Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/QlVQHCKLxPDMUT5yzxzLFxcAbhM.roa
File: QlVQHCKLxPDMUT5yzxzLFxcAbhM.roa (raw, json)
Hash identifier: z2k4hBGjSObTZ9Cn+8RZ81P7abO/BO6NGKjOJSPjmms=
Subject key identifier: 42:55:50:1C:22:8B:C4:F0:CC:51:3E:72:CF:1C:CB:17:17:00:6E:13
Certificate issuer: /CN=5ec1769d3ff042124698e31c472b63bbf1bbb5ad
Certificate serial: 01A13BC698BF67308C11C7CE62FD2B950CDF
Authority key identifier: 5E:C1:76:9D:3F:F0:42:12:46:98:E3:1C:47:2B:63:BB:F1:BB:B5:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XsF2nT_wQhJGmOMcRytju_G7ta0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/QlVQHCKLxPDMUT5yzxzLFxcAbhM.roa
Signing time: Wed 14 Oct 2026 18:57:13 +0000
ROA not before: Wed 14 Oct 2026 18:57:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401163
IP address blocks: 2a14:1040::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XsF2nT_wQhJGmOMcRytju_G7ta0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 21:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3b:c6:98:bf:67:30:8c:11:c7:ce:62:fd:2b:95:0c:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ec1769d3ff042124698e31c472b63bbf1bbb5ad
Validity
Not Before: Oct 14 18:57:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4255501c228bc4f0cc513e72cf1ccb1717006e13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:4e:a0:9e:32:b0:80:b8:ca:d4:20:bd:a1:ef:
67:e5:01:07:54:80:59:61:11:0a:29:22:d9:03:92:
ba:e7:e8:57:79:2c:bd:76:16:4f:14:2c:d2:1c:86:
18:f1:fd:30:38:99:b3:d1:df:94:a3:4e:b6:f8:8d:
6f:a0:82:60:c8:ce:89:4f:d9:5b:d4:12:9f:f2:d7:
4b:4b:4d:8c:62:44:cf:6c:a3:b6:55:e3:15:59:7d:
63:18:52:6e:e0:fc:36:0b:b7:29:07:d5:36:25:5a:
76:7f:23:38:d2:a4:53:71:60:5e:29:c3:5f:24:ef:
b8:c8:bd:01:5b:69:19:3d:37:c8:b5:7a:e1:06:80:
93:c6:be:4f:86:94:de:ee:1a:e7:c3:94:55:9d:fa:
35:41:96:ff:73:4f:c7:62:d1:3e:2f:35:30:5f:78:
10:a2:a9:8b:ec:30:42:0d:48:26:f2:b6:e0:62:27:
8d:d3:c0:ae:63:ae:89:d1:ca:62:40:b0:81:96:64:
e4:f8:4c:f0:dd:78:1a:a4:a2:b5:4d:bd:8c:22:46:
75:c0:1e:be:86:9a:ec:62:9d:2b:ef:44:79:93:4f:
e1:ce:0a:a4:3e:cc:b4:63:45:01:1a:f7:7d:76:6d:
f3:20:e6:b3:49:87:42:ff:9b:11:04:29:36:89:e8:
ce:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:55:50:1C:22:8B:C4:F0:CC:51:3E:72:CF:1C:CB:17:17:00:6E:13
X509v3 Authority Key Identifier:
keyid:5E:C1:76:9D:3F:F0:42:12:46:98:E3:1C:47:2B:63:BB:F1:BB:B5:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XsF2nT_wQhJGmOMcRytju_G7ta0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/QlVQHCKLxPDMUT5yzxzLFxcAbhM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:1040::/29
Signature Algorithm: sha256WithRSAEncryption
4c:67:83:43:d3:b4:f2:fe:76:be:3a:72:3c:5f:01:99:26:2b:
2f:64:04:b7:09:38:f5:bc:95:65:89:be:81:95:55:d2:6a:2a:
65:81:24:98:00:89:a5:2c:be:62:cd:24:d9:8a:88:5a:b7:b3:
37:a9:1d:f9:bd:d7:f6:74:f1:61:91:81:93:5c:ce:ed:55:ac:
f3:2c:82:8f:db:b3:68:bc:2c:64:37:01:9d:a5:2b:ab:56:5a:
93:c1:fa:97:38:4c:12:40:c4:4e:d3:df:07:d2:bc:3c:ce:58:
46:57:0d:fb:db:ca:3f:15:86:78:7f:27:04:48:5a:f5:dd:fb:
8f:10:9b:5b:ce:76:b3:f5:b4:80:c5:80:43:54:1d:a5:6c:1b:
46:e8:fc:b1:c7:13:a6:84:0e:d2:1c:b0:bc:0b:36:fa:19:95:
a8:d4:6c:a0:00:6e:02:2c:71:a2:eb:28:39:fd:93:72:bb:66:
1d:cc:e1:17:44:20:78:d9:27:22:69:7a:e1:40:5a:e9:fe:b6:
2c:e3:9c:46:54:5e:a8:c3:26:4b:cc:df:14:7a:82:1d:ca:cb:
4f:4a:9e:18:d4:b8:6e:00:2e:da:49:e6:5c:ed:95:ec:26:72:
c8:f2:e0:3e:07:2d:64:cb:38:25:b7:78:80:0e:9f:e0:3b:cb:
8e:d4:2c:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 03:16:59 2026 by rpki-client