Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/wrNnqGffZq6imhAU-YMcUfpGc6U.roa
File: wrNnqGffZq6imhAU-YMcUfpGc6U.roa (raw, json)
Hash identifier: +sV57TuVllyuhs45hFMpqkDwZ0Rx54TQKX2wuVKPkhI=
Subject key identifier: C2:B3:67:A8:67:DF:66:AE:A2:9A:10:14:F9:83:1C:51:FA:46:73:A5
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 019EFB06E957EAD7E4A60E2B7FF95FFADD28
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/wrNnqGffZq6imhAU-YMcUfpGc6U.roa
Signing time: Wed 24 Jun 2026 19:06:34 +0000
ROA not before: Wed 24 Jun 2026 19:06:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 2a10:3c86::/32 maxlen: 32
2a13:c240::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Jun 2026 17:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fb:06:e9:57:ea:d7:e4:a6:0e:2b:7f:f9:5f:fa:dd:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Jun 24 19:06:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c2b367a867df66aea29a1014f9831c51fa4673a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7c:18:ff:df:80:00:64:a4:08:38:52:4b:e0:
8c:c4:00:2a:02:84:f0:89:0a:42:90:26:30:79:ad:
bc:4c:5d:6a:08:4b:3b:0c:82:07:a1:23:79:a2:37:
71:06:45:f0:82:37:34:17:3a:a9:9a:37:cf:18:3e:
e8:4f:de:df:aa:8c:db:38:09:4f:68:96:92:49:80:
d8:e4:fe:f5:0b:40:c2:bb:88:75:10:f9:84:fd:39:
9e:84:8b:6f:8b:75:d8:7b:ec:99:dd:3f:4d:c3:1b:
24:33:e4:70:9c:4d:ab:89:53:ef:89:f9:0a:1d:bd:
48:2b:41:24:74:8b:62:db:36:58:40:58:f0:e7:31:
50:5f:66:58:f1:f2:2d:5c:74:b8:18:ca:27:2f:55:
6f:2c:cc:ca:7e:1e:c9:28:1e:b8:21:64:f8:7c:3f:
8d:0a:17:e1:cf:bb:71:72:ae:df:27:8a:48:cc:6a:
bb:cf:bc:ad:6c:d8:de:ea:7b:8b:3c:62:51:da:e8:
62:d0:2e:73:ee:f6:f3:fb:bf:4a:0a:ff:47:3d:3c:
70:10:f1:47:70:33:1b:f3:c3:5c:83:77:06:7b:39:
a9:d3:eb:ed:25:8c:24:10:7d:ff:41:b6:8a:38:9a:
a8:3e:31:04:7b:fe:71:9b:92:f4:e8:41:99:81:01:
22:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:B3:67:A8:67:DF:66:AE:A2:9A:10:14:F9:83:1C:51:FA:46:73:A5
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/wrNnqGffZq6imhAU-YMcUfpGc6U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:3c86::/32
2a13:c240::/29
Signature Algorithm: sha256WithRSAEncryption
de:b8:e6:26:18:c8:6b:fd:5f:a2:50:13:d4:8f:23:f5:3b:41:
d7:73:64:7a:75:a0:c2:33:9b:76:59:63:3d:85:be:d4:08:a0:
68:6d:05:b8:3b:fa:82:e3:f4:a0:91:94:66:1d:db:69:fc:c9:
55:62:09:7e:43:f1:89:5c:37:50:c2:9e:a6:bf:b0:ad:c4:3b:
66:22:07:86:bc:46:b1:92:1a:7e:05:46:fc:88:1b:c6:08:12:
12:a2:7c:06:92:81:bf:32:bb:50:b4:1d:cb:ef:f8:15:4a:5c:
ad:fa:18:9c:6a:41:9f:56:9e:2c:b9:f9:43:dd:d9:90:b5:ff:
7f:bf:7b:72:55:b5:4b:99:01:d5:fd:64:7c:1a:a0:07:1c:82:
89:2e:6f:85:44:70:f8:2c:17:f2:fc:23:4d:70:4c:af:ec:80:
71:a1:93:1b:12:c2:31:b8:30:60:3c:03:8d:c2:44:ce:d5:51:
40:72:3d:71:13:6d:83:9f:45:a0:9c:0d:16:d6:11:24:61:cc:
34:1b:1e:36:c7:46:c4:b8:f1:0d:a7:27:b1:07:78:9c:0a:1b:
f3:67:57:63:52:a5:75:29:6a:5a:b6:dd:43:bf:45:33:f5:f6:
a1:86:42:a3:ec:b7:96:ce:b6:a1:6e:2e:bf:af:13:63:e1:31:
81:46:c7:66
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZ77BulX6tfkpg4rf/lf+t0oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMTQxMTJkMDVlOWQ4NzYxNDlkMjc3OGQ0OGVkYWFhMzI0
ZGIwYTUwHhcNMjYwNjI0MTkwNjM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMmIzNjdhODY3ZGY2NmFlYTI5YTEwMTRmOTgzMWM1MWZhNDY3M2E1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3wY/9+AAGSkCDhSS+CMxAAqAoTw
iQpCkCYwea28TF1qCEs7DIIHoSN5ojdxBkXwgjc0FzqpmjfPGD7oT97fqozbOAlP
aJaSSYDY5P71C0DCu4h1EPmE/TmehItvi3XYe+yZ3T9NwxskM+RwnE2riVPvifkK
Hb1IK0EkdIti2zZYQFjw5zFQX2ZY8fItXHS4GMonL1VvLMzKfh7JKB64IWT4fD+N
Chfhz7txcq7fJ4pIzGq7z7ytbNje6nuLPGJR2uhi0C5z7vbz+79KCv9HPTxwEPFH
cDMb88Ncg3cGezmp0+vtJYwkEH3/QbaKOJqoPjEEe/5xm5L06EGZgQEifQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFMKzZ6hn32auopoQFPmDHFH6RnOlMB8GA1UdIwQY
MBaAFE8UES0F6dh2FJ0neNSO2qoyTbClMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUt
YmFmYmRmYzgxMzJhLzEvd3JObnFHZmZacTZpbWhBVS1ZTWNVZnBHYzZVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUtYmFmYmRmYzgxMzJh
LzEvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAAjAOAwUAKhA8hgMF
AyoTwkAwDQYJKoZIhvcNAQELBQADggEBAN645iYYyGv9X6JQE9SPI/U7QddzZHp1
oMIzm3ZZYz2FvtQIoGhtBbg7+oLj9KCRlGYd22n8yVViCX5D8YlcN1DCnqa/sK3E
O2YiB4a8RrGSGn4FRvyIG8YIEhKifAaSgb8yu1C0Hcvv+BVKXK36GJxqQZ9Wniy5
+UPd2ZC1/3+/e3JVtUuZAdX9ZHwaoAccgokub4VEcPgsF/L8I01wTK/sgHGhkxsS
wjG4MGA8A43CRM7VUUByPXETbYOfRaCcDRbWESRhzDQbHjbHRsS48Q2nJ7EHeJwK
G/NnV2NSpXUpalq23UO/RTP19qGGQqPst5bOtqFuLr+vE2PhMYFGx2Y=
-----END CERTIFICATE-----
Generated at Fri Jun 26 04:24:14 2026 by rpki-client