Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/utEQtwKUf5xo19Y-lXBPVrtAjr4.roa
File: utEQtwKUf5xo19Y-lXBPVrtAjr4.roa (raw, json)
Hash identifier: M7x/7AXb0yoXcS6iNR80U/7RPq29qBOZDZpuC9IoeDk=
Subject key identifier: BA:D1:10:B7:02:94:7F:9C:68:D7:D6:3E:95:70:4F:56:BB:40:8E:BE
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 01A0A50781B507DD5EFF41D799D53E4AD2CB
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/utEQtwKUf5xo19Y-lXBPVrtAjr4.roa
Signing time: Tue 15 Sep 2026 12:25:27 +0000
ROA not before: Tue 15 Sep 2026 12:25:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62563
IP address blocks: 2a14:62c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 21:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a5:07:81:b5:07:dd:5e:ff:41:d7:99:d5:3e:4a:d2:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Sep 15 12:25:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bad110b702947f9c68d7d63e95704f56bb408ebe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:51:89:25:82:ad:a0:f4:f7:a7:8b:ca:05:35:
9b:76:e6:61:bc:95:4a:f9:9a:bc:71:99:8f:7d:dc:
34:a4:43:fc:12:5b:ca:54:6b:bd:88:40:06:17:77:
a5:67:db:90:0c:8f:a8:5b:9b:c0:1f:9b:84:58:88:
bc:8f:b0:6d:09:d8:dc:d2:22:07:bc:f4:05:fd:92:
13:f8:fc:a0:44:53:5d:97:9f:b1:05:44:58:6d:48:
83:b6:67:d5:f3:d5:45:0a:d4:44:e6:6a:c6:2c:de:
4e:17:67:9e:6b:39:fe:72:db:44:26:ba:50:74:a9:
a4:5e:6a:78:bc:45:e0:fa:47:ff:70:c8:27:4a:8e:
6d:80:b6:84:b7:d4:d3:a5:4f:2f:97:74:53:21:23:
a6:cd:67:67:ec:61:a9:ce:ab:ad:d4:e2:0a:91:9b:
8e:69:bb:82:b3:dd:48:d5:eb:0b:e1:9e:86:06:e8:
9f:02:92:e0:89:7b:62:ee:45:f2:aa:7d:95:a4:bf:
de:6c:74:d6:a3:b3:08:93:c1:d3:16:9b:b6:b9:d0:
26:8c:43:4e:72:dc:eb:83:c6:71:43:dd:77:ad:8d:
e4:e0:16:9f:b7:20:b7:d1:16:46:9f:5f:e3:cb:0d:
af:a7:be:13:21:13:02:2b:3a:4e:f5:e1:59:ed:8e:
f9:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:D1:10:B7:02:94:7F:9C:68:D7:D6:3E:95:70:4F:56:BB:40:8E:BE
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/utEQtwKUf5xo19Y-lXBPVrtAjr4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:62c0::/29
Signature Algorithm: sha256WithRSAEncryption
a0:a9:64:92:c6:28:95:bb:b0:85:01:ee:77:b3:ed:df:61:c8:
ac:44:71:03:4f:af:a2:ac:94:5c:98:af:17:eb:be:d2:a8:22:
d1:df:f0:16:f5:27:fa:66:bb:31:cf:c9:c0:4b:1f:48:d9:d8:
03:19:24:3e:4a:89:70:40:c8:9c:af:48:fb:5d:40:a2:a0:95:
85:18:1b:0a:d8:10:61:6d:5a:a8:d8:4e:3d:09:4d:e5:77:3d:
e8:b7:60:f2:4d:ee:b9:e0:98:2f:38:cc:40:80:81:26:66:e1:
11:85:58:ae:c1:90:00:90:f6:8e:6f:7e:3e:f1:f7:fe:c8:43:
bb:0c:9b:a7:ff:3b:7c:3e:d5:51:56:4a:32:1b:05:d9:26:7e:
f9:4e:32:81:5d:68:31:68:bb:8b:dc:48:f6:d7:f3:55:8f:25:
75:30:87:7c:c2:a7:7d:69:96:a2:39:81:a6:40:54:57:14:a9:
6b:48:8b:48:91:b6:40:ac:d8:26:4a:c1:c6:0e:4f:1e:42:4e:
b3:65:45:b2:5d:ce:f2:94:d3:08:d7:78:0d:16:53:2b:94:3f:
c1:9e:9c:1c:35:26:a2:af:ac:81:aa:cb:2f:17:d3:14:b3:14:
e8:ae:35:0d:b3:51:97:6a:96:c4:81:4f:bc:25:04:05:32:46:
7c:da:bf:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 16 05:54:08 2026 by rpki-client