Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/Y_xRN7ZExmvXWq1LEqrGXR5ioSs.roa
File: Y_xRN7ZExmvXWq1LEqrGXR5ioSs.roa (raw, json)
Hash identifier: 3NiTRIL9f86NxLoQCjuvyWXlCGwHXUWkfdZyKiYN4S4=
Subject key identifier: 63:FC:51:37:B6:44:C6:6B:D7:5A:AD:4B:12:AA:C6:5D:1E:62:A1:2B
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 019D695A52C9C00FB53EA4FCB1F8DCBAB651
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/Y_xRN7ZExmvXWq1LEqrGXR5ioSs.roa
Signing time: Tue 07 Apr 2026 19:10:20 +0000
ROA not before: Tue 07 Apr 2026 19:10:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 398465
IP address blocks: 2a13:c340::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Apr 2026 13:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:69:5a:52:c9:c0:0f:b5:3e:a4:fc:b1:f8:dc:ba:b6:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Apr 7 19:10:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=63fc5137b644c66bd75aad4b12aac65d1e62a12b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:6b:10:88:99:d5:1e:8f:3a:0c:be:e4:76:17:
f5:3d:6c:21:b9:36:8a:2d:7e:7a:3c:6c:98:8c:62:
d9:67:35:3a:3b:25:19:c5:84:f2:2d:93:98:50:7c:
a9:61:5b:67:2a:d3:7a:4e:2a:67:8a:4b:4f:61:19:
ff:01:30:8c:1e:cc:41:25:ea:6e:90:5e:ee:dc:7f:
3c:23:9b:01:3d:dd:a5:6a:d7:20:16:4c:5e:4f:5c:
d7:14:c6:80:8c:66:44:e0:fd:d0:38:33:63:c0:49:
9d:27:13:e6:99:41:6a:74:0d:1b:65:eb:58:83:d9:
56:61:b8:36:41:51:e0:e3:62:3a:8c:dd:de:83:27:
e0:09:b0:7e:c0:a1:99:52:9c:b1:bb:4d:97:84:bb:
e2:ef:9f:b7:37:27:d5:ca:dc:f2:73:38:41:4e:cc:
1b:cf:a6:2b:cf:0f:b3:48:d5:26:37:63:8c:fc:bc:
06:7a:c0:c4:3b:14:1f:03:db:7e:b3:92:53:3c:5f:
8f:6d:70:1a:a2:c2:44:c6:fa:13:54:30:2d:50:34:
38:ba:36:39:64:a1:d2:5a:ad:1a:d5:fd:bd:88:fb:
6f:3d:9b:2b:75:63:8a:0b:41:06:65:13:21:4c:e3:
d4:03:44:eb:0d:85:b5:0c:11:50:9f:8e:ea:5c:9b:
dd:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:FC:51:37:B6:44:C6:6B:D7:5A:AD:4B:12:AA:C6:5D:1E:62:A1:2B
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/Y_xRN7ZExmvXWq1LEqrGXR5ioSs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:c340::/29
Signature Algorithm: sha256WithRSAEncryption
d1:3b:2d:c7:0e:97:21:75:43:77:cb:6a:a0:26:dd:76:aa:34:
71:43:ee:fd:c1:1c:6a:7b:0f:84:ed:fc:b2:10:76:be:c1:e6:
28:1d:58:e2:4a:c0:b3:90:49:6b:cb:ef:fb:ad:ea:b8:6b:07:
23:33:31:3f:6c:83:a5:a1:42:13:29:99:12:e3:25:a6:09:fc:
b8:50:04:68:73:9d:f9:77:5c:54:5e:30:06:ff:7d:b4:d5:e1:
ea:77:09:88:a8:22:37:9a:ca:2f:e2:c9:cb:04:f3:34:40:ce:
48:19:36:fa:33:e0:c1:b3:d1:af:28:29:62:e5:70:a0:2a:3d:
ba:b9:1f:e6:00:5f:fb:33:c5:8d:e9:5d:11:d4:9d:bc:bd:8b:
46:2c:9a:8d:3b:82:fa:c7:e0:61:75:c9:41:6e:9b:5c:b7:2b:
26:39:31:25:9a:58:cc:de:46:ee:2c:4b:62:88:90:e7:63:51:
af:6c:e1:94:fc:db:c4:e2:60:dd:f2:1c:e9:38:45:6b:1d:f8:
45:09:d9:23:be:36:54:f1:7e:33:73:4e:f8:f4:52:ac:b9:c3:
be:91:30:d7:e7:4a:05:c1:08:31:da:7c:0a:c0:09:ba:6a:07:
4d:9c:e7:b6:55:e9:ba:e6:88:5b:45:b6:68:73:df:66:e5:fa:
38:b7:e4:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 16:34:07 2026 by rpki-client