Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/_nH66stxSX-120s9MAjmezKNqWA.roa
File: _nH66stxSX-120s9MAjmezKNqWA.roa (raw, json)
Hash identifier: hWix1caIb7PdDBUg9Po+5yS79ApHQgoUcdzkjE/PL+w=
Subject key identifier: FE:71:FA:EA:CB:71:49:7F:B5:DB:4B:3D:30:08:E6:7B:32:8D:A9:60
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 019DBF191D0F1C7AAD940D80986065635269
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/_nH66stxSX-120s9MAjmezKNqWA.roa
Signing time: Fri 24 Apr 2026 10:46:27 +0000
ROA not before: Fri 24 Apr 2026 10:46:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215152
IP address blocks: 2a06:5fc0::/29 maxlen: 29
2a0f:9b40::/29 maxlen: 29
2a13:e040::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:bf:19:1d:0f:1c:7a:ad:94:0d:80:98:60:65:63:52:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Apr 24 10:46:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fe71faeacb71497fb5db4b3d3008e67b328da960
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:6b:2a:85:a3:d1:84:5f:69:ab:fd:52:ab:96:
f0:1f:29:4d:9d:12:c8:93:54:bb:f8:fe:d8:53:59:
71:aa:4a:60:d6:d7:c8:77:b8:74:ad:61:a1:bf:71:
97:3a:02:39:53:b5:91:3c:90:ae:59:ae:08:37:97:
2d:18:5e:96:72:11:17:b8:ba:fe:a3:ac:1b:76:c8:
2d:4e:f0:68:21:ba:22:cb:27:29:12:ad:09:a0:45:
fc:ea:7b:3f:2c:2c:91:74:33:89:2c:9d:35:60:16:
d1:5c:ec:12:a3:fb:61:3c:d2:d1:3d:d7:d9:8a:e1:
71:19:89:1f:b6:95:9e:44:2c:03:5f:9b:1d:14:e4:
86:54:61:1d:24:48:b8:cc:8b:88:e8:f9:08:9f:5d:
a2:dc:0c:e7:41:67:b1:eb:4e:2b:ec:00:35:2f:2f:
1c:e0:b3:d3:b8:d9:41:a0:e2:b9:f6:ea:28:ba:85:
c0:17:a7:9c:fe:b1:57:10:01:96:1a:fb:26:44:6c:
b1:5f:bd:65:f8:b2:8a:c9:0f:38:e9:9c:3a:ce:bb:
a8:8c:5c:64:55:a4:e5:5f:90:5c:f3:b5:59:18:d3:
b1:20:e0:21:6a:e4:01:98:2c:32:1a:ba:28:3f:ad:
61:ad:01:4b:3d:27:89:29:4e:61:14:8b:78:46:fd:
c8:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:71:FA:EA:CB:71:49:7F:B5:DB:4B:3D:30:08:E6:7B:32:8D:A9:60
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/_nH66stxSX-120s9MAjmezKNqWA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:5fc0::/29
2a0f:9b40::/29
2a13:e040::/29
Signature Algorithm: sha256WithRSAEncryption
5e:21:ec:2c:47:1c:23:a5:d0:ed:1a:1b:30:a7:4f:f0:b5:da:
12:9a:19:d6:ea:a4:62:7c:c1:c8:e9:1b:0d:6d:a9:ae:72:71:
e3:5b:28:f4:0c:d6:ea:fe:62:7c:8f:69:f4:9e:60:29:f3:ff:
60:c8:51:bb:e9:69:bb:45:f2:a1:3e:4c:73:bf:2e:a6:72:aa:
8b:22:3b:80:83:d3:52:7c:ed:91:1d:d7:ab:33:43:cf:b2:7b:
3e:31:f2:98:19:12:c4:0e:1a:c9:ec:96:49:80:59:72:6b:4f:
00:95:b8:ca:26:7b:d2:c8:65:47:65:26:37:c0:f4:8a:98:ff:
6f:b0:c3:76:69:8b:f7:85:df:4f:2b:0d:9c:91:fa:55:10:48:
f9:e7:4c:e3:97:fe:27:b5:90:1c:56:a7:99:ce:5f:7e:85:2e:
87:fd:b5:3d:c5:5c:29:31:fb:e7:f4:6e:ef:7e:8a:e2:b8:58:
43:d2:20:2c:f0:8e:54:ef:70:03:7a:ab:ec:2c:30:2b:a6:3a:
30:a7:4a:58:92:74:0d:e8:ab:e3:0d:91:9e:f4:71:74:ab:cc:
4c:c8:59:11:ef:f3:ff:b2:60:80:e9:75:79:40:8c:92:38:7e:
51:22:ac:f3:48:46:ba:a9:08:c5:5e:38:77:b9:c0:b5:6c:f0:
8e:7f:1d:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 25 03:36:04 2026 by rpki-client