Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/dv55XtxpgMAtuYWQoirecplqTwg.roa
File: dv55XtxpgMAtuYWQoirecplqTwg.roa (raw, json)
Hash identifier: VB8SZ8cDwmHPT0nKOII8NXFmZ43KBQvAPNvtUQPbvqY=
Subject key identifier: 76:FE:79:5E:DC:69:80:C0:2D:B9:85:90:A2:2A:DE:72:99:6A:4F:08
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 01A0ECD24546B53FA80A2136CF0FE9D9A69A
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/dv55XtxpgMAtuYWQoirecplqTwg.roa
Signing time: Tue 29 Sep 2026 10:59:58 +0000
ROA not before: Tue 29 Sep 2026 10:59:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63023
IP address blocks: 2a13:c240::/29 maxlen: 29
2a13:e040::/29 maxlen: 29
2a14:62c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 14:02:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:d2:45:46:b5:3f:a8:0a:21:36:cf:0f:e9:d9:a6:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Sep 29 10:59:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=76fe795edc6980c02db98590a22ade72996a4f08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c1:7a:cc:b5:81:67:01:8e:9f:f1:69:cc:0a:
07:8e:52:20:97:54:2b:8d:89:fe:08:60:3c:82:a6:
98:ac:6f:2a:7e:11:03:01:c5:fc:a8:ca:42:99:93:
d8:ed:d9:db:f6:08:46:0e:f0:f2:54:b4:d9:99:91:
20:ce:a3:90:67:18:9d:51:6e:bb:4b:62:1e:1e:e1:
1f:8d:eb:9a:a1:8a:15:54:c5:d0:a7:38:37:3d:93:
7c:cb:b3:2e:29:f8:53:b3:bd:1a:36:1b:c7:6e:14:
1a:94:0c:7d:4b:cc:2f:e1:5e:d0:67:80:61:57:4c:
d6:41:94:57:6f:33:52:93:72:1c:11:cf:b4:26:63:
4f:90:fb:71:02:71:4a:c9:39:7c:d6:c6:52:7e:c5:
a7:a0:fd:29:fa:9b:cf:33:1e:52:a2:83:74:6c:47:
93:8a:1a:04:db:0d:6a:ad:bf:a0:c8:12:eb:b0:96:
8e:a7:d4:53:3f:29:5a:63:fe:e7:64:b3:a1:c4:96:
e3:b4:bf:d0:2c:20:76:aa:82:18:58:ec:b6:fc:6a:
b7:c8:2a:db:7d:7b:6d:52:69:24:58:11:a8:51:55:
f4:53:42:df:24:f4:82:56:bd:fd:c0:83:b2:a6:6f:
f8:42:c5:39:41:fd:a7:43:ab:c4:54:cd:3d:cc:b9:
83:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:FE:79:5E:DC:69:80:C0:2D:B9:85:90:A2:2A:DE:72:99:6A:4F:08
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/dv55XtxpgMAtuYWQoirecplqTwg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:c240::/29
2a13:e040::/29
2a14:62c0::/29
Signature Algorithm: sha256WithRSAEncryption
31:fc:4d:9c:ab:96:c4:b2:bd:ab:a2:80:8f:2f:8c:b4:be:27:
a1:53:0a:e9:68:83:20:a3:b0:44:96:a5:db:a5:61:4c:8b:d4:
d0:05:bd:97:1f:37:45:88:eb:1c:75:27:51:2f:25:3c:3b:7e:
1f:a8:de:92:5a:c8:f8:15:0e:9e:fa:ee:44:ce:ad:d6:62:0f:
95:9f:dc:13:e9:29:a3:fd:ee:8a:e9:ec:c0:35:9c:2c:8c:f2:
39:ee:50:6e:61:64:7f:f0:0b:aa:61:70:1f:4b:55:9a:f5:07:
89:af:eb:e4:c7:88:4b:e5:21:4b:3e:0a:d9:08:ba:6c:ee:01:
37:eb:41:e8:6f:ed:34:b9:61:51:ff:a9:6e:d3:08:5a:1b:7c:
e1:05:04:c3:33:bf:4f:e5:7f:95:8c:79:2f:50:de:e2:d8:88:
04:93:cc:57:48:50:5e:80:a6:56:97:c7:37:1c:26:54:2c:0b:
f3:34:e8:ee:91:77:a7:f7:e9:0d:76:6d:01:88:82:b3:c5:c2:
06:75:56:c7:84:32:c5:5d:e4:29:35:10:1f:89:b1:fb:2b:05:
97:c9:77:08:9d:ae:41:b6:32:e4:b8:7a:30:0d:91:1b:cc:64:
fa:5a:cf:4a:96:35:93:22:78:6c:c5:a5:08:e9:d0:cd:9b:e9:
38:53:3e:b7
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAaDs0kVGtT+oCiE2zw/p2aaaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMTQxMTJkMDVlOWQ4NzYxNDlkMjc3OGQ0OGVkYWFhMzI0
ZGIwYTUwHhcNMjYwOTI5MTA1OTU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NmZlNzk1ZWRjNjk4MGMwMmRiOTg1OTBhMjJhZGU3Mjk5NmE0ZjA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0sF6zLWBZwGOn/FpzAoHjlIgl1Qr
jYn+CGA8gqaYrG8qfhEDAcX8qMpCmZPY7dnb9ghGDvDyVLTZmZEgzqOQZxidUW67
S2IeHuEfjeuaoYoVVMXQpzg3PZN8y7MuKfhTs70aNhvHbhQalAx9S8wv4V7QZ4Bh
V0zWQZRXbzNSk3IcEc+0JmNPkPtxAnFKyTl81sZSfsWnoP0p+pvPMx5SooN0bEeT
ihoE2w1qrb+gyBLrsJaOp9RTPylaY/7nZLOhxJbjtL/QLCB2qoIYWOy2/Gq3yCrb
fXttUmkkWBGoUVX0U0LfJPSCVr39wIOypm/4QsU5Qf2nQ6vEVM09zLmDuwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFHb+eV7caYDALbmFkKIq3nKZak8IMB8GA1UdIwQY
MBaAFE8UES0F6dh2FJ0neNSO2qoyTbClMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUt
YmFmYmRmYzgxMzJhLzEvZHY1NVh0eHBnTUF0dVlXUW9pcmVjcGxxVHdnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUtYmFmYmRmYzgxMzJh
LzEvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAbBAIAAjAVAwUDKhPCQAMF
AyoT4EADBQMqFGLAMA0GCSqGSIb3DQEBCwUAA4IBAQAx/E2cq5bEsr2rooCPL4y0
viehUwrpaIMgo7BElqXbpWFMi9TQBb2XHzdFiOscdSdRLyU8O34fqN6SWsj4FQ6e
+u5Ezq3WYg+Vn9wT6Smj/e6K6ezANZwsjPI57lBuYWR/8AuqYXAfS1Wa9QeJr+vk
x4hL5SFLPgrZCLps7gE360Hob+00uWFR/6lu0whaG3zhBQTDM79P5X+VjHkvUN7i
2IgEk8xXSFBegKZWl8c3HCZULAvzNOjukXen9+kNdm0BiIKzxcIGdVbHhDLFXeQp
NRAfibH7KwWXyXcIna5BtjLkuHowDZEbzGT6Ws9KljWTInhsxaUI6dDNm+k4Uz63
-----END CERTIFICATE-----
Generated at Thu Oct 1 19:39:06 2026 by rpki-client