Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/IXoRhbNOp1FjWaI6dwjIZkufhhI.roa
File: IXoRhbNOp1FjWaI6dwjIZkufhhI.roa (raw, json)
Hash identifier: 5Fsn0x3hNJtM3VhFKhMxMn9ruO+/VPeT0yxKIZl2BP4=
Subject key identifier: 21:7A:11:85:B3:4E:A7:51:63:59:A2:3A:77:08:C8:66:4B:9F:86:12
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 01A04E60F6C8BC87870C758E691F97A72E71
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/IXoRhbNOp1FjWaI6dwjIZkufhhI.roa
Signing time: Sat 29 Aug 2026 16:36:12 +0000
ROA not before: Sat 29 Aug 2026 16:36:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212504
IP address blocks: 2a14:42c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 12:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:4e:60:f6:c8:bc:87:87:0c:75:8e:69:1f:97:a7:2e:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Aug 29 16:36:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=217a1185b34ea7516359a23a7708c8664b9f8612
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f5:0f:92:57:25:a7:d3:ec:22:3e:d8:a6:15:
77:6e:12:5c:06:2c:d3:a2:ce:ec:32:6c:74:87:49:
e3:2a:31:19:76:da:01:f6:ee:a4:f6:a4:a8:62:5e:
c9:d0:22:8a:cc:17:31:be:32:e4:3d:ae:d3:85:df:
27:2a:a9:3c:2f:2b:05:e9:46:be:eb:d1:54:89:4b:
87:0c:57:01:69:41:f4:b5:15:ac:2b:17:eb:84:f5:
74:98:1f:17:1b:08:86:ba:6b:4b:26:74:bf:5c:75:
83:4f:a8:60:65:bb:64:52:74:51:00:f2:a6:e9:82:
c6:24:67:f5:91:fb:cd:27:2e:a2:ea:41:bf:47:88:
f0:1d:2b:7e:67:df:1b:a5:96:08:61:59:2d:16:8a:
79:41:3a:7c:db:67:9a:fd:15:f3:09:ed:23:b6:b2:
1c:02:e1:bc:0c:50:b3:8d:e6:4c:09:72:df:d2:60:
cf:5a:4b:45:76:e3:23:07:73:9a:62:64:7c:24:04:
59:17:82:00:03:7c:fd:7f:f7:cc:a1:23:47:3c:e7:
39:21:2a:7e:f6:2a:c7:28:51:09:54:ba:0f:4d:b8:
7d:b1:ee:88:52:a8:2a:65:fb:15:ee:58:ba:64:34:
52:9e:2f:ef:fc:43:8d:f5:05:5f:26:43:56:5a:03:
30:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:7A:11:85:B3:4E:A7:51:63:59:A2:3A:77:08:C8:66:4B:9F:86:12
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/IXoRhbNOp1FjWaI6dwjIZkufhhI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:42c0::/29
Signature Algorithm: sha256WithRSAEncryption
b6:94:43:b2:02:33:74:6e:66:56:35:b8:8e:99:07:5f:85:88:
56:e0:4c:e1:28:a5:ee:8b:44:de:91:d5:32:c1:2b:3e:78:7f:
f4:21:bb:13:ec:93:1e:61:b1:68:16:5e:0f:d0:a5:a6:eb:3d:
4f:84:c0:a9:ab:03:46:f7:de:ef:ad:b5:29:a7:29:c6:39:21:
32:8f:d1:2c:d7:6d:f2:45:9b:0e:f6:ce:d7:0c:95:21:b9:ec:
43:95:9d:65:08:ec:96:ea:c6:67:33:a6:d7:45:72:2e:98:68:
65:20:aa:bb:ee:50:da:eb:ed:dc:e8:7d:b9:aa:40:38:91:e4:
18:93:60:f4:83:84:f8:61:46:54:0a:ef:2d:eb:dc:d7:38:dd:
31:c2:fb:d3:a7:2e:90:19:ca:7a:18:fa:f8:8b:da:c2:8d:98:
79:45:0f:e7:78:15:62:55:45:9f:d5:c4:87:2c:f5:ce:90:b8:
0e:eb:59:f9:3a:21:c9:0d:fe:68:62:3f:d4:c7:9f:c4:93:bb:
4b:07:6d:cf:a4:49:24:ec:b2:ba:33:ac:c7:7c:b4:4d:6b:ef:
52:9c:85:4d:8f:a0:88:55:e7:90:42:de:5e:88:74:fd:18:ae:
b9:e7:29:e9:63:60:9c:ab:75:50:c2:34:f1:62:d1:d9:53:0a:
c9:06:83:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 22:59:09 2026 by rpki-client