48:88:cd:69:f3:3a:
fa:af:aa:43:98:e9:9e:30:8c:58:0b:b7:85:f2:a6:
f2:b2:43:fc:9c:55:19:04:c6:fa:af:40:d9:a8:da:
66:c5:09:76:37:11:74:17:41:dd:2a:7f:a0:92:f7:
ce:04:f0:4e:c9:2a:84:1b:61:48:a9:1d:b6:82:72:
41:ea:40:9b:d0:cc:db:25:97:56:a2:af:ae:db:0a:
ed:55:b8:57:9d:6f:df:65:81:99:54:34:bb:09:c3:
1c:a2:90:78:e6:53:12:32:da:85:09:6d:ef:71:47:
24:fd:3d:a9:43:bb:b9:0c:b4:a7:c5:71:9a:43:c7:
8f:42:cc:50:db:a4:11:43:45:c5:4e:8e:93:3c:de:
80:8e:ee:b7:94:67:1e:06:02:39:c0:d5:67:b7:c9:
17:db:a5:e3:2b:4b:8c:19:3d:33:fa:9f:c7:a9:41:
d9:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:5D:AD:B1:16:D2:E3:3C:60:41:00:E7:6A:F9:81:4A:CE:EC:85:76
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/C12tsRbS4zxgQQDnavmBSs7shXY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:c240::/29
Signature Algorithm: sha256WithRSAEncryption
c2:54:f9:89:79:3a:5f:50:05:8e:45:eb:25:1d:87:84:be:2e:
fb:b8:40:8b:e0:a1:de:36:19:cf:a2:38:90:73:c3:be:ab:86:
34:56:b5:01:c3:67:3b:1d:71:44:f9:df:98:63:78:2f:c8:5a:
5e:f6:f9:d8:bf:8f:b3:e8:f5:95:03:7b:d3:32:80:82:91:bc:
46:dc:49:6c:30:0a:8e:89:97:d3:e9:6d:aa:50:80:65:93:7d:
b0:b2:1a:4e:ee:f5:95:9c:75:d8:32:b3:88:2c:90:07:cb:63:
6a:bb:ac:a0:b3:04:ca:ee:d6:b3:af:f2:55:d8:2c:b4:a2:9f:
35:cc:11:c9:9a:c4:b4:15:a9:17:03:d0:7c:12:d7:52:65:d3:
96:8c:70:ce:4e:84:a8:c5:b0:6b:af:0c:2c:0e:47:f9:18:64:
a4:e2:a5:89:00:f3:4b:0d:af:3c:09:79:42:b5:27:b8:8b:2b:
6a:7b:af:36:07:cb:fc:19:7e:4d:d6:3d:72:ed:e0:f5:29:d5:
7b:90:69:a9:7e:29:c5:aa:99:a4:d9:4f:d1:2a:3d:0c:f6:59:
7f:0e:8f:6d:45:96:dd:da:e8:c7:de:17:47:48:3d:6a:9d:e7:
aa:d3:7e:56:b9:4d:57:07:fd:23:37:e2:ad:31:84:1f:ae:0d:
ab:8a:36:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 1 15:38:22 2026 by rpki-client