Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/CSctn5qqBQkg-pcsfplQ4JFYFCk.roa
File: CSctn5qqBQkg-pcsfplQ4JFYFCk.roa (raw, json)
Hash identifier: mG/j0gql2bwYP+um7beSZhoaWymVmGYsSUdH/F3rK9w=
Subject key identifier: 09:27:2D:9F:9A:AA:05:09:20:FA:97:2C:7E:99:50:E0:91:58:14:29
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 01A06CA83F68650CD5683BAE7C318A41C898
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/CSctn5qqBQkg-pcsfplQ4JFYFCk.roa
Signing time: Fri 04 Sep 2026 13:42:40 +0000
ROA not before: Fri 04 Sep 2026 13:42:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 2a10:3f80::/29 maxlen: 29
2a10:77c0::/29 maxlen: 29
2a13:b4c0::/29 maxlen: 29
2a14:68c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Sep 2026 18:05:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6c:a8:3f:68:65:0c:d5:68:3b:ae:7c:31:8a:41:c8:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Sep 4 13:42:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=09272d9f9aaa050920fa972c7e9950e091581429
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:74:d5:45:47:2a:07:5a:83:cb:48:05:33:1b:
24:28:61:ab:b1:d7:ae:d1:93:be:bf:d5:c2:ae:4c:
43:ce:54:25:f0:e1:38:a1:57:39:e8:7b:56:a9:89:
ee:0c:3e:9e:2f:66:37:4b:e1:17:15:43:98:ea:46:
39:07:ac:9d:53:4b:18:d0:08:8b:89:a1:90:21:b6:
4c:66:b3:ce:c6:6c:db:e8:f7:6f:20:4d:5e:9d:0c:
b2:80:d0:ec:ba:a9:41:f2:22:9e:b8:2d:87:b8:b6:
68:26:41:e5:04:09:5b:f4:cd:98:93:a5:20:56:04:
19:09:be:a4:b8:bf:60:9e:61:ad:24:ea:ac:e2:48:
d7:41:ed:80:c4:f2:d7:5b:1a:10:2f:e2:2b:73:5e:
25:62:02:4c:e0:a6:27:3c:83:70:87:49:56:c8:11:
6d:3b:73:e6:1e:36:9a:91:79:00:52:4d:6f:f6:4f:
1a:ad:58:41:36:c2:6e:5b:20:b1:8b:b0:8e:b4:11:
ac:ca:3e:e8:4c:ec:41:59:2f:32:5f:a2:b4:a3:11:
1b:d3:5e:97:da:95:59:5e:86:c9:83:68:c3:6d:07:
86:e9:9d:b1:d7:fb:a3:f9:9a:2b:ca:08:cb:44:dc:
9b:27:df:ec:67:70:20:90:61:01:af:77:b5:1a:91:
ff:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:27:2D:9F:9A:AA:05:09:20:FA:97:2C:7E:99:50:E0:91:58:14:29
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/CSctn5qqBQkg-pcsfplQ4JFYFCk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:3f80::/29
2a10:77c0::/29
2a13:b4c0::/29
2a14:68c0::/29
Signature Algorithm: sha256WithRSAEncryption
cf:fc:eb:d4:ef:28:32:6a:85:3f:2e:e1:9b:b0:f7:43:f8:af:
8e:ec:1b:6d:18:04:f3:f3:1b:3d:6b:67:6a:55:59:fa:5f:cf:
9d:34:85:a5:0b:31:77:1e:ee:a5:8b:6b:3f:c0:bb:21:97:a5:
40:ac:4e:23:5f:42:0a:1e:e6:62:c1:56:2c:3b:74:3d:39:ee:
11:ed:b7:61:a0:66:aa:20:e8:4a:2d:02:62:79:c7:7c:47:2b:
88:d7:52:7e:96:86:e0:f4:a6:ad:37:29:b1:88:3a:5d:6c:c7:
41:ea:b2:6a:00:21:d8:cc:a8:d5:6d:e8:df:3f:3a:96:29:5c:
31:da:31:c7:67:e8:f2:ad:54:8b:13:3a:d8:75:d3:5b:34:2e:
f8:8b:94:0a:01:42:0a:26:7a:34:58:5c:b7:0b:9e:b1:57:b4:
3f:dd:e8:41:44:22:cb:bd:ca:84:80:68:6b:0a:14:5c:1a:56:
81:f5:66:49:08:65:fb:d0:36:e7:68:60:74:a0:8a:03:b8:28:
24:0c:48:fb:1e:01:78:5e:da:d2:0c:29:70:ba:df:77:ad:9c:
b6:e5:f2:5f:92:76:a6:10:b6:9d:52:6d:79:5a:79:71:1c:2a:
fe:51:f5:d8:35:fd:78:68:db:81:0f:d4:1c:74:18:cf:2e:ce:
0c:c1:e3:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 7 01:40:04 2026 by rpki-client