Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/DeF2Jw70C7BN1rWEcgKj5Xs35Y0.roa
File: DeF2Jw70C7BN1rWEcgKj5Xs35Y0.roa (raw, json)
Hash identifier: Oish/e+GhxLO2WNsEjcXzLpitKscSdAq6R4o3HfMGkg=
Subject key identifier: 0D:E1:76:27:0E:F4:0B:B0:4D:D6:B5:84:72:02:A3:E5:7B:37:E5:8D
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 01A0A50A4111964269FAAB231A40733B5236
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/DeF2Jw70C7BN1rWEcgKj5Xs35Y0.roa
Signing time: Tue 15 Sep 2026 12:28:27 +0000
ROA not before: Tue 15 Sep 2026 12:28:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 2a06:5fc0::/29 maxlen: 29
2a0b:ac00::/29 maxlen: 29
2a10:b40::/29 maxlen: 29
2a13:c340::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 21:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a5:0a:41:11:96:42:69:fa:ab:23:1a:40:73:3b:52:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Sep 15 12:28:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0de176270ef40bb04dd6b5847202a3e57b37e58d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:1b:07:b5:f4:84:ef:ac:ba:6d:15:2f:03:c6:
ca:60:be:8c:59:01:3f:f9:b3:dc:01:37:14:8a:8e:
91:36:a0:a5:c1:d7:d8:60:b7:fe:fa:0e:ad:44:3e:
f4:fb:74:ba:88:fb:96:33:dd:b9:33:d9:2b:d6:44:
2c:96:9b:9b:71:e4:f0:8f:14:42:8c:54:fc:20:f3:
5e:ae:70:c8:61:67:06:09:f4:f7:6b:12:21:82:fd:
0e:85:97:40:fd:c1:a0:65:dd:75:b8:ec:45:47:fd:
63:dd:d6:32:ad:84:48:e4:7b:9b:ea:c0:d0:60:37:
b5:cf:c2:1a:26:a5:24:af:5d:04:74:f1:16:4d:96:
a3:41:6c:46:0b:26:31:79:24:55:55:7c:17:a5:6e:
70:90:0c:2c:69:18:dd:46:ac:d9:58:07:34:55:98:
a6:c2:70:7d:94:5e:e7:e7:84:89:88:20:76:08:2f:
69:72:af:a7:1a:ff:51:0d:33:36:09:4e:e5:07:02:
68:e1:21:03:f9:c1:3a:e5:f0:a6:6b:9a:79:19:16:
cf:0e:09:f2:b3:96:de:ec:ad:c7:f1:12:28:e5:9a:
ef:da:5f:42:45:cf:69:24:b0:88:73:cb:fc:a9:55:
04:82:af:14:76:2c:9b:d0:5d:40:94:52:f6:16:31:
6a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:E1:76:27:0E:F4:0B:B0:4D:D6:B5:84:72:02:A3:E5:7B:37:E5:8D
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/DeF2Jw70C7BN1rWEcgKj5Xs35Y0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:5fc0::/29
2a0b:ac00::/29
2a10:b40::/29
2a13:c340::/29
Signature Algorithm: sha256WithRSAEncryption
51:e3:4b:04:c6:19:0c:40:74:43:ff:43:58:87:88:d5:7b:d9:
e8:b3:54:c3:9b:60:c1:f3:6c:0b:80:30:9d:f7:65:df:1c:d9:
1e:6f:73:bc:f9:38:7a:8f:90:4d:fe:6b:93:7c:e4:70:08:94:
70:c8:d9:e0:29:7e:10:f6:5e:26:80:45:32:f1:f5:ab:1f:58:
87:a3:d8:83:3c:8a:3e:68:6a:7d:e5:cb:84:77:5b:ee:04:26:
da:7c:b9:b9:be:87:9c:b9:f5:00:60:94:26:09:19:81:9a:47:
60:a2:38:74:d7:db:9a:06:54:49:23:86:47:ce:4d:02:5e:11:
e9:49:76:ec:02:35:e3:34:89:ba:3c:e8:00:19:dd:48:d8:cc:
f6:e4:d4:9e:54:ac:a0:83:8d:ad:bf:11:0d:fe:13:8a:41:d6:
40:4c:50:da:44:51:7f:1f:23:37:b4:2f:ec:49:5a:c8:eb:82:
70:96:36:b9:2f:51:bd:f9:75:8d:8c:43:61:ac:63:83:7f:47:
e1:46:26:fb:72:27:ea:2f:f4:e6:2f:1b:85:59:5a:e4:c7:f3:
b5:be:77:89:01:49:40:a5:8c:e6:bb:da:fe:dd:89:42:79:9e:
fa:d3:a7:43:e8:36:3e:c4:c0:34:d0:27:80:44:9d:e6:88:89:
93:49:d6:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 16 05:54:51 2026 by rpki-client