Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/G3PfER9kuAi_AjLOtwUs5cJwoI4.roa
File: G3PfER9kuAi_AjLOtwUs5cJwoI4.roa (raw, json)
Hash identifier: iv/QM+5+9mF45WUG1Z8eb0fgcUSHNEDkdrl6Rpffw5E=
Subject key identifier: 1B:73:DF:11:1F:64:B8:08:BF:02:32:CE:B7:05:2C:E5:C2:70:A0:8E
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 019DCF1843422020E97DBB9985DE28D0774B
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/G3PfER9kuAi_AjLOtwUs5cJwoI4.roa
Signing time: Mon 27 Apr 2026 13:19:26 +0000
ROA not before: Mon 27 Apr 2026 13:19:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5511
IP address blocks: 2a10:3f80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Apr 2026 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:18:43:42:20:20:e9:7d:bb:99:85:de:28:d0:77:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Apr 27 13:19:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1b73df111f64b808bf0232ceb7052ce5c270a08e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:ae:7c:9a:b0:14:53:e6:37:4e:e9:f4:44:8b:
06:0f:a5:9e:ac:53:d4:69:65:a9:97:70:78:b5:ed:
70:ca:fa:22:76:1f:25:a5:8b:9b:03:25:08:a0:1d:
a6:41:9b:d1:81:da:c9:1e:8e:b7:f1:52:e9:14:6d:
70:be:50:ed:85:06:28:10:84:10:a3:68:8c:30:4f:
f4:7c:2e:00:e1:0d:27:d3:5d:af:e0:18:14:50:b8:
7e:fa:3a:d8:cf:fc:44:f4:7c:c8:52:f2:bf:95:a6:
90:e2:b7:3c:4d:5e:a5:c6:49:19:6d:e1:ef:57:71:
e9:55:70:ef:9e:ac:27:b6:af:6b:80:fc:d1:ed:5c:
c5:e2:cf:78:86:c8:c5:58:bb:e9:45:6c:57:56:06:
b7:b7:47:ab:c2:54:40:0c:2e:8d:ee:e1:dd:15:69:
61:93:f2:86:fe:51:b3:e6:5c:f3:dc:e1:20:cd:3d:
8e:d0:39:8c:7e:2e:d8:8e:65:e4:ec:8a:55:b0:db:
6f:51:3c:fb:bc:ee:49:a6:47:f9:ed:41:40:90:2e:
3b:7b:40:4e:52:25:7c:c2:03:4e:36:70:62:9f:77:
4f:5e:b9:66:8c:ef:23:d7:af:91:7f:58:1b:29:51:
80:a8:1b:22:3a:61:5d:e8:1b:e0:60:80:b4:78:9f:
ed:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:73:DF:11:1F:64:B8:08:BF:02:32:CE:B7:05:2C:E5:C2:70:A0:8E
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/G3PfER9kuAi_AjLOtwUs5cJwoI4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:3f80::/29
Signature Algorithm: sha256WithRSAEncryption
15:a6:b4:24:6f:e7:6d:17:e4:85:97:59:f6:ed:ed:38:51:a5:
ba:09:bb:ef:75:39:58:2c:d1:29:0d:6a:10:94:58:a5:ac:1c:
da:a4:19:1b:a4:3d:6a:89:8d:2f:fa:91:41:b7:84:14:be:d6:
e3:78:60:e8:bb:89:5a:01:7f:b7:a3:5b:48:8f:7c:5c:89:a5:
ad:29:55:7a:6f:3a:db:25:69:65:43:69:bb:8f:ef:15:64:e2:
da:ca:53:41:8c:26:fe:21:37:de:14:d3:81:8e:82:49:0a:e3:
06:52:f0:9a:93:9e:0f:c3:d3:31:39:4d:04:a3:1a:58:dd:28:
23:b0:a7:50:0e:38:d8:a4:09:d0:9a:89:15:0f:7c:dd:3a:65:
2a:23:7a:a4:ad:3e:57:99:31:d5:95:a7:af:4b:e5:cb:72:18:
27:9e:87:c4:5d:f8:02:51:64:b8:86:2b:7b:5b:7a:25:4c:bb:
0b:03:19:b8:57:49:a2:5c:92:ab:16:ed:a6:a6:a5:f8:9f:01:
6f:d5:ab:af:ea:7e:86:ea:f3:14:b3:f7:e5:92:80:15:04:d9:
53:7b:91:c5:19:c0:db:e4:8f:fd:53:7c:27:07:4a:e5:dc:19:
8e:a5:05:70:bc:66:2c:9c:4c:03:9f:74:c9:13:bd:82:f2:5a:
43:07:a1:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 29 04:46:09 2026 by rpki-client