Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/shF4LaZ_fuI2ZFQXlHUulnHM4og.roa
File: shF4LaZ_fuI2ZFQXlHUulnHM4og.roa (raw, json)
Hash identifier: d9EGD/lZS+dTK7vRLLdj1orue4Jc1rszHR3+5dE99io=
Subject key identifier: B2:11:78:2D:A6:7F:7E:E2:36:64:54:17:94:75:2E:96:71:CC:E2:88
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 01A0A5086CB27E090C8E17B3C803B38FE2B4
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/shF4LaZ_fuI2ZFQXlHUulnHM4og.roa
Signing time: Tue 15 Sep 2026 12:26:27 +0000
ROA not before: Tue 15 Sep 2026 12:26:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402933
IP address blocks: 2a13:c440::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 21:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a5:08:6c:b2:7e:09:0c:8e:17:b3:c8:03:b3:8f:e2:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Sep 15 12:26:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b211782da67f7ee23664541794752e9671cce288
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:da:f8:5a:a0:96:88:7e:e7:2f:fb:71:0e:e1:
e3:ba:9b:d2:c8:e8:48:30:e7:68:ea:54:0d:65:2f:
36:ae:2f:52:a9:0a:62:a2:9a:49:8a:e5:5c:fb:5e:
6b:f7:67:af:fe:e0:78:57:f7:fa:cd:62:25:f4:41:
15:94:9f:99:58:a0:9a:8d:e0:60:bb:4d:a0:48:f2:
07:c3:47:d2:da:78:7c:e4:3a:75:7a:c1:8e:4d:d8:
30:8d:8d:6b:c7:7a:da:1e:f8:f4:82:11:d8:74:84:
a2:ee:ef:16:e9:42:9b:1a:a9:9d:35:36:76:6c:fc:
2e:e1:98:70:62:8b:5a:94:c9:e6:13:42:2c:24:0f:
a1:03:fd:16:fd:8c:64:ac:e3:fc:b2:8c:93:cb:36:
ac:02:d8:02:8e:c8:a7:d2:b4:35:b9:68:d0:27:aa:
6f:11:18:76:89:dc:cc:e5:0e:e7:64:95:1e:c6:ee:
6c:88:bc:fa:ee:93:7f:b8:bc:b1:cc:65:2d:b8:03:
ad:14:5c:2e:69:f8:3b:97:42:a9:9d:18:2e:53:9b:
b5:cd:8e:2b:69:a8:75:35:13:d6:28:9f:b9:e2:26:
27:e9:11:d9:31:93:bd:9a:39:0a:25:d2:28:ad:6c:
43:72:87:2c:a0:84:c7:e8:fc:83:4c:8c:5b:9a:fe:
87:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:11:78:2D:A6:7F:7E:E2:36:64:54:17:94:75:2E:96:71:CC:E2:88
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/shF4LaZ_fuI2ZFQXlHUulnHM4og.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:c440::/29
Signature Algorithm: sha256WithRSAEncryption
1f:04:29:e7:b5:62:11:af:93:86:78:dc:aa:4f:9e:db:39:09:
a3:1f:4f:ca:b1:02:e5:09:63:d2:19:ae:8d:a1:40:b0:51:d3:
9f:36:2e:75:87:ba:d5:f1:b7:7a:44:1d:e5:1c:a3:a7:75:9f:
6d:a8:b2:90:54:94:5a:94:79:82:c5:6f:88:07:16:11:f4:23:
c8:0d:d0:24:5e:23:1c:19:a2:84:92:a8:2f:e9:4a:a1:00:88:
c4:4c:d4:12:04:f6:83:ce:14:4e:47:ae:64:c0:e5:70:4d:b4:
23:f1:f4:c7:3f:5c:8d:2a:9a:aa:64:14:52:8f:80:b8:a8:fb:
ae:2d:e7:75:b7:bb:e6:0b:20:3f:c1:23:9b:a2:bd:22:90:e3:
c0:f1:a9:ed:82:ad:84:07:bd:83:60:64:cf:59:c5:70:59:50:
fe:b5:74:ac:b7:ac:ea:50:99:72:38:51:e1:2f:15:69:be:d5:
60:cb:de:84:99:9c:42:d2:58:05:dc:86:0f:0f:16:da:fd:e5:
ff:22:22:73:f2:31:44:ba:54:10:18:33:95:24:45:da:ca:7d:
5a:85:d6:9e:cf:c9:f7:33:7d:ec:10:a7:3b:f1:1c:c9:b4:b2:
b3:0b:37:7a:c3:e2:4e:9f:e7:e2:70:bf:bb:10:10:f5:5d:7d:
73:a9:49:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 16 05:53:50 2026 by rpki-client