Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/cUUpRwJnsnM4QLuXdPB2P4wh_rU.roa
File: cUUpRwJnsnM4QLuXdPB2P4wh_rU.roa (raw, json)
Hash identifier: cYBJJYkMVC3xfYV741mpi50WJ7rDtVXMBlo7YoqWigs=
Subject key identifier: 71:45:29:47:02:67:B2:73:38:40:BB:97:74:F0:76:3F:8C:21:FE:B5
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 01A015E646A94E601E9D0B25EDF327B5F0A1
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/cUUpRwJnsnM4QLuXdPB2P4wh_rU.roa
Signing time: Tue 18 Aug 2026 17:23:28 +0000
ROA not before: Tue 18 Aug 2026 17:23:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63023
IP address blocks: 2a13:c240::/29 maxlen: 29
2a13:e040::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Aug 2026 11:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:15:e6:46:a9:4e:60:1e:9d:0b:25:ed:f3:27:b5:f0:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Aug 18 17:23:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=714529470267b2733840bb9774f0763f8c21feb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:1c:b8:4f:83:f8:f1:87:25:e5:04:ba:47:84:
21:be:3c:0b:4b:29:8b:73:83:67:9a:06:2c:45:b1:
19:f0:13:70:f3:a5:d1:e9:78:dd:d6:b8:4e:7f:71:
e1:77:a7:26:5c:11:2d:af:51:47:3a:cf:b5:31:87:
09:46:49:6b:38:3e:66:a6:08:06:8d:fc:f3:7f:b2:
e6:f8:9a:f7:2e:2b:bc:56:07:b8:54:77:65:84:fe:
dc:61:61:5b:4f:ef:6d:8e:94:a7:07:6d:11:33:69:
e5:d3:87:52:bf:57:9f:e2:5c:e9:d5:cb:28:3d:75:
a7:f9:89:12:32:09:6b:d6:a0:c4:19:82:d8:1a:e7:
00:f7:9c:f2:26:05:b0:85:cc:03:af:af:14:f0:46:
62:3a:d9:f6:42:c9:dc:bf:e6:0a:b4:84:8f:d4:15:
1d:3c:04:38:12:d8:e9:63:b5:71:c5:af:85:e7:97:
b6:65:c1:3d:bb:e9:cb:a4:9e:98:dd:dd:fe:a3:7f:
4b:76:ad:59:61:13:2c:e0:a2:47:4f:cf:29:91:c5:
f2:ad:f8:6e:3f:8c:c4:f4:32:42:02:2a:36:c7:11:
c9:e7:5c:81:57:5d:bb:e7:cd:c2:45:ed:73:b4:4f:
43:b5:5e:db:45:2f:8c:be:49:4c:74:d8:6b:03:63:
81:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:45:29:47:02:67:B2:73:38:40:BB:97:74:F0:76:3F:8C:21:FE:B5
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/cUUpRwJnsnM4QLuXdPB2P4wh_rU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:c240::/29
2a13:e040::/29
Signature Algorithm: sha256WithRSAEncryption
2c:61:98:01:4c:29:d7:42:08:ed:78:f2:68:a0:ef:a8:70:e5:
85:21:d3:9c:9c:12:7a:0c:95:f6:a1:3c:e3:46:89:49:28:6d:
55:b7:98:46:d8:40:46:73:85:c9:be:f6:56:40:48:a1:99:fb:
d5:6f:95:e9:ac:ba:c7:d6:f1:cf:82:94:8e:fe:35:55:f8:b9:
25:3f:aa:9a:08:f5:90:ba:e5:32:d6:f6:40:5d:f1:d8:97:f4:
af:6d:2e:64:bf:3d:e2:67:7b:f5:0f:b1:a8:06:97:b8:13:bd:
e7:76:ce:a8:74:20:4a:5d:74:cc:e2:2f:b5:91:dd:ef:27:6e:
3f:a8:50:0e:05:2d:5f:6a:b4:a4:a8:38:e0:67:06:b1:ee:e8:
71:95:f4:22:d7:94:4a:b3:92:a3:32:00:c9:37:7b:60:99:16:
81:c7:3f:50:81:10:52:9f:69:09:6d:d3:99:e2:c1:34:1e:75:
fe:02:60:02:e1:cf:3d:40:2a:1a:c9:6d:66:b5:46:a0:59:06:
a0:0b:a2:f9:cf:e4:2a:05:68:5e:47:ec:35:90:d0:b7:1e:2b:
98:a7:56:62:4b:53:0c:dd:50:52:fd:0b:1c:24:6f:c2:a0:70:
37:a1:66:a9:15:1e:6a:3d:7f:d8:9d:a3:6d:ff:fa:4b:65:f9:
c5:57:4d:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 20:42:01 2026 by rpki-client