Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/hiw7ce9IXwyGVvGE0mR5lINLsxU.roa
File: hiw7ce9IXwyGVvGE0mR5lINLsxU.roa (raw, json)
Hash identifier: Lf0B9u2s7U/07ZBP4x16tcqEkc91vVAM7PqmcdXsfWI=
Subject key identifier: 86:2C:3B:71:EF:48:5F:0C:86:56:F1:84:D2:64:79:94:83:4B:B3:15
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 019FAC71EA40635F52D201B410BDE4FF2E1B
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/hiw7ce9IXwyGVvGE0mR5lINLsxU.roa
Signing time: Wed 29 Jul 2026 05:56:14 +0000
ROA not before: Wed 29 Jul 2026 05:56:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 2a10:3c83::/32 maxlen: 32
2a10:3c85::/32 maxlen: 32
2a10:3c86::/32 maxlen: 32
2a13:bb40::/29 maxlen: 29
2a13:c240::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 05:56:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:71:ea:40:63:5f:52:d2:01:b4:10:bd:e4:ff:2e:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Jul 29 05:56:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=862c3b71ef485f0c8656f184d2647994834bb315
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:71:d5:36:ff:c2:c2:04:3e:3f:b3:c3:d6:c6:
09:60:38:0e:2b:a3:b4:c1:c4:13:fe:9f:81:ba:b5:
81:00:26:97:6a:5a:c0:ae:d9:e4:fa:2a:56:0e:e5:
33:6c:5b:d6:07:a3:1b:b9:8c:8b:b5:9a:e8:85:f7:
ba:db:8e:b9:b4:cc:e3:80:d5:8f:9f:4b:7c:d5:8d:
95:8a:19:dd:ea:d5:3b:b5:36:4f:02:48:7e:d5:85:
d5:a0:56:36:f7:e8:d0:3d:17:f3:1b:f2:32:af:bd:
56:3f:77:5a:27:a7:85:17:68:2c:2e:29:83:76:11:
00:a4:1d:28:74:ae:9b:33:71:56:da:5f:79:45:0f:
58:14:bf:e4:ea:f7:f2:a5:59:35:14:8c:db:d2:6b:
db:ab:21:63:c7:eb:63:d7:a8:d0:f8:3c:6b:d2:b8:
45:84:85:f1:e3:4d:28:66:0b:38:43:c1:16:db:c0:
d8:f0:07:03:f1:83:63:4e:63:27:7e:9b:a3:0e:33:
e0:69:d9:08:7b:13:b0:b7:3d:0d:37:66:02:ea:fc:
41:98:4c:88:ce:b4:8d:85:75:89:6f:bf:c2:93:39:
fc:f1:6f:b3:52:a2:1d:eb:79:69:28:73:18:be:b0:
16:e6:4e:d2:02:21:8d:6d:52:2c:58:aa:fa:4e:17:
11:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:2C:3B:71:EF:48:5F:0C:86:56:F1:84:D2:64:79:94:83:4B:B3:15
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/hiw7ce9IXwyGVvGE0mR5lINLsxU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:3c83::/32
2a10:3c85::-2a10:3c86:ffff:ffff:ffff:ffff:ffff:ffff
2a13:bb40::/29
2a13:c240::/29
Signature Algorithm: sha256WithRSAEncryption
3b:71:4e:1d:09:08:fd:39:59:2d:9b:ce:5a:a9:ae:60:c6:06:
ec:ed:2b:de:34:57:b2:e2:8c:42:0b:3a:c1:42:60:77:e5:94:
65:b3:66:27:49:05:5e:08:94:81:df:38:94:ce:e7:0e:fc:88:
41:7d:b0:d8:7e:8f:68:1c:82:0a:63:24:6b:93:ae:fe:8c:f8:
fc:d5:42:72:ae:e3:86:2c:81:9d:7c:e1:07:b0:d7:07:83:23:
17:83:84:43:91:df:f3:be:f9:1b:3c:8d:66:92:39:81:4e:fc:
dc:01:0c:03:50:a0:db:ad:ed:e8:46:2e:ba:e4:14:e7:db:e1:
bc:3d:98:02:ee:54:73:ec:13:fd:89:04:2b:21:78:f1:7b:83:
03:ea:95:f4:69:56:2a:e7:8a:2f:fe:66:f5:62:99:35:8b:ff:
0e:c4:42:e8:86:02:f9:1a:75:a7:26:68:7c:9e:a9:64:0e:7c:
de:13:ba:40:a4:30:c1:a4:45:49:e8:31:c7:06:73:45:12:c5:
55:23:47:10:4d:06:fc:aa:fc:70:c3:a7:e5:f8:4c:b5:e8:1f:
d3:05:87:91:83:e9:69:67:7f:01:57:f4:6b:3d:0d:db:61:63:
24:0e:1c:89:2c:9f:2a:33:86:82:98:80:b7:6a:ac:e4:86:f4:
2b:59:82:8d
-----BEGIN CERTIFICATE-----
MIIFHDCCBASgAwIBAgISAZ+scepAY19S0gG0EL3k/y4bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMTQxMTJkMDVlOWQ4NzYxNDlkMjc3OGQ0OGVkYWFhMzI0
ZGIwYTUwHhcNMjYwNzI5MDU1NjE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NjJjM2I3MWVmNDg1ZjBjODY1NmYxODRkMjY0Nzk5NDgzNGJiMzE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1HHVNv/CwgQ+P7PD1sYJYDgOK6O0
wcQT/p+BurWBACaXalrArtnk+ipWDuUzbFvWB6MbuYyLtZrohfe62465tMzjgNWP
n0t81Y2Vihnd6tU7tTZPAkh+1YXVoFY29+jQPRfzG/Iyr71WP3daJ6eFF2gsLimD
dhEApB0odK6bM3FW2l95RQ9YFL/k6vfypVk1FIzb0mvbqyFjx+tj16jQ+Dxr0rhF
hIXx400oZgs4Q8EW28DY8AcD8YNjTmMnfpujDjPgadkIexOwtz0NN2YC6vxBmEyI
zrSNhXWJb7/Ckzn88W+zUqId63lpKHMYvrAW5k7SAiGNbVIsWKr6ThcRSwIDAQAB
o4ICKDCCAiQwHQYDVR0OBBYEFIYsO3HvSF8MhlbxhNJkeZSDS7MVMB8GA1UdIwQY
MBaAFE8UES0F6dh2FJ0neNSO2qoyTbClMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUt
YmFmYmRmYzgxMzJhLzEvaGl3N2NlOUlYd3lHVnZHRTBtUjVsSU5Mc3hVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUtYmFmYmRmYzgxMzJh
LzEvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD4GCCsGAQUFBwEHAQH/BC8wLTArBAIAAjAlAwUAKhA8gzAO
AwUAKhA8hQMFACoQPIYDBQMqE7tAAwUDKhPCQDANBgkqhkiG9w0BAQsFAAOCAQEA
O3FOHQkI/TlZLZvOWqmuYMYG7O0r3jRXsuKMQgs6wUJgd+WUZbNmJ0kFXgiUgd84
lM7nDvyIQX2w2H6PaByCCmMka5Ou/oz4/NVCcq7jhiyBnXzhB7DXB4MjF4OEQ5Hf
8775GzyNZpI5gU783AEMA1Cg263t6EYuuuQU59vhvD2YAu5Uc+wT/YkEKyF48XuD
A+qV9GlWKueKL/5m9WKZNYv/DsRC6IYC+Rp1pyZofJ6pZA583hO6QKQwwaRFSegx
xwZzRRLFVSNHEE0G/Kr8cMOn5fhMtegf0wWHkYPpaWd/AVf0az0N22FjJA4ciSyf
KjOGgpiAt2qs5Ib0K1mCjQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 14:10:49 2026 by rpki-client