Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/s-B8SVKgsZecdgHwlsHZJnSwNfM.roa
File: s-B8SVKgsZecdgHwlsHZJnSwNfM.roa (raw, json)
Hash identifier: /rfXd5D9QyeAN0WLnHHBA4TYt6HNXayVgaAQ0Dg+jDU=
Subject key identifier: B3:E0:7C:49:52:A0:B1:97:9C:76:01:F0:96:C1:D9:26:74:B0:35:F3
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 01A08F3060C10469D0951F9E377949D702AB
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/s-B8SVKgsZecdgHwlsHZJnSwNfM.roa
Signing time: Fri 11 Sep 2026 06:38:27 +0000
ROA not before: Fri 11 Sep 2026 06:38:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49981
IP address blocks: 2a10:3c82::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Sep 2026 18:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8f:30:60:c1:04:69:d0:95:1f:9e:37:79:49:d7:02:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Sep 11 06:38:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b3e07c4952a0b1979c7601f096c1d92674b035f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:26:90:6b:b3:c5:d4:5e:a1:0e:45:98:ae:61:
9b:e8:b9:5e:6d:c5:ae:a1:b2:16:4c:87:88:29:f1:
13:30:6c:6d:fb:d2:e7:4d:30:a6:ab:5d:08:0b:7b:
5e:b4:12:dc:ce:12:de:f2:a0:34:05:a8:8c:d8:41:
be:a6:7f:87:87:4f:5b:1b:e9:7a:d2:88:d1:04:c4:
b5:f8:41:d1:e8:0d:4d:c5:4c:8c:3f:28:70:c3:3f:
56:75:b6:17:e4:5c:1a:00:a6:7d:03:2c:f0:2c:f4:
7f:a8:54:44:d9:75:50:38:50:1f:2b:d1:73:ad:c5:
8c:d4:ca:0f:6a:41:55:c2:38:52:58:ea:4e:60:dd:
b5:7b:b6:f6:b2:e7:62:85:98:6e:29:09:c0:06:66:
c1:b4:8a:2d:f4:0a:4e:91:49:21:22:8c:2d:66:db:
30:97:fe:48:98:bd:42:ce:d5:bc:d5:c3:42:38:7d:
77:96:e4:f6:7b:c1:9b:af:9c:2b:f6:f7:ca:18:9a:
c3:9b:07:5c:4c:aa:dc:b4:5f:04:88:54:fc:77:2d:
4d:1d:c4:62:f0:fc:2b:00:9b:d3:bf:7e:ab:7c:d3:
20:4e:15:29:83:8e:bd:74:a1:15:9e:4a:c6:a6:23:
1f:36:dd:a8:15:05:79:57:32:8e:95:1f:25:60:f4:
34:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:E0:7C:49:52:A0:B1:97:9C:76:01:F0:96:C1:D9:26:74:B0:35:F3
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/s-B8SVKgsZecdgHwlsHZJnSwNfM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:3c82::/32
Signature Algorithm: sha256WithRSAEncryption
d5:45:42:e8:10:34:a8:78:a1:39:b0:aa:57:e7:dc:8c:cd:86:
cc:64:6e:30:6a:0c:87:5d:5a:68:3e:dd:ca:a0:75:8c:bd:86:
94:bb:9e:e7:01:cd:39:80:c3:57:44:ba:cb:52:af:6a:eb:f2:
8f:b2:48:36:ef:fd:c9:c3:71:71:71:8e:8e:77:83:ae:bc:df:
4d:d1:88:71:dc:1e:4a:79:bc:b1:8b:b4:9f:08:0a:d9:23:cb:
b8:c4:44:07:11:33:9b:8c:5c:ab:d9:a2:d7:9a:73:04:47:a2:
74:ff:7d:57:71:cc:c2:33:ed:fa:3e:7f:7b:1f:8f:23:ea:5b:
be:2b:e3:74:80:1f:bc:c9:f9:30:65:69:12:4e:15:b3:86:4e:
d4:0a:44:f5:49:b7:c2:d8:5b:63:6d:fd:02:fe:f4:e8:15:cb:
bc:5e:c5:ab:f7:8b:a3:3a:2e:12:58:2b:d4:cd:e3:24:ec:19:
49:90:a8:ca:67:2f:b9:48:50:21:65:99:be:64:3d:20:b5:0c:
d0:2d:22:d3:16:c1:9f:b5:9a:08:4b:ef:fb:49:e7:81:5a:7c:
6c:98:60:5b:ae:7c:24:86:23:b3:fc:93:e2:f7:21:b4:78:17:
81:12:8b:22:55:54:78:8e:2e:cb:df:c5:f3:31:e3:5a:4f:fb:
75:34:de:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 04:08:48 2026 by rpki-client