Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/QCeeiHNGNGaV8VFe6ilx1RCXihc.roa
File: QCeeiHNGNGaV8VFe6ilx1RCXihc.roa (raw, json)
Hash identifier: /Th3uU8MxhjOD/uqVsW31hL9fyke3dqtprjXXLWoJ+o=
Subject key identifier: 40:27:9E:88:73:46:34:66:95:F1:51:5E:EA:29:71:D5:10:97:8A:17
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 01A1436474AE2028F8EE3F29C2373111B280
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/QCeeiHNGNGaV8VFe6ilx1RCXihc.roa
Signing time: Fri 16 Oct 2026 06:26:59 +0000
ROA not before: Fri 16 Oct 2026 06:26:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 18978
IP address blocks: 2a14:62c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:43:64:74:ae:20:28:f8:ee:3f:29:c2:37:31:11:b2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Oct 16 06:26:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=40279e887346346695f1515eea2971d510978a17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e3:3f:b5:69:21:04:06:1d:03:8a:36:01:80:
78:1b:00:fd:a4:48:a7:c6:1e:4b:a7:21:83:29:91:
23:e9:34:ec:0e:a7:34:56:06:0f:a8:8b:62:f3:b4:
a8:ce:b6:a4:5e:7b:15:73:6f:43:69:fe:61:ec:97:
6b:39:38:9b:26:2a:b9:56:e3:26:50:e5:35:6a:02:
83:8b:21:3b:e1:f5:16:65:e8:d0:a9:b3:4d:b6:64:
ff:6d:42:52:d0:70:bb:c0:87:6e:c5:7a:fb:96:1f:
d8:55:df:63:93:39:b4:c3:62:5f:5f:b5:ed:c2:bd:
e1:4d:48:8f:21:c1:79:3d:e1:7d:b8:ad:2f:2a:f8:
bc:db:b9:70:e2:95:fe:e8:6c:20:74:7c:fb:b3:b0:
cc:16:70:30:78:c7:51:28:e9:e7:15:1a:72:d4:8e:
4b:c5:0c:a0:60:55:10:9e:be:1c:45:10:4a:21:a6:
50:ca:82:6f:fe:d3:35:82:1e:2e:1f:20:ff:22:15:
9f:ef:68:03:7c:73:b2:64:06:2e:de:89:1f:f1:df:
0e:70:57:90:bb:d9:8a:50:64:3b:5f:11:b5:f4:16:
b1:48:dc:71:b9:e9:b9:f6:c1:f4:ba:1e:8a:93:1d:
b5:76:33:5a:ab:a8:c2:a5:57:62:57:11:cf:fb:19:
71:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:27:9E:88:73:46:34:66:95:F1:51:5E:EA:29:71:D5:10:97:8A:17
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/QCeeiHNGNGaV8VFe6ilx1RCXihc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:62c0::/29
Signature Algorithm: sha256WithRSAEncryption
06:70:d8:3f:f3:17:09:be:ca:68:a2:54:48:27:96:e0:5c:88:
d2:ab:27:56:49:68:f2:69:b4:dc:90:ec:26:e9:fd:38:7b:2e:
ce:55:41:cb:81:1c:ac:3c:f3:70:c4:0e:e9:74:24:93:46:8a:
0b:93:a1:dd:7b:f1:de:80:fc:c3:f9:50:13:48:df:6c:fe:e3:
28:53:66:6e:8f:c4:10:00:4c:48:ce:ba:eb:0b:5f:21:1d:f1:
80:e1:d9:12:bf:33:89:3c:5b:7d:1b:46:d8:2d:84:72:95:ad:
13:c9:99:a0:15:ab:cf:4f:82:1b:10:56:c8:78:ec:6b:9e:a2:
f8:cb:48:1d:98:ed:b4:cd:7c:a4:61:30:18:6d:56:ff:76:63:
2d:1f:a7:8c:c1:5b:cd:d6:a1:7a:f5:45:1d:2d:3a:cd:de:9d:
ac:15:00:72:61:9a:04:3c:49:ff:cb:a6:78:6a:95:fb:a5:d3:
19:f0:3f:f9:1e:87:41:b9:4e:83:90:50:06:df:2d:74:55:96:
65:8c:6c:71:16:4e:d6:1d:eb:dd:a2:ae:06:58:eb:97:80:ee:
4f:f5:df:cf:f9:50:54:f8:48:a3:d8:48:b1:60:96:34:1b:ac:
7f:16:0f:63:48:11:06:b8:46:14:51:24:02:47:3a:16:d8:0a:
89:d3:71:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 20:56:24 2026 by rpki-client