Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/oIGJje2ePcUSG5q7XVGSqJ_EKOw.roa
File: oIGJje2ePcUSG5q7XVGSqJ_EKOw.roa (raw, json)
Hash identifier: 0eygcX9L2CVcQ+JjMgY/6wx/Rsjxg20+c/u+Nu269ck=
Subject key identifier: A0:81:89:8D:ED:9E:3D:C5:12:1B:9A:BB:5D:51:92:A8:9F:C4:28:EC
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 01A0AB75A19DB643FB54CFFD7167C04C521F
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/oIGJje2ePcUSG5q7XVGSqJ_EKOw.roa
Signing time: Wed 16 Sep 2026 18:23:27 +0000
ROA not before: Wed 16 Sep 2026 18:23:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63023
IP address blocks: 2a13:c240::/29 maxlen: 29
2a13:e040::/29 maxlen: 29
2a14:62c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 20:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ab:75:a1:9d:b6:43:fb:54:cf:fd:71:67:c0:4c:52:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Sep 16 18:23:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a081898ded9e3dc5121b9abb5d5192a89fc428ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:29:16:e4:da:9b:fc:68:d6:03:d9:3f:c5:c8:
2e:40:80:78:53:7a:50:fa:79:1b:31:3b:51:8d:fe:
bd:85:bd:7f:cd:4d:a4:ea:08:ce:8b:ab:80:d2:16:
83:54:6b:11:4a:40:91:9f:4e:bc:ea:27:03:39:9c:
43:c6:a3:79:82:9c:0e:40:69:49:11:1b:cc:f4:c9:
1c:d9:6e:17:6f:cb:8f:03:dc:58:09:37:70:e6:04:
e5:a1:0c:15:d6:ba:a1:06:ae:43:ed:88:a7:e0:bc:
b2:de:4f:6c:06:94:64:c2:90:e8:67:59:1a:86:07:
e3:4d:6c:db:0d:ee:d3:63:41:92:4b:b1:d7:36:a5:
cf:0e:40:9d:54:55:b0:02:1d:b9:b5:91:2f:e1:32:
1e:2e:15:fa:74:01:67:a6:6d:a3:33:f1:4d:37:17:
46:a7:1a:5e:9d:ca:32:54:a7:c0:7e:f9:74:fb:ac:
28:dd:bb:ae:d6:aa:5f:ad:d1:9a:e4:2d:b1:7d:33:
2b:4c:99:6b:bd:f8:87:46:ea:e5:a8:06:44:04:8c:
93:c2:5c:a8:cb:b4:92:9f:79:2b:77:49:84:a4:76:
e9:c8:fa:69:94:12:d8:ef:74:63:64:ff:da:5b:be:
a2:80:f7:b7:5c:86:74:4a:f9:72:80:0e:22:13:d2:
14:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:81:89:8D:ED:9E:3D:C5:12:1B:9A:BB:5D:51:92:A8:9F:C4:28:EC
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/oIGJje2ePcUSG5q7XVGSqJ_EKOw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:c240::/29
2a13:e040::/29
2a14:62c0::/29
Signature Algorithm: sha256WithRSAEncryption
7a:b6:ae:d5:d5:52:24:2f:33:0a:a1:0f:f1:6d:26:1d:cf:78:
67:90:ac:b2:3f:6c:be:4a:fd:2f:dd:8d:51:b6:86:93:c9:34:
43:6b:0a:7a:23:3b:30:ea:16:31:bf:45:bf:41:88:68:24:5d:
f7:81:4c:93:00:cd:24:09:97:09:d3:11:2f:58:b0:4e:32:ad:
e3:d8:59:41:6c:26:89:4a:60:25:cf:16:b4:0c:2e:53:36:e6:
c9:64:61:4d:08:cc:28:39:0d:ae:7a:15:7d:53:84:54:a2:d7:
09:83:2b:98:49:5d:c2:ba:b9:60:4c:76:63:43:ec:e2:18:52:
55:08:da:0d:36:0a:e8:df:a0:4f:fd:07:0e:46:23:bb:e0:26:
87:d7:bd:ac:ed:8d:e9:c6:fb:83:5d:3a:2f:da:0a:db:db:99:
b4:07:68:dd:d5:d3:8c:f7:79:62:6a:d9:00:9b:7e:90:8b:ec:
96:1c:6f:97:dd:91:1d:e9:8f:17:04:8a:87:60:bd:57:a1:c6:
ce:89:c1:3d:66:47:39:14:06:e0:68:bb:fe:2c:0e:e9:0b:94:
18:82:48:1c:15:bd:4d:86:1e:81:b9:1f:af:8e:b2:7e:bb:80:
48:f7:f2:2c:e4:46:12:2e:63:bf:ab:f0:81:e8:c0:78:7a:b5:
a9:ea:f2:86
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAaCrdaGdtkP7VM/9cWfATFIfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMTQxMTJkMDVlOWQ4NzYxNDlkMjc3OGQ0OGVkYWFhMzI0
ZGIwYTUwHhcNMjYwOTE2MTgyMzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMDgxODk4ZGVkOWUzZGM1MTIxYjlhYmI1ZDUxOTJhODlmYzQyOGVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7ikW5Nqb/GjWA9k/xcguQIB4U3pQ
+nkbMTtRjf69hb1/zU2k6gjOi6uA0haDVGsRSkCRn0686icDOZxDxqN5gpwOQGlJ
ERvM9Mkc2W4Xb8uPA9xYCTdw5gTloQwV1rqhBq5D7Yin4Lyy3k9sBpRkwpDoZ1ka
hgfjTWzbDe7TY0GSS7HXNqXPDkCdVFWwAh25tZEv4TIeLhX6dAFnpm2jM/FNNxdG
pxpencoyVKfAfvl0+6wo3buu1qpfrdGa5C2xfTMrTJlrvfiHRurlqAZEBIyTwlyo
y7SSn3krd0mEpHbpyPpplBLY73RjZP/aW76igPe3XIZ0SvlygA4iE9IUpQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFKCBiY3tnj3FEhuau11RkqifxCjsMB8GA1UdIwQY
MBaAFE8UES0F6dh2FJ0neNSO2qoyTbClMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUt
YmFmYmRmYzgxMzJhLzEvb0lHSmplMmVQY1VTRzVxN1hWR1NxSl9FS093LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUtYmFmYmRmYzgxMzJh
LzEvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAbBAIAAjAVAwUDKhPCQAMF
AyoT4EADBQMqFGLAMA0GCSqGSIb3DQEBCwUAA4IBAQB6tq7V1VIkLzMKoQ/xbSYd
z3hnkKyyP2y+Sv0v3Y1RtoaTyTRDawp6Izsw6hYxv0W/QYhoJF33gUyTAM0kCZcJ
0xEvWLBOMq3j2FlBbCaJSmAlzxa0DC5TNubJZGFNCMwoOQ2uehV9U4RUotcJgyuY
SV3CurlgTHZjQ+ziGFJVCNoNNgro36BP/QcORiO74CaH172s7Y3pxvuDXTov2grb
25m0B2jd1dOM93liatkAm36Qi+yWHG+X3ZEd6Y8XBIqHYL1XocbOicE9Zkc5FAbg
aLv+LA7pC5QYgkgcFb1Nhh6BuR+vjrJ+u4BI9/Is5EYSLmO/q/CB6MB4erWp6vKG
-----END CERTIFICATE-----
Generated at Sat Sep 19 06:21:42 2026 by rpki-client