Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/VALWGaXJFHqWTDIAa5IaPjtJBrM.roa
File: VALWGaXJFHqWTDIAa5IaPjtJBrM.roa (raw, json)
Hash identifier: NEdhP6F3r+70gH26VeEHH6ksYmiNx4CiRCOtkbY2M78=
Subject key identifier: 54:02:D6:19:A5:C9:14:7A:96:4C:32:00:6B:92:1A:3E:3B:49:06:B3
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 01A082AB1E640A4E16F46E714367F5354D93
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/VALWGaXJFHqWTDIAa5IaPjtJBrM.roa
Signing time: Tue 08 Sep 2026 20:17:27 +0000
ROA not before: Tue 08 Sep 2026 20:17:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 2a10:3f80::/29 maxlen: 29
2a10:77c0::/29 maxlen: 29
2a13:b4c0::/29 maxlen: 29
2a14:68c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 21:04:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:82:ab:1e:64:0a:4e:16:f4:6e:71:43:67:f5:35:4d:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Sep 8 20:17:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5402d619a5c9147a964c32006b921a3e3b4906b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9a:aa:79:5e:a7:2b:be:9a:47:e3:f6:e8:81:
4a:78:e3:3f:1e:d2:b1:9f:fb:65:25:2f:30:a1:9b:
d2:9c:96:38:69:62:a6:df:fc:c0:98:0a:1f:51:66:
a1:f3:7e:8b:a3:ce:23:08:09:e3:17:a0:61:9f:58:
b9:b1:69:ca:9a:e5:de:80:59:35:84:3a:e0:d9:69:
56:8a:61:51:7f:3c:e9:23:40:ac:34:ee:4a:70:03:
66:13:a5:11:53:8c:8e:e3:b1:80:22:2b:e1:60:d8:
3e:b0:09:6a:10:cb:bd:83:eb:7d:62:2b:c2:60:58:
eb:e0:9e:a6:bb:0a:dc:dc:c8:ea:53:65:f4:b5:7d:
81:12:4e:bc:e4:85:94:79:03:4f:1e:48:46:ca:1f:
fb:14:dd:40:5f:23:06:29:27:8f:8d:b6:c8:4f:b1:
07:be:d8:e4:e0:26:45:dd:40:53:ce:6a:87:24:75:
97:53:52:1b:21:75:14:96:cb:e6:7e:b7:91:d8:c7:
10:72:77:64:b6:a9:3d:8d:90:f8:07:ad:4b:14:e1:
a7:19:89:ea:2d:31:12:bb:0c:b1:6b:2a:43:98:9c:
5c:0d:47:2e:f0:58:d3:c0:33:c4:84:ee:36:f8:a7:
e2:72:78:46:dc:b2:b1:53:44:a9:a8:72:1b:fc:93:
9b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:02:D6:19:A5:C9:14:7A:96:4C:32:00:6B:92:1A:3E:3B:49:06:B3
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/VALWGaXJFHqWTDIAa5IaPjtJBrM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:3f80::/29
2a10:77c0::/29
2a13:b4c0::/29
2a14:68c0::/29
Signature Algorithm: sha256WithRSAEncryption
82:21:ac:1d:c1:31:31:af:ad:d0:ba:2e:bd:6a:0e:31:b6:aa:
a3:e7:a4:29:d1:2c:73:82:53:4c:73:1e:f2:f4:48:e7:f4:9b:
f1:a5:ad:a0:f5:c4:49:4a:df:a0:07:4c:a4:68:de:d1:c1:54:
29:61:cf:25:d5:92:ff:93:ab:f3:bd:1d:5f:25:3e:44:79:aa:
17:3d:c4:c2:81:ad:28:d5:c3:7e:9d:d8:f9:29:62:f5:23:cc:
f5:46:a4:6f:49:5b:ee:df:6f:5e:4d:c5:bb:55:1e:50:48:1f:
54:4c:41:a3:7b:7b:ee:c7:36:ff:47:60:11:e5:65:5b:af:01:
f2:f5:64:9e:a3:d6:89:78:66:e5:f5:fe:0e:f6:05:39:ab:b8:
76:62:b2:55:3e:cf:da:4b:78:10:bf:cc:14:f3:df:d2:8a:fc:
51:2c:51:d6:39:37:d5:e9:ee:f9:4f:22:e5:f9:af:ea:b0:f5:
34:c7:05:b2:60:c4:74:ac:2e:01:29:c5:75:ef:5e:2e:c9:4d:
60:e0:a8:65:6e:a0:2f:cb:ef:a0:5e:c6:b9:d1:cf:aa:74:f7:
e9:70:4b:db:96:3f:16:8b:84:ab:0e:e2:ce:5b:17:70:3e:f9:
0c:54:c4:94:1e:e3:74:60:f0:f3:f0:c0:98:15:83:cf:34:5b:
58:a4:a2:8c
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgISAaCCqx5kCk4W9G5xQ2f1NU2TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMTQxMTJkMDVlOWQ4NzYxNDlkMjc3OGQ0OGVkYWFhMzI0
ZGIwYTUwHhcNMjYwOTA4MjAxNzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NDAyZDYxOWE1YzkxNDdhOTY0YzMyMDA2YjkyMWEzZTNiNDkwNmIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJqqeV6nK76aR+P26IFKeOM/HtKx
n/tlJS8woZvSnJY4aWKm3/zAmAofUWah836Lo84jCAnjF6Bhn1i5sWnKmuXegFk1
hDrg2WlWimFRfzzpI0CsNO5KcANmE6URU4yO47GAIivhYNg+sAlqEMu9g+t9YivC
YFjr4J6muwrc3MjqU2X0tX2BEk685IWUeQNPHkhGyh/7FN1AXyMGKSePjbbIT7EH
vtjk4CZF3UBTzmqHJHWXU1IbIXUUlsvmfreR2McQcndktqk9jZD4B61LFOGnGYnq
LTESuwyxaypDmJxcDUcu8FjTwDPEhO42+KficnhG3LKxU0SpqHIb/JOboQIDAQAB
o4ICHzCCAhswHQYDVR0OBBYEFFQC1hmlyRR6lkwyAGuSGj47SQazMB8GA1UdIwQY
MBaAFE8UES0F6dh2FJ0neNSO2qoyTbClMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUt
YmFmYmRmYzgxMzJhLzEvVkFMV0dhWEpGSHFXVERJQWE1SWFQanRKQnJNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUtYmFmYmRmYzgxMzJh
LzEvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAAjAcAwUDKhA/gAMF
AyoQd8ADBQMqE7TAAwUDKhRowDANBgkqhkiG9w0BAQsFAAOCAQEAgiGsHcExMa+t
0LouvWoOMbaqo+ekKdEsc4JTTHMe8vRI5/Sb8aWtoPXESUrfoAdMpGje0cFUKWHP
JdWS/5Or870dXyU+RHmqFz3EwoGtKNXDfp3Y+Sli9SPM9Uakb0lb7t9vXk3Fu1Ue
UEgfVExBo3t77sc2/0dgEeVlW68B8vVknqPWiXhm5fX+DvYFOau4dmKyVT7P2kt4
EL/MFPPf0or8USxR1jk31enu+U8i5fmv6rD1NMcFsmDEdKwuASnFde9eLslNYOCo
ZW6gL8vvoF7GudHPqnT36XBL25Y/FouEqw7izlsXcD75DFTElB7jdGDw8/DAmBWD
zzRbWKSijA==
-----END CERTIFICATE-----
Generated at Thu Sep 10 03:40:32 2026 by rpki-client