Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/pPtBVVYGBWOGMkaUXlyUlUlUc8I.roa
File: pPtBVVYGBWOGMkaUXlyUlUlUc8I.roa (raw, json)
Hash identifier: 2qg2UMxY9Ne99nZ+znUrMGap65SST+L3iSUILMH/2YQ=
Subject key identifier: A4:FB:41:55:56:06:05:63:86:32:46:94:5E:5C:94:95:49:54:73:C2
Certificate issuer: /CN=e15b90ffdfa0ab285485e78446b871998b24dcc0
Certificate serial: 019C815B404ADACD1033C4151AA81736E8A5
Authority key identifier: E1:5B:90:FF:DF:A0:AB:28:54:85:E7:84:46:B8:71:99:8B:24:DC:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VuQ_9-gqyhUheeERrhxmYsk3MA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/pPtBVVYGBWOGMkaUXlyUlUlUc8I.roa
Signing time: Sat 21 Feb 2026 17:59:26 +0000
ROA not before: Sat 21 Feb 2026 17:59:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202736
IP address blocks: 2a13:9ac0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/4VuQ_9-gqyhUheeERrhxmYsk3MA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/4VuQ_9-gqyhUheeERrhxmYsk3MA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4VuQ_9-gqyhUheeERrhxmYsk3MA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Feb 2026 06:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:81:5b:40:4a:da:cd:10:33:c4:15:1a:a8:17:36:e8:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e15b90ffdfa0ab285485e78446b871998b24dcc0
Validity
Not Before: Feb 21 17:59:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a4fb415556060563863246945e5c9495495473c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c7:3a:a3:cd:44:dd:37:5f:2e:b1:5c:cb:84:
08:a7:ed:ce:a6:aa:a2:85:ea:af:f8:b6:8b:8b:85:
82:f8:21:94:16:5d:77:2c:38:dc:a9:ac:22:ae:54:
b4:9f:4a:9c:ca:db:58:7e:8b:19:99:17:2a:11:74:
f0:7b:cb:d8:57:07:bf:70:6e:74:49:72:71:20:f1:
35:02:cb:9c:78:ae:5a:2f:ed:53:d3:5a:4e:3b:99:
f4:dd:b4:c5:12:50:37:e3:21:4e:ee:0b:bf:ff:96:
0f:30:a5:b5:a4:59:1a:bf:64:4a:8b:f3:63:11:34:
00:d6:48:27:e3:f5:0c:a9:c3:3b:63:22:c0:0d:58:
9a:94:41:9f:7d:ba:e9:58:c9:84:50:da:b3:3b:8b:
de:54:cd:a1:fb:60:67:aa:13:f5:7e:c8:94:0f:63:
4c:a1:ec:45:44:ff:9d:35:57:49:16:70:9e:d4:1d:
2a:a4:a5:79:03:67:60:51:73:c0:c7:06:d7:99:36:
13:55:7e:8d:0a:b2:be:6e:c7:c7:16:6d:aa:af:6e:
06:1c:ef:94:b5:4a:0b:0e:21:6b:3e:09:70:67:96:
cb:25:ef:2e:9c:01:47:b7:93:05:11:51:77:e6:dc:
da:a9:d6:c6:d1:f7:49:5d:77:e1:2e:42:b2:38:70:
ff:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:FB:41:55:56:06:05:63:86:32:46:94:5E:5C:94:95:49:54:73:C2
X509v3 Authority Key Identifier:
keyid:E1:5B:90:FF:DF:A0:AB:28:54:85:E7:84:46:B8:71:99:8B:24:DC:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VuQ_9-gqyhUheeERrhxmYsk3MA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/pPtBVVYGBWOGMkaUXlyUlUlUc8I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/4VuQ_9-gqyhUheeERrhxmYsk3MA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9ac0::/29
Signature Algorithm: sha256WithRSAEncryption
26:ca:82:33:bf:b0:0e:fe:fe:67:22:19:e3:e9:54:5b:50:c5:
78:7b:f1:3d:4f:41:9b:5c:7d:52:42:f4:06:08:72:8a:96:97:
4c:02:7b:0a:ab:1d:e4:0d:6d:57:8e:8a:f4:be:d3:df:2a:42:
73:6e:0a:55:83:27:1f:8f:41:c6:28:2a:62:7a:45:e5:05:05:
94:30:05:13:3f:f6:b1:aa:fd:33:1b:9f:36:80:29:07:f4:35:
91:eb:dc:84:f2:26:c0:8a:3c:db:87:98:19:c0:c7:68:52:3c:
ab:4f:6c:db:98:cc:67:2f:7e:bc:ac:c9:5c:93:27:dd:a5:35:
f3:41:7d:73:a8:23:2b:61:e6:70:21:e5:e5:e0:12:10:ae:bf:
f6:09:1b:1a:cf:66:b0:42:b5:87:2c:44:03:ee:1f:9b:f0:a5:
8c:f4:c3:5f:c4:07:0f:4f:fd:96:e7:3a:df:f3:4d:89:88:57:
4c:e7:c6:16:70:d2:3b:c9:3d:f6:a3:ea:6b:ac:19:98:f6:2b:
03:e2:3d:48:d6:60:c9:17:11:e7:17:8d:c9:c3:c7:f1:9e:24:
85:9a:a0:7b:1b:84:8b:8d:e9:72:30:01:26:ad:0b:21:66:46:
39:89:f8:49:a7:11:20:a4:11:5c:b1:b7:a1:cb:6c:ba:51:fc:
24:18:50:4a
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZyBW0BK2s0QM8QVGqgXNuilMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxNWI5MGZmZGZhMGFiMjg1NDg1ZTc4NDQ2Yjg3MTk5OGIy
NGRjYzAwHhcNMjYwMjIxMTc1OTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNGZiNDE1NTU2MDYwNTYzODYzMjQ2OTQ1ZTVjOTQ5NTQ5NTQ3M2MyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxMc6o81E3TdfLrFcy4QIp+3Opqqi
heqv+LaLi4WC+CGUFl13LDjcqawirlS0n0qcyttYfosZmRcqEXTwe8vYVwe/cG50
SXJxIPE1AsuceK5aL+1T01pOO5n03bTFElA34yFO7gu//5YPMKW1pFkav2RKi/Nj
ETQA1kgn4/UMqcM7YyLADVialEGffbrpWMmEUNqzO4veVM2h+2BnqhP1fsiUD2NM
oexFRP+dNVdJFnCe1B0qpKV5A2dgUXPAxwbXmTYTVX6NCrK+bsfHFm2qr24GHO+U
tUoLDiFrPglwZ5bLJe8unAFHt5MFEVF35tzaqdbG0fdJXXfhLkKyOHD/zQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFKT7QVVWBgVjhjJGlF5clJVJVHPCMB8GA1UdIwQY
MBaAFOFbkP/foKsoVIXnhEa4cZmLJNzAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFZ1UV85LWdxeWhVaGVlRVJyaHhtWXNrM01BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS81ZjNlMjEtNmI0MS00OTY0LWJmZGEt
Y2JiZmRhOTI0MTlkLzEvcFB0QlZWWUdCV09HTWthVVhseVVsVWxVYzhJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS81ZjNlMjEtNmI0MS00OTY0LWJmZGEtY2JiZmRhOTI0MTlk
LzEvNFZ1UV85LWdxeWhVaGVlRVJyaHhtWXNrM01BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhOawDAN
BgkqhkiG9w0BAQsFAAOCAQEAJsqCM7+wDv7+ZyIZ4+lUW1DFeHvxPU9Bm1x9UkL0
BghyipaXTAJ7Cqsd5A1tV46K9L7T3ypCc24KVYMnH49BxigqYnpF5QUFlDAFEz/2
sar9MxufNoApB/Q1kevchPImwIo824eYGcDHaFI8q09s25jMZy9+vKzJXJMn3aU1
80F9c6gjK2HmcCHl5eASEK6/9gkbGs9msEK1hyxEA+4fm/CljPTDX8QHD0/9luc6
3/NNiYhXTOfGFnDSO8k99qPqa6wZmPYrA+I9SNZgyRcR5xeNycPH8Z4khZqgexuE
i43pcjABJq0LIWZGOYn4SacRIKQRXLG3octsulH8JBhQSg==
-----END CERTIFICATE-----
Generated at Thu Feb 26 15:34:10 2026 by rpki-client