Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/RuXEkO17Yybhg7Xi7DxZYhJnFxQ.roa
File: RuXEkO17Yybhg7Xi7DxZYhJnFxQ.roa (raw, json)
Hash identifier: XKOdofScixqcURhmTvsicdpFloP6C1DjKc+7lyfUwvQ=
Subject key identifier: 46:E5:C4:90:ED:7B:63:26:E1:83:B5:E2:EC:3C:59:62:12:67:17:14
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 01A06BF78CA983B0CBB45CA9386BBF9CC7A0
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/RuXEkO17Yybhg7Xi7DxZYhJnFxQ.roa
Signing time: Fri 04 Sep 2026 10:29:40 +0000
ROA not before: Fri 04 Sep 2026 10:29:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 1002
IP address blocks: 2a10:3c81::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Sep 2026 18:05:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6b:f7:8c:a9:83:b0:cb:b4:5c:a9:38:6b:bf:9c:c7:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Sep 4 10:29:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=46e5c490ed7b6326e183b5e2ec3c596212671714
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:19:e7:7a:03:19:38:e3:5c:67:a0:3d:28:09:
b5:58:03:5c:43:13:85:ee:ec:9e:28:95:dd:3b:26:
cd:e4:eb:72:f4:cd:2d:8f:75:51:b2:79:1a:2e:60:
61:67:06:f5:07:83:47:d8:b8:d8:36:00:af:18:a0:
bf:77:ab:16:c6:ef:a7:1e:62:81:c6:8d:5c:7c:fd:
84:55:72:be:66:03:e8:80:4d:68:27:11:48:b4:08:
e1:00:99:54:f2:97:0f:08:04:49:f4:72:c7:25:be:
d2:3b:6a:c1:57:c5:1c:66:f3:7a:61:67:eb:c3:b8:
66:40:8b:f6:0a:e8:36:57:7d:88:35:fd:76:23:b0:
65:17:31:fd:29:4a:fb:2f:4a:b7:3d:f5:ea:40:e8:
ed:99:da:f9:3e:85:cf:29:23:11:d2:68:1d:3d:57:
c2:68:0a:ce:a4:81:db:87:35:25:16:f6:4d:2f:02:
11:d3:44:07:81:3f:cd:23:24:25:d4:f3:c5:7d:1d:
44:04:23:dc:42:8d:c3:7e:e6:08:d7:4e:14:6a:42:
6e:c9:b6:c5:7d:15:5a:f6:3d:32:39:45:ea:14:c2:
e9:4d:64:c3:95:12:68:09:7e:be:6b:81:f6:0b:a5:
4c:8c:ab:78:90:14:8f:02:1f:96:84:f5:e3:74:98:
54:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:E5:C4:90:ED:7B:63:26:E1:83:B5:E2:EC:3C:59:62:12:67:17:14
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/RuXEkO17Yybhg7Xi7DxZYhJnFxQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:3c81::/32
Signature Algorithm: sha256WithRSAEncryption
2e:00:d4:02:2d:cd:79:31:e1:ec:97:10:20:73:17:5d:b4:34:
d7:28:af:f8:02:6d:b2:cd:fc:6a:dd:28:8c:dd:5b:59:8e:ab:
5a:42:8b:46:e5:f3:98:3c:c4:ed:62:9c:17:c9:7e:94:6d:ac:
68:03:9a:71:98:79:bb:8f:5b:a3:6a:a4:18:a2:aa:17:59:37:
a4:55:9f:54:06:dc:6f:3a:28:bc:d1:5b:b8:c6:9c:0d:53:b5:
0c:af:7c:7b:f1:f9:19:00:a1:d7:f2:68:d2:2a:e5:06:62:bf:
6a:38:d6:2c:8a:6d:a8:30:84:e4:86:ec:c9:04:71:a8:3a:26:
16:d8:ff:ad:c3:15:0b:d2:c5:d8:0b:f8:ad:35:8e:4c:dd:a1:
3d:38:a7:fb:12:2a:40:7d:85:f8:72:f1:ab:e3:c0:34:fe:0e:
94:2f:46:93:51:82:c4:dd:a1:9c:94:99:b9:c3:b7:8c:6a:91:
ae:f0:03:e1:15:0d:66:1c:04:91:10:26:1a:9a:48:75:e2:7f:
09:44:ed:b0:e1:1b:29:5c:69:1b:f2:f9:d1:84:64:0a:c5:c8:
7f:6f:e5:8a:68:d0:4e:7e:ed:0c:5d:61:33:d3:48:7e:9c:ea:
1f:29:cd:c7:ec:f7:99:6e:b0:92:7e:35:07:c5:9c:25:7a:60:
1d:9c:d7:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 7 01:38:04 2026 by rpki-client