Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/oLahaAUGHlQjYVkzSqFNOKxcNeQ.roa
File: oLahaAUGHlQjYVkzSqFNOKxcNeQ.roa (raw, json)
Hash identifier: nEAknZm2GfQ8BqEuBbXglmAuAr4gizog/WSiP6thYdw=
Subject key identifier: A0:B6:A1:68:05:06:1E:54:23:61:59:33:4A:A1:4D:38:AC:5C:35:E4
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 01A1646A3FE261B601BA6BF4A7D9F770A9DB
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/oLahaAUGHlQjYVkzSqFNOKxcNeQ.roa
Signing time: Thu 22 Oct 2026 16:20:47 +0000
ROA not before: Thu 22 Oct 2026 16:20:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63023
IP address blocks: 2a13:c240::/29 maxlen: 29
2a13:e040::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 05:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:64:6a:3f:e2:61:b6:01:ba:6b:f4:a7:d9:f7:70:a9:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Oct 22 16:20:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a0b6a16805061e54236159334aa14d38ac5c35e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:12:0f:6b:d2:3d:7a:87:39:c3:d2:82:ba:11:
10:55:e8:36:bb:e3:d1:0d:2d:dc:be:5a:a0:37:b2:
c9:8d:0a:ed:43:53:85:1f:19:29:15:c0:96:d2:e5:
a6:52:e4:9e:25:63:11:9b:d7:a0:b5:76:cb:14:da:
7d:71:bc:23:0d:f1:0b:94:89:84:13:18:ea:d8:92:
5b:f9:e4:1c:5a:01:ac:c8:a4:2f:4f:96:e0:5f:a2:
54:84:c0:7c:b3:4b:0a:53:93:27:53:18:69:58:1b:
07:0c:d9:f3:59:79:90:94:a6:d7:80:ae:03:bc:3f:
67:22:ae:b9:4c:0a:97:87:5f:3c:24:d9:f6:1d:c4:
3b:a7:2d:4a:f4:60:3c:15:2a:f7:25:2f:82:aa:a6:
c4:82:e1:d7:ba:46:2c:de:d9:41:d0:40:29:4d:ca:
4e:81:be:4a:9f:29:ec:22:e1:4f:77:a6:8f:96:98:
99:55:ba:fd:b3:73:e1:28:e6:51:2b:1a:df:07:81:
03:21:75:0b:dd:00:59:65:53:e9:69:0e:17:2b:45:
5b:6d:0a:76:42:e2:b7:96:78:21:82:57:a1:25:5f:
2f:6b:16:28:70:9d:a4:d8:8a:91:e4:84:bb:66:0c:
7a:66:eb:17:36:83:af:ba:1a:8a:4a:71:01:ed:12:
92:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:B6:A1:68:05:06:1E:54:23:61:59:33:4A:A1:4D:38:AC:5C:35:E4
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/oLahaAUGHlQjYVkzSqFNOKxcNeQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:c240::/29
2a13:e040::/29
Signature Algorithm: sha256WithRSAEncryption
ad:52:22:cd:1a:28:6c:f6:1c:82:00:6c:f9:1f:12:20:68:0e:
bb:34:b6:47:4e:6f:37:1d:ae:4f:e1:72:7f:da:9b:58:bc:26:
38:f8:5d:82:25:e1:e6:1e:33:50:bf:bf:6f:26:da:95:4a:2b:
a9:70:a3:61:8e:1e:59:0f:aa:9f:1c:30:a5:d5:e6:1b:c6:54:
00:63:29:67:0a:af:69:0b:08:62:e8:78:ae:0f:83:25:7c:f0:
1c:6e:8d:5a:c2:a1:2d:de:0c:46:8d:19:8f:86:41:c3:7a:30:
1e:f7:36:db:33:9f:b7:4d:22:5c:17:bb:19:26:8b:86:ff:db:
32:98:e1:c7:2a:db:09:e4:34:04:ac:d4:65:89:8c:dc:2b:ea:
d3:96:3b:fd:bc:40:3d:06:40:52:c7:be:1e:08:af:55:d1:a0:
cc:b9:94:68:fd:2b:14:2d:12:3b:83:08:10:fc:2e:b4:9d:5a:
64:5b:52:54:15:a7:3e:82:83:55:ed:a4:72:b1:15:9a:a0:2d:
ad:12:b9:06:9b:ce:ac:70:ad:d7:01:a8:ed:15:e6:ed:fb:2f:
43:88:23:77:89:8b:8b:2a:83:2c:97:a9:a0:bd:50:ad:b4:0d:
8b:81:cc:40:55:b8:e1:a1:ee:83:11:a7:91:5d:76:7c:3a:22:
10:b8:5e:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 11:50:34 2026 by rpki-client