Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/DiSjA4LKD-JSKFI29gZJ00ixtoE.roa
File: DiSjA4LKD-JSKFI29gZJ00ixtoE.roa (raw, json)
Hash identifier: NllyC1P4BkVXqXAtLb/4rq212JACr+6t68K35pM4gow=
Subject key identifier: 0E:24:A3:03:82:CA:0F:E2:52:28:52:36:F6:06:49:D3:48:B1:B6:81
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 01A0ECD4139A443A55B9050E7575CB52524D
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/DiSjA4LKD-JSKFI29gZJ00ixtoE.roa
Signing time: Tue 29 Sep 2026 11:01:56 +0000
ROA not before: Tue 29 Sep 2026 11:01:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 2a06:5fc0::/29 maxlen: 29
2a0b:ac00::/29 maxlen: 29
2a10:b40::/29 maxlen: 29
2a10:3f80::/29 maxlen: 29
2a10:77c0::/29 maxlen: 29
2a13:b4c0::/29 maxlen: 29
2a13:b9c0::/29 maxlen: 29
2a14:68c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:d4:13:9a:44:3a:55:b9:05:0e:75:75:cb:52:52:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Sep 29 11:01:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0e24a30382ca0fe252285236f60649d348b1b681
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a4:ea:9a:87:d7:95:1a:7a:08:60:9d:59:f2:
6e:5a:29:3b:e7:8c:4b:96:fe:9b:24:be:36:71:f8:
93:f3:e0:e4:7b:09:eb:a1:2e:1c:8e:60:0c:6a:8b:
2c:3c:33:fc:99:d8:8f:7e:66:ef:84:7a:d5:35:f1:
c8:08:7c:60:e4:8c:30:c6:51:f9:ed:fe:bd:7c:1c:
28:7d:28:04:7c:8d:c3:1c:42:0f:65:4f:de:42:76:
c0:19:5f:c0:55:a8:8c:b4:26:52:8f:a2:6e:49:64:
e7:e0:f3:8a:c1:96:cc:d2:10:ce:b9:c0:60:80:ac:
f5:00:00:6b:be:29:dc:61:f1:94:3d:2f:9b:1a:12:
8c:c7:5f:72:0f:a8:fe:8f:f1:d0:01:d2:12:1a:b5:
a9:cf:af:28:5e:71:27:48:a7:3c:f0:91:45:ad:3c:
26:c9:27:20:6d:de:fb:42:75:34:57:51:b1:7a:bc:
fb:27:68:17:d3:bb:45:27:97:70:50:7c:d6:3f:d5:
c8:b3:bc:48:5b:48:d9:38:cb:8d:94:a6:99:9e:1c:
18:02:ec:ce:a0:cc:1f:35:8c:b0:04:57:a6:90:c1:
d5:d9:09:e4:5a:8b:c9:dc:c3:e7:47:71:0c:de:7a:
14:22:c6:f8:52:aa:5b:86:14:84:4d:a6:1f:67:a5:
fc:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:24:A3:03:82:CA:0F:E2:52:28:52:36:F6:06:49:D3:48:B1:B6:81
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/DiSjA4LKD-JSKFI29gZJ00ixtoE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:5fc0::/29
2a0b:ac00::/29
2a10:b40::/29
2a10:3f80::/29
2a10:77c0::/29
2a13:b4c0::/29
2a13:b9c0::/29
2a14:68c0::/29
Signature Algorithm: sha256WithRSAEncryption
90:37:9f:1e:65:d5:2c:f5:36:8d:da:dc:cb:94:12:ed:95:5b:
51:98:1f:24:a4:1c:ea:75:59:75:fa:99:15:a2:d1:4f:e1:3a:
e5:2d:6b:86:0c:eb:d5:37:70:33:2b:65:64:3f:00:c7:d5:cb:
d9:94:a3:6d:fc:ed:80:22:a0:ec:a7:51:1e:52:17:ba:af:af:
e7:4c:cd:bd:a3:df:c3:61:6a:01:42:94:59:de:e7:85:3d:89:
4e:1f:13:7d:6d:6c:00:39:b6:f4:02:07:36:2c:cd:94:48:19:
dc:19:d0:6b:f0:d2:8a:97:d4:8a:f3:b7:45:d8:6d:7b:4f:55:
f4:b4:f5:51:db:3a:36:8e:97:b9:06:ae:99:d2:fb:66:5e:0e:
8f:7d:05:aa:0f:42:2f:4f:24:de:e0:4a:1c:1f:1f:c7:c3:de:
f3:d9:06:dc:e8:f7:73:eb:de:db:83:18:31:1a:b1:db:38:1f:
2e:80:6f:c5:d2:be:49:4e:6a:8a:67:78:46:34:b1:57:4b:1e:
b8:ee:fb:a5:e1:3c:37:44:b8:fd:71:da:90:38:9e:f1:2c:18:
66:0d:19:48:67:d0:24:79:88:fc:c0:9d:48:df:1a:46:56:85:
ac:bf:5a:cd:03:a3:3a:54:3f:d3:82:e3:1a:78:da:73:54:fa:
00:91:5f:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 15:20:01 2026 by rpki-client