Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/CbV_TrUV129W_R1pNT8uQqUba08.roa
File: CbV_TrUV129W_R1pNT8uQqUba08.roa (raw, json)
Hash identifier: n/9YaKaecs4TBTPsMel+vWuk2QDCKIV7f2iROadlTuc=
Subject key identifier: 09:B5:7F:4E:B5:15:D7:6F:56:FD:1D:69:35:3F:2E:42:A5:1B:6B:4F
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 01A0EC596D391CC79C117FB084454725E402
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/CbV_TrUV129W_R1pNT8uQqUba08.roa
Signing time: Tue 29 Sep 2026 08:47:58 +0000
ROA not before: Tue 29 Sep 2026 08:47:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402933
IP address blocks: 2a13:c440::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:59:6d:39:1c:c7:9c:11:7f:b0:84:45:47:25:e4:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Sep 29 08:47:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=09b57f4eb515d76f56fd1d69353f2e42a51b6b4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:cc:6a:1a:d9:6d:53:59:44:22:ea:13:4f:39:
22:c5:34:f2:cd:2f:84:47:61:59:5d:8d:24:6e:ac:
b1:cc:48:8f:77:dd:e6:e9:f0:51:b4:c0:54:13:4f:
5c:58:fd:7e:1b:12:2d:66:91:ba:f2:69:30:6a:3b:
06:8b:d8:67:ff:88:c4:f1:e0:0b:30:89:fb:26:66:
df:5b:0c:3b:08:54:d6:f6:21:ad:26:35:47:ab:ed:
d4:35:7a:7b:e4:f3:49:62:51:e9:db:23:82:8b:3f:
32:5d:fd:9b:45:87:98:a4:c8:3c:49:f8:c8:57:e1:
34:f9:6a:f4:2f:a5:3d:59:d9:58:ef:9f:f1:b2:0c:
83:bc:e6:39:0b:14:62:fa:d7:50:13:50:92:8c:c4:
ca:9a:9a:e2:55:30:5a:ae:b2:23:6e:0d:0d:c4:b2:
44:ad:f9:c3:4f:ef:2c:2d:5e:42:2e:73:b0:54:49:
8a:99:e2:d2:94:e0:03:60:0a:7b:0b:7f:04:03:13:
77:8c:c3:d1:af:85:6f:4a:ac:97:60:94:b5:b8:4f:
1a:94:7b:1d:9f:e1:0e:24:6a:f6:41:3a:d2:74:96:
13:ca:f5:cf:4e:73:be:1e:88:29:ed:f1:55:a6:6d:
3c:1f:2a:81:ab:42:ef:17:3f:a0:f3:cf:c4:81:90:
fa:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:B5:7F:4E:B5:15:D7:6F:56:FD:1D:69:35:3F:2E:42:A5:1B:6B:4F
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/CbV_TrUV129W_R1pNT8uQqUba08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:c440::/29
Signature Algorithm: sha256WithRSAEncryption
c9:44:56:ed:2e:f7:95:ee:bf:51:d9:02:52:cc:59:4a:5c:c6:
2a:07:91:e8:0e:f0:e9:fd:35:53:dd:0a:0f:d2:ce:8c:e0:18:
f6:fe:a1:80:6b:bb:c3:14:2e:08:7e:8f:97:c5:ec:95:6b:11:
d3:b0:fc:65:28:ff:7a:57:8c:41:57:30:ac:39:32:6a:28:b1:
d1:b8:31:33:95:9e:8b:be:36:4b:b1:b7:67:25:7c:7b:b3:34:
a9:91:45:d7:2a:7f:00:24:00:a4:11:4f:43:98:73:37:df:5c:
ee:cb:d7:59:dd:d9:39:86:9f:90:7d:8f:a8:e4:00:fd:d2:f4:
99:db:ef:8d:3d:05:dc:da:7d:8a:df:1a:5f:f8:41:46:11:0a:
4d:17:42:13:23:3f:e4:2e:3e:39:2b:53:23:cc:40:4f:fa:ea:
7a:20:40:c8:76:1e:03:7a:3b:9f:4c:a0:48:5f:c8:d0:b2:c3:
88:e6:85:d2:35:b2:5e:76:f7:e2:86:77:ea:a4:ae:14:ae:eb:
b0:30:b2:f5:4d:66:21:83:d1:2d:5e:a2:1f:61:64:38:51:12:
25:32:49:6b:9c:fc:29:cb:ee:56:28:aa:6a:d9:03:e1:f4:2e:
55:41:ba:2b:03:75:29:12:c8:2a:47:e6:fc:e8:a7:4b:fb:49:
74:54:76:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 15:19:50 2026 by rpki-client