Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/E-DoR6aF-SOYrRo3wjn-clAnENc.roa
File: E-DoR6aF-SOYrRo3wjn-clAnENc.roa (raw, json)
Hash identifier: n7jlrdDbgOvttcC2vrp1678bmMTC5BfwYDZjSfzzEuE=
Subject key identifier: 13:E0:E8:47:A6:85:F9:23:98:AD:1A:37:C2:39:FE:72:50:27:10:D7
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 019CF2F6DA63AB98C5F3240544BF402AB455
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/E-DoR6aF-SOYrRo3wjn-clAnENc.roa
Signing time: Sun 15 Mar 2026 19:26:29 +0000
ROA not before: Sun 15 Mar 2026 19:26:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213832
IP address blocks: 2a0b:ac00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Mar 2026 15:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f2:f6:da:63:ab:98:c5:f3:24:05:44:bf:40:2a:b4:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Mar 15 19:26:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=13e0e847a685f92398ad1a37c239fe72502710d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:db:2a:b5:53:49:7c:c5:ff:c0:79:f3:b7:60:
0f:f0:41:ff:84:ec:20:1e:9d:f4:c3:3b:71:bd:79:
5d:21:bb:55:42:e7:73:ca:f7:e4:14:70:75:4b:4b:
30:a7:78:2e:59:6b:f8:d1:2d:99:54:6d:dc:8b:3c:
61:0c:25:e1:83:e9:3e:fa:ae:e5:4d:b3:27:9f:a4:
e7:55:54:e2:ac:cf:6e:49:1e:60:39:eb:c4:66:ba:
92:c1:19:04:22:a6:ed:a4:11:7d:a2:5b:0d:e1:f1:
a6:a5:5b:a0:d5:a8:c4:99:9c:e1:04:be:71:dc:79:
49:d8:fd:b4:e8:24:db:4d:23:61:69:97:3c:97:cc:
8c:25:67:d9:ce:0b:c2:b0:42:93:9f:e0:1b:64:20:
fb:5a:22:20:5a:72:84:00:8a:0b:73:b9:10:44:84:
75:4e:31:98:bc:22:ba:b2:d1:7a:2a:6a:f4:c7:2d:
d4:41:ef:8c:c8:be:97:5b:f7:56:82:84:22:e6:8d:
dc:b6:2a:58:2c:86:63:e8:59:10:3e:98:c4:7c:6e:
14:40:60:67:61:d0:81:a1:bb:6b:4f:aa:99:de:46:
fd:fc:69:30:c3:89:a1:bf:92:ff:cc:34:a7:52:9a:
c6:d4:51:1d:5f:8d:29:6b:3a:d1:07:5d:09:90:35:
b1:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:E0:E8:47:A6:85:F9:23:98:AD:1A:37:C2:39:FE:72:50:27:10:D7
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/E-DoR6aF-SOYrRo3wjn-clAnENc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:ac00::/29
Signature Algorithm: sha256WithRSAEncryption
52:4c:14:f8:b5:fe:28:03:39:8a:a6:28:ab:e2:01:98:74:ba:
92:b3:db:e3:c4:01:46:57:30:5b:c5:bc:0e:ff:e6:46:19:16:
01:a2:88:11:1a:b1:01:84:58:33:f0:85:ac:f5:13:1b:4a:f0:
25:f6:6d:4d:55:d0:be:55:c6:ef:ea:ca:ac:4e:29:00:31:d1:
63:f6:1c:ba:bb:80:d4:03:66:e2:9c:8d:bb:94:c2:aa:4a:21:
e0:12:37:f1:54:fe:3b:de:e3:9e:3a:95:61:cc:86:f8:42:0d:
2a:51:37:2d:3c:7a:ba:55:7e:08:24:bc:d1:9d:e8:fa:33:2d:
9f:2e:a8:8c:37:9d:7f:34:0b:e2:14:f7:10:4b:4c:8f:8d:7f:
21:e5:35:22:1a:83:41:e8:dc:96:9b:57:c4:81:40:34:00:c3:
5c:55:19:5d:d0:92:87:28:10:c3:c1:ad:db:a9:34:d5:15:03:
57:26:8e:4d:b9:21:e1:83:9e:aa:54:44:77:6b:2d:59:24:aa:
13:28:3e:4c:15:f0:0b:dd:f3:f1:38:f1:7a:f6:55:fc:24:e5:
43:05:a1:f5:8b:67:f8:b9:2d:51:b3:2c:09:94:83:30:0a:ad:
f6:6f:40:fb:3d:2a:88:23:95:4c:b8:81:b0:02:83:8b:b3:fb:
a3:c3:a4:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 15 22:57:47 2026 by rpki-client