Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/VLMf6UtCSxhQLb3iwc0aK-uHqOc.roa
File: VLMf6UtCSxhQLb3iwc0aK-uHqOc.roa (raw, json)
Hash identifier: 9Qu7d7296qxpQMSYJjP4mHrIi7NEZ6HJ0cQUInbtI+c=
Subject key identifier: 54:B3:1F:E9:4B:42:4B:18:50:2D:BD:E2:C1:CD:1A:2B:EB:87:A8:E7
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 019DDD313FC63EBCD85B81D35AA5493C8F91
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/VLMf6UtCSxhQLb3iwc0aK-uHqOc.roa
Signing time: Thu 30 Apr 2026 07:01:25 +0000
ROA not before: Thu 30 Apr 2026 07:01:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63023
IP address blocks: 2a14:1101::/32 maxlen: 32
2a14:1102::/32 maxlen: 32
2a14:1103::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 14:07:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:dd:31:3f:c6:3e:bc:d8:5b:81:d3:5a:a5:49:3c:8f:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Apr 30 07:01:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=54b31fe94b424b18502dbde2c1cd1a2beb87a8e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:42:f8:f7:36:d6:d4:2e:e3:d6:4e:83:15:a2:
82:a6:ef:11:e4:9a:ea:8f:4d:03:dc:d5:f0:07:c1:
39:e1:d7:e6:95:90:89:a6:47:d0:73:1e:20:26:60:
82:38:29:77:6c:3b:b0:1e:a0:fb:47:17:2e:a0:5f:
b7:04:a5:03:0c:fd:9d:21:51:20:ef:5c:cf:5b:f4:
17:f9:56:f3:eb:80:fc:61:b0:d4:89:22:74:25:d2:
b5:da:c2:92:e2:e2:eb:1f:0d:5e:a4:e5:62:f3:29:
1d:22:68:1e:70:24:72:c1:42:8a:6a:a7:0b:7a:3e:
77:a9:96:46:91:18:21:90:d9:12:4b:cd:a2:fe:59:
61:8a:e8:46:ce:e3:c5:c7:18:9a:ff:db:48:2c:48:
57:fe:0f:6b:1c:35:63:08:b9:89:c5:3d:cf:7a:19:
3d:26:f3:8f:ab:21:8c:b9:bd:0a:9f:4a:0b:71:ee:
37:40:c8:df:6b:a9:a9:24:82:f7:55:a4:57:72:16:
9c:90:01:c3:37:fc:de:77:6e:93:6b:f9:d9:89:b0:
90:c8:ff:80:d9:a7:67:d6:5e:fe:2b:78:64:85:31:
56:9a:28:58:18:fa:c2:e5:c6:4b:cd:cb:b9:6c:14:
b6:dc:d9:0a:5c:82:f4:85:a6:b0:58:89:51:fc:f9:
c4:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:B3:1F:E9:4B:42:4B:18:50:2D:BD:E2:C1:CD:1A:2B:EB:87:A8:E7
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/VLMf6UtCSxhQLb3iwc0aK-uHqOc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:1101::-2a14:1103:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
04:96:50:cf:1d:b6:e4:18:a7:7b:e4:b7:4c:27:57:ea:c8:5c:
1f:7c:40:f0:bf:43:10:63:f7:0a:a4:ff:0d:5f:9c:7b:6b:ae:
b2:c7:d3:ac:15:2a:be:2c:77:7e:db:29:ba:19:57:00:61:b2:
a9:fe:a4:cf:ff:db:ae:c9:e8:3f:72:7e:b6:fa:4b:6e:d4:23:
d3:07:7e:0b:50:ef:cd:51:7b:c0:a5:84:45:5f:1c:ab:e3:05:
a8:37:ed:28:3e:d9:ff:89:e5:1b:31:f7:7f:2d:30:62:8e:b5:
46:76:42:5d:42:c3:dc:7c:fb:a4:0f:42:17:dd:fa:e3:84:91:
39:53:ff:c1:9e:9d:fa:78:37:68:45:c8:ed:ab:38:0e:5b:14:
a6:b2:48:5a:75:6a:f1:f6:08:33:20:78:46:f8:7c:2f:25:04:
41:ae:55:9b:e2:68:b7:6a:97:5e:9e:da:eb:7e:7f:2d:a9:70:
75:8f:be:a2:c8:39:13:b5:52:73:c7:16:a3:f0:c1:4f:32:b2:
94:6a:74:67:49:8d:63:21:5c:9c:19:61:16:c6:20:37:e7:2e:
7e:a6:df:e2:d1:9e:3b:34:14:e7:c2:71:de:fb:7b:81:89:1a:
0b:54:10:64:6a:13:7a:b1:39:59:eb:f2:82:e3:de:69:6f:2b:
1b:a6:b7:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 19:23:42 2026 by rpki-client