Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/seUBXh5P0qeD3apvwDiVIwfL-ek.roa
File: seUBXh5P0qeD3apvwDiVIwfL-ek.roa (raw, json)
Hash identifier: DsZr+fIGDarwEunTqRByNJQA5QDeh3WMMEzjSqJiMcA=
Subject key identifier: B1:E5:01:5E:1E:4F:D2:A7:83:DD:AA:6F:C0:38:95:23:07:CB:F9:E9
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 019DF34337D44767737D14E1F74FCDEDF8BF
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/seUBXh5P0qeD3apvwDiVIwfL-ek.roa
Signing time: Mon 04 May 2026 13:52:41 +0000
ROA not before: Mon 04 May 2026 13:52:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25198
IP address blocks: 2a10:3c82::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 May 2026 04:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f3:43:37:d4:47:67:73:7d:14:e1:f7:4f:cd:ed:f8:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: May 4 13:52:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b1e5015e1e4fd2a783ddaa6fc038952307cbf9e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:b0:55:63:36:bd:26:5a:9a:17:20:93:74:a2:
48:70:3c:5d:69:c2:63:98:88:11:d4:2a:a0:35:1c:
73:e9:3e:1f:b0:ab:42:5c:e3:75:e2:db:31:f6:be:
68:ca:22:b0:c3:ed:4d:ae:58:1e:fb:17:26:07:cc:
ef:81:c5:3e:1c:14:35:06:40:e1:a1:17:3e:da:ab:
03:c7:69:34:f8:cb:e5:16:8e:a0:d7:fb:dd:db:73:
67:1d:3f:32:b0:d9:1d:3a:1b:2f:a8:32:ee:71:1e:
89:a0:17:91:7a:a4:05:5b:2c:e1:5f:f4:3a:59:62:
a8:9b:f5:03:42:78:93:39:a2:73:61:2e:fb:e7:dd:
48:9c:89:63:0f:e8:c0:52:15:42:42:de:bc:a7:1b:
b1:68:1c:60:64:dd:f6:84:67:32:10:8d:a9:0d:f5:
11:cc:58:45:6c:b3:6d:f3:5c:64:26:63:8e:74:7a:
6d:cb:11:24:ee:0a:48:54:bc:f8:a1:7b:74:c6:0a:
9f:26:8e:b7:8a:06:15:d2:51:83:2b:5c:40:29:74:
86:5f:3b:74:da:8f:ca:4e:b2:21:b6:be:0b:25:c7:
06:1b:2d:80:aa:8b:08:2b:21:7f:41:8b:26:57:22:
46:9c:0d:f1:fc:f2:8f:e6:cc:55:ea:f1:35:76:c4:
cc:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:E5:01:5E:1E:4F:D2:A7:83:DD:AA:6F:C0:38:95:23:07:CB:F9:E9
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/seUBXh5P0qeD3apvwDiVIwfL-ek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:3c82::/32
Signature Algorithm: sha256WithRSAEncryption
05:7d:d0:2e:49:17:5e:de:5c:83:36:e5:32:bf:4c:5b:ca:00:
44:2c:be:50:e0:1e:86:93:d0:19:c1:a1:df:55:00:c7:18:64:
60:23:b2:a3:86:af:4f:7f:5e:e1:10:64:dd:35:55:c3:33:88:
a0:83:48:c8:f7:69:fd:90:fb:f3:99:a2:9f:74:f2:23:4b:8e:
eb:54:2c:e6:f5:dc:84:fe:71:1b:84:e9:e9:d5:74:d1:d3:fd:
0d:08:8f:cd:5c:dc:ed:bd:64:da:a5:66:67:cd:22:d4:f5:41:
3f:8e:4a:30:5d:1a:34:a2:57:49:a6:15:73:4f:64:ee:93:4f:
ca:1f:b0:af:90:de:1f:0d:65:4d:73:f1:12:a4:2e:ee:74:66:
95:71:23:22:c3:a4:a2:2d:34:4e:45:dc:3f:0d:82:60:0e:e1:
e2:6c:6d:96:4c:e4:21:26:7a:85:af:c3:6a:a3:97:dc:fb:6c:
9f:f8:27:8a:72:e4:36:fa:42:34:51:3f:ed:fb:42:e7:66:31:
54:fe:63:5a:9e:f7:0a:14:e0:99:83:4d:9b:80:d3:7b:cb:92:
db:44:4a:d4:17:9f:62:85:3e:14:70:bb:54:55:3d:6e:95:ef:
ff:dc:b9:7a:23:46:9e:af:b2:7a:c8:25:01:6c:bb:be:5a:33:
ea:cd:ee:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 09:54:34 2026 by rpki-client