Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/htxD3yJVyfmZ45zz_29zxMXGS5s.roa
File: htxD3yJVyfmZ45zz_29zxMXGS5s.roa (raw, json)
Hash identifier: 1BKpT/bkvCc/nS500tehkhyLmza9oxnlk3mqmHSTHCY=
Subject key identifier: 86:DC:43:DF:22:55:C9:F9:99:E3:9C:F3:FF:6F:73:C4:C5:C6:4B:9B
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 01A0C2884D56F0E094A91838315B081253E4
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/htxD3yJVyfmZ45zz_29zxMXGS5s.roa
Signing time: Mon 21 Sep 2026 05:55:07 +0000
ROA not before: Mon 21 Sep 2026 05:55:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402933
IP address blocks: 2a10:77c0::/29 maxlen: 29
2a13:c440::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:88:4d:56:f0:e0:94:a9:18:38:31:5b:08:12:53:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Sep 21 05:55:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=86dc43df2255c9f999e39cf3ff6f73c4c5c64b9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:52:ba:df:e1:c1:8e:ae:71:76:fb:53:cc:5b:
2b:86:8d:32:8e:79:a1:99:84:b0:2c:9d:82:61:04:
68:18:c7:8c:fc:6c:fd:4a:e6:bb:5b:3e:5f:cf:76:
d4:a5:83:63:e1:2e:35:cc:ce:a1:8c:fc:3e:6e:1f:
10:b0:6f:5c:69:26:b9:42:c0:bc:c7:de:c9:03:90:
4f:ba:cf:45:85:b6:09:f1:8c:af:01:f2:17:39:b5:
37:d9:2d:95:30:b6:c9:dd:8e:4f:89:c0:c5:ae:1e:
91:52:e0:58:0b:15:2a:d4:53:5a:c2:c5:80:e6:80:
03:e0:f2:fa:9f:31:96:8d:7e:cc:44:a8:10:b7:7f:
bb:be:2c:4f:98:7f:29:3b:25:dd:48:a1:28:d8:e2:
8c:59:71:aa:0b:c4:c4:fe:c9:12:4d:3c:ae:4e:45:
a1:41:2a:0d:06:fc:b6:b1:a5:58:48:17:fb:cd:70:
f0:3c:8f:7e:45:08:ac:41:41:28:6d:b5:09:b4:ae:
96:85:20:5f:73:64:84:79:47:1e:a2:b5:80:ba:4d:
21:dc:64:05:f2:4d:2c:13:30:1a:be:35:de:66:a1:
03:fb:2d:96:f5:dc:30:11:71:41:71:16:0d:7d:67:
f4:2d:75:4d:19:ca:96:ab:59:00:04:52:9b:12:c7:
ac:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:DC:43:DF:22:55:C9:F9:99:E3:9C:F3:FF:6F:73:C4:C5:C6:4B:9B
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/htxD3yJVyfmZ45zz_29zxMXGS5s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:77c0::/29
2a13:c440::/29
Signature Algorithm: sha256WithRSAEncryption
04:79:cb:5b:48:bf:90:18:52:cd:63:02:84:4a:3f:08:0c:fc:
77:4c:4f:a4:0c:6c:e4:b1:13:10:fc:dc:33:b4:b1:92:4f:f9:
be:49:1f:77:c0:4a:8a:05:d0:7c:72:ee:af:20:b8:67:a9:e9:
2d:9f:89:7f:2c:34:96:85:c1:49:06:da:f9:8e:ad:17:c0:78:
5e:7a:9c:c7:33:a4:c0:46:00:29:4d:42:f8:5d:b3:15:f7:e4:
c9:89:da:52:a8:fa:df:a2:1d:9a:0e:01:8d:85:e9:8e:18:f8:
a1:16:d2:f6:61:ff:7f:73:c4:31:0e:68:70:1c:0e:0e:31:7c:
71:8a:1c:ef:33:2a:1c:fe:ef:6e:e2:43:61:83:d8:b8:ea:fb:
46:c9:24:b0:c8:d5:94:90:3c:bd:33:bf:02:62:7f:75:cd:15:
29:6b:dd:fd:fb:e4:2b:fe:2d:7b:9a:fd:b4:38:da:46:06:c4:
1a:ac:1a:68:47:f9:46:c1:15:62:c5:94:d6:ab:a4:49:39:6b:
00:96:20:f1:3b:e8:c2:8d:62:1c:d7:e4:63:f4:d2:ca:2b:23:
18:92:49:bf:4e:ed:a4:21:27:cb:fb:88:5a:8e:92:01:94:95:
94:09:24:d7:65:92:ee:2f:88:10:fd:0f:b9:7a:1b:91:bf:fc:
e9:ce:85:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 17:55:14 2026 by rpki-client