Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/MD3W1Nryn4M9u17YkyJ0UPYnMs4.roa
File: MD3W1Nryn4M9u17YkyJ0UPYnMs4.roa (raw, json)
Hash identifier: X6ebSlAsByt1UKTHEQQPccS+0IZbok6571M+3Tb+hYA=
Subject key identifier: 30:3D:D6:D4:DA:F2:9F:83:3D:BB:5E:D8:93:22:74:50:F6:27:32:CE
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 019C4C49D843F7C47B56CD9AE0FB99ABCB6B
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/MD3W1Nryn4M9u17YkyJ0UPYnMs4.roa
Signing time: Wed 11 Feb 2026 10:40:33 +0000
ROA not before: Wed 11 Feb 2026 10:40:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6079
IP address blocks: 2a10:77c0::/29 maxlen: 29
2a13:b4c0::/29 maxlen: 29
2a14:68c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Feb 2026 15:25:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:4c:49:d8:43:f7:c4:7b:56:cd:9a:e0:fb:99:ab:cb:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Feb 11 10:40:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=303dd6d4daf29f833dbb5ed893227450f62732ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:a8:9f:b9:b3:da:ef:32:b0:39:f0:ac:1b:ee:
fe:ad:44:07:7f:28:63:82:91:08:6a:5c:15:a7:8d:
19:2f:1a:53:04:d1:e0:0f:1f:92:12:be:7e:0d:59:
62:c7:4f:fa:e1:f7:d2:59:72:e6:5a:e8:9b:36:ed:
a3:2c:da:ea:96:13:7e:ac:b3:32:df:f3:7c:dc:ca:
b2:fd:d9:b3:28:75:b2:62:f3:24:20:42:e1:f7:f3:
92:c7:11:04:08:73:ad:49:13:5e:fd:3d:07:50:51:
f7:9b:ad:60:5b:9f:53:00:f6:d3:61:dc:95:77:e7:
ac:45:83:af:25:8f:21:37:c4:61:0c:13:aa:3a:f2:
1f:19:a0:16:b8:f6:2b:ca:8e:9e:c9:b0:d5:f5:18:
12:84:e4:cf:02:1d:3a:bd:13:99:f1:13:61:2f:16:
9a:49:15:32:c8:56:bc:40:08:4a:43:d3:94:a5:0d:
8c:93:16:e4:07:a0:49:87:0d:78:d2:96:39:de:84:
d0:bc:cd:4d:d8:83:90:72:68:07:3f:cd:31:8c:ed:
b3:48:3d:5f:a6:5a:d1:14:fd:8c:a6:0b:eb:ad:4c:
3c:2c:84:d2:a4:78:85:25:c4:46:7f:96:0c:7a:7a:
d8:00:6a:f2:29:0f:f9:da:99:27:5c:17:76:1f:4d:
6d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:3D:D6:D4:DA:F2:9F:83:3D:BB:5E:D8:93:22:74:50:F6:27:32:CE
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/MD3W1Nryn4M9u17YkyJ0UPYnMs4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:77c0::/29
2a13:b4c0::/29
2a14:68c0::/29
Signature Algorithm: sha256WithRSAEncryption
7d:db:54:03:87:dd:e4:b6:62:46:29:bc:81:dd:34:15:a2:fd:
a6:10:04:76:70:fe:9f:87:db:b3:03:95:9f:d6:f6:b4:7b:03:
fd:91:d4:de:76:9d:5b:e3:4a:86:95:9a:d4:dd:aa:76:77:95:
e0:de:23:86:27:84:b0:52:12:35:6e:d0:0f:10:c0:f2:51:dd:
0c:78:1d:35:97:00:89:1d:f0:8c:52:3a:94:01:d2:b3:1c:6b:
d6:62:2e:1c:f7:27:f0:06:c7:7e:83:7b:93:27:2e:0f:87:c5:
8b:30:a0:fa:2b:ea:0f:0c:11:75:54:c0:6f:04:69:05:b5:a2:
18:8a:1b:dd:f0:5c:d1:c1:63:cb:52:99:46:e8:07:f5:1c:10:
a9:3a:f7:81:e1:40:0c:03:52:39:ca:3f:f1:f2:92:e2:ec:4b:
31:c2:6c:d2:fb:77:6b:2d:5e:e0:70:b6:86:0d:e1:31:03:f8:
95:2e:0e:68:e8:eb:87:f6:27:be:eb:35:7a:a8:a3:18:43:95:
4b:8e:82:48:4e:6c:62:f7:b8:cb:35:59:48:4c:aa:0e:e6:01:
b4:70:6b:4a:72:af:da:21:9e:67:de:32:56:a2:9a:e8:9f:27:
ac:cd:20:de:0d:21:62:41:73:b5:75:b0:84:1d:b9:45:3c:8e:
e5:f1:d0:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 16 18:56:12 2026 by rpki-client