Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/pX_tfeOct_rKm16Y6vbOh0nCiUE.roa
File: pX_tfeOct_rKm16Y6vbOh0nCiUE.roa (raw, json)
Hash identifier: SC+YAGalguyo2Mvrp3LSd4nWCpq1pxfxZfTRyUgAv8w=
Subject key identifier: A5:7F:ED:7D:E3:9C:B7:FA:CA:9B:5E:98:EA:F6:CE:87:49:C2:89:41
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 019D1BB3C59DA0B2E750827187FDB451838B
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/pX_tfeOct_rKm16Y6vbOh0nCiUE.roa
Signing time: Mon 23 Mar 2026 17:17:39 +0000
ROA not before: Mon 23 Mar 2026 17:17:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 266879
IP address blocks: 2a0d:6f80:2304::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:1b:b3:c5:9d:a0:b2:e7:50:82:71:87:fd:b4:51:83:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Mar 23 17:17:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a57fed7de39cb7faca9b5e98eaf6ce8749c28941
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:e7:94:5c:0a:d0:f7:3b:61:cf:9b:9b:f1:1e:
9f:16:77:46:b3:f5:29:f5:d5:94:19:56:a4:de:f8:
fb:7b:2b:d6:67:23:3c:c8:69:b0:5e:62:50:62:1a:
5c:1f:0b:34:b8:d8:d1:02:51:65:78:22:27:e7:e5:
22:d8:32:5c:54:cd:3b:29:df:ea:56:38:00:9b:cc:
6b:a5:59:33:f4:ea:96:db:88:7d:91:66:42:31:cc:
08:1f:17:0c:21:2c:56:4f:6b:6e:2f:23:c6:cb:98:
71:c9:88:9f:d9:24:47:d6:21:17:63:b2:d4:a8:78:
1f:2a:d7:58:ee:cd:e2:9c:3a:a4:04:76:06:6f:65:
b3:d0:53:96:ea:a1:ed:18:26:7b:8f:7a:8d:25:01:
f4:20:b8:65:7b:b0:b0:81:e6:89:1c:b7:e0:4b:55:
80:f6:58:26:8e:27:35:84:ef:c7:d8:6a:50:bc:dc:
3b:7f:80:21:76:2b:71:4c:5e:c2:e6:da:93:83:82:
db:27:31:41:21:1b:bc:50:b1:2b:87:b4:1e:fb:93:
bd:b5:dc:27:85:bc:a4:3b:07:1b:17:37:1f:94:11:
b9:f1:0b:7c:ff:07:67:a5:e7:e1:c0:58:9a:2f:c5:
a9:dd:89:51:48:73:8e:f0:43:c1:ca:e7:01:54:41:
25:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:7F:ED:7D:E3:9C:B7:FA:CA:9B:5E:98:EA:F6:CE:87:49:C2:89:41
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/pX_tfeOct_rKm16Y6vbOh0nCiUE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:6f80:2304::/48
Signature Algorithm: sha256WithRSAEncryption
93:ee:4f:c8:d5:c4:c1:72:fa:6d:20:74:f0:18:38:38:b9:94:
89:2f:b3:ba:f1:fe:14:90:f9:c0:c6:d9:81:9f:da:66:b3:ea:
10:f4:33:7f:61:e2:32:ea:29:23:00:1c:88:e6:ea:1a:0b:4c:
a8:72:59:35:2e:3f:cd:16:9e:98:fb:ea:d0:f9:27:8d:f0:fa:
58:f7:8c:23:91:b7:3d:e2:f5:11:f7:94:1e:4e:67:32:ea:1c:
4c:5d:8b:0d:22:3a:9f:0f:48:5a:b9:67:12:4d:85:39:75:12:
b1:81:90:76:e0:6f:40:5c:ec:67:3d:6a:ef:7d:36:08:28:6b:
8d:15:43:44:41:3e:d6:0e:3a:78:12:41:3d:39:c3:68:ec:86:
33:bd:b9:46:41:89:20:10:1f:cf:eb:9f:01:e2:9b:3c:f0:05:
68:3f:a2:57:0f:7f:bf:94:a4:f7:e5:11:49:51:84:64:62:2f:
92:99:6e:c2:ee:ae:78:15:02:ef:24:1e:d2:c5:55:0f:dd:61:
3d:eb:99:74:a2:da:9d:68:ee:35:74:ab:47:68:0a:98:70:bd:
45:b3:39:e2:05:b3:6d:30:44:b9:5e:f0:31:9f:83:ee:3b:2c:
c3:67:94:81:e7:61:8e:4b:fd:00:13:00:7f:b0:54:dc:6c:b5:
99:23:86:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:45:41 2026 by rpki-client