Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/GO5pwKDfXOw7TRRGRN23aELxfsI.roa
File: GO5pwKDfXOw7TRRGRN23aELxfsI.roa (raw, json)
Hash identifier: SsGnMzIUilamvcmmPQhc89MCUJgNdQKNWtPLiZdA6Jw=
Subject key identifier: 18:EE:69:C0:A0:DF:5C:EC:3B:4D:14:46:44:DD:B7:68:42:F1:7E:C2
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 019DFCC0E2DE36C7BF47E002DB258331A03C
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/GO5pwKDfXOw7TRRGRN23aELxfsI.roa
Signing time: Wed 06 May 2026 10:06:32 +0000
ROA not before: Wed 06 May 2026 10:06:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63023
IP address blocks: 2a05:9a40::/29 maxlen: 29
2a10:b40::/29 maxlen: 29
2a10:3c84::/32 maxlen: 32
2a14:1101::/32 maxlen: 32
2a14:1102::/32 maxlen: 32
2a14:1103::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 May 2026 04:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:fc:c0:e2:de:36:c7:bf:47:e0:02:db:25:83:31:a0:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: May 6 10:06:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=18ee69c0a0df5cec3b4d144644ddb76842f17ec2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5a:38:9a:28:98:3c:ba:18:16:68:bd:19:53:
84:91:72:07:6a:4f:8e:6f:22:e9:2d:5d:4c:87:f5:
29:4c:4f:ef:65:4c:76:d2:db:3b:df:67:ab:59:0f:
14:4e:29:35:b3:f4:d5:79:87:d3:fa:ef:9a:bf:5f:
a6:cc:8e:69:13:3b:61:33:cd:ce:88:ea:2a:8e:62:
4e:5c:92:1f:fc:a8:9e:d5:9a:b3:a9:1f:c6:0a:74:
91:dc:4b:fd:12:3d:33:54:a9:62:f8:e3:4d:d1:85:
0f:29:aa:4e:76:7d:68:ca:ca:ef:89:eb:b6:14:a2:
3b:68:8e:28:59:43:20:de:24:22:75:f3:88:70:b7:
38:25:9b:a9:ff:6f:f6:74:00:a9:6f:4e:36:9e:b8:
2b:0d:b6:17:77:81:d2:a5:16:f6:02:5d:8d:cb:36:
91:cc:29:fc:ac:f9:ff:83:3e:c3:b5:83:7b:74:47:
e8:51:b6:7a:2b:4d:ca:78:2d:f5:95:5e:b2:1c:98:
f6:ce:5e:6d:6e:96:0f:85:ed:d1:6b:6c:5e:50:07:
55:e7:2b:b4:1d:09:f3:49:ed:15:4e:b4:ae:e4:bf:
e8:c9:22:85:e2:a9:89:42:95:9e:1d:db:78:88:54:
e5:05:20:74:1a:d6:f8:e9:ab:fb:d2:4a:fd:86:14:
d2:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:EE:69:C0:A0:DF:5C:EC:3B:4D:14:46:44:DD:B7:68:42:F1:7E:C2
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/GO5pwKDfXOw7TRRGRN23aELxfsI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:9a40::/29
2a10:b40::/29
2a10:3c84::/32
2a14:1101::-2a14:1103:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
7a:e1:a6:f9:af:5a:87:68:9a:dc:a9:ae:5f:1f:b1:1f:f0:c4:
ed:98:70:be:53:ad:f4:cc:8d:83:48:db:9a:91:0a:21:91:98:
ff:2e:bd:27:12:51:05:5e:62:64:7e:a3:71:e9:d1:41:f3:4c:
4e:84:29:a0:89:b7:c1:b3:04:3e:a5:69:6d:9c:6c:64:60:79:
f3:96:0a:f1:38:72:84:9d:f8:a9:fe:9a:d2:0e:ee:34:26:8e:
78:d3:b2:a9:a7:fc:5b:72:34:da:82:89:64:d5:b9:7f:f1:4d:
32:ef:b7:69:fc:99:1e:1e:bc:06:af:82:92:5b:54:6a:53:a9:
0c:99:fd:d5:f5:58:c2:d1:bc:ad:f6:4f:e7:7b:a2:47:97:ca:
b5:21:95:b0:fd:6f:7e:e8:be:c7:c1:c7:63:e1:7d:cb:18:09:
0d:5f:e9:6f:37:50:e4:1c:76:3c:9c:a7:5a:04:45:1b:15:b9:
09:49:0f:fa:79:a0:cf:1d:b9:f0:c3:1d:7f:21:a2:49:35:1c:
1d:c2:72:ae:9b:41:24:f5:12:18:a6:95:49:cd:41:7c:61:4d:
6a:56:62:94:e7:d7:82:2c:b5:4b:b4:3f:df:9d:89:7e:08:03:
3b:c6:6c:ff:ae:0d:ae:b1:2a:a3:57:d1:17:47:7c:d9:c5:14:
7f:2d:89:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 09:55:07 2026 by rpki-client