Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/a76078-cae5-4f60-8861-e5cdb5a682d7/1/4HNEJWv0jx0DHCf6yo5W_9O73O8.roa
File: 4HNEJWv0jx0DHCf6yo5W_9O73O8.roa (raw, json)
Hash identifier: 3f68C1416KPzUwgiAxa0PSLdxb+HfasDPF3ODql1iJ8=
Subject key identifier: E0:73:44:25:6B:F4:8F:1D:03:1C:27:FA:CA:8E:56:FF:D3:BB:DC:EF
Certificate issuer: /CN=ba54d08b2b9006e66a483d482604f48b948529bb
Certificate serial: 01A19C9F3E879E17632D09AB85E91C9DF785
Authority key identifier: BA:54:D0:8B:2B:90:06:E6:6A:48:3D:48:26:04:F4:8B:94:85:29:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ulTQiyuQBuZqSD1IJgT0i5SFKbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/a76078-cae5-4f60-8861-e5cdb5a682d7/1/4HNEJWv0jx0DHCf6yo5W_9O73O8.roa
Signing time: Mon 02 Nov 2026 14:17:24 +0000
ROA not before: Mon 02 Nov 2026 14:17:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218216
IP address blocks: 2001:678:13bc::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/a76078-cae5-4f60-8861-e5cdb5a682d7/1/ulTQiyuQBuZqSD1IJgT0i5SFKbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/a76078-cae5-4f60-8861-e5cdb5a682d7/1/ulTQiyuQBuZqSD1IJgT0i5SFKbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ulTQiyuQBuZqSD1IJgT0i5SFKbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 10:37:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9c:9f:3e:87:9e:17:63:2d:09:ab:85:e9:1c:9d:f7:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba54d08b2b9006e66a483d482604f48b948529bb
Validity
Not Before: Nov 2 14:17:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e07344256bf48f1d031c27faca8e56ffd3bbdcef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:81:0b:dd:25:53:66:b3:5a:59:2e:96:2e:be:
29:ff:f6:3a:b0:06:3b:ac:34:fa:30:09:4a:42:c1:
ba:20:40:70:a6:a8:19:15:8f:70:40:b5:c2:bf:78:
79:9d:48:bd:81:24:ea:89:27:6e:ff:15:4d:15:2f:
4a:39:12:2c:40:d9:8b:a8:b9:cd:54:d3:01:2d:e9:
be:7e:84:7f:2c:f7:bd:e0:d6:23:50:e3:ac:1b:00:
2e:9b:47:22:a1:4e:73:1f:0a:50:c5:95:b0:2c:18:
71:38:b7:9d:06:36:c6:ad:9e:51:0a:f3:08:4e:38:
dc:8b:6c:8d:21:e1:92:06:72:e2:93:f6:cf:7d:56:
be:49:4f:9a:d6:48:b9:28:79:18:d3:e8:1e:37:5e:
05:99:95:2d:ae:82:42:14:94:2e:7f:2d:6a:fb:0f:
ae:89:42:22:8a:b2:02:06:f4:40:ff:fe:05:86:14:
db:bc:64:c9:b3:bb:e2:b3:f5:cd:46:a6:ee:84:c7:
f7:dc:34:4d:fc:9d:95:3c:58:87:e6:58:20:8f:2b:
22:46:ef:de:04:dd:70:b7:21:d2:d2:47:56:82:f4:
62:a2:c3:64:f4:66:bd:b8:55:c5:86:55:14:64:bf:
06:ba:57:56:bc:e8:c4:94:17:cc:75:fe:29:f3:2d:
bf:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:73:44:25:6B:F4:8F:1D:03:1C:27:FA:CA:8E:56:FF:D3:BB:DC:EF
X509v3 Authority Key Identifier:
keyid:BA:54:D0:8B:2B:90:06:E6:6A:48:3D:48:26:04:F4:8B:94:85:29:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ulTQiyuQBuZqSD1IJgT0i5SFKbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/a76078-cae5-4f60-8861-e5cdb5a682d7/1/4HNEJWv0jx0DHCf6yo5W_9O73O8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/a76078-cae5-4f60-8861-e5cdb5a682d7/1/ulTQiyuQBuZqSD1IJgT0i5SFKbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:13bc::/48
Signature Algorithm: sha256WithRSAEncryption
67:7b:e8:ab:ed:65:c7:09:ff:a2:db:c6:d9:3b:a5:b8:4b:77:
85:32:dc:de:89:f7:6e:cf:1d:61:f8:7c:b6:40:cf:71:59:3d:
39:69:b6:54:46:a2:c7:81:13:13:07:16:49:28:78:08:42:2b:
15:f3:dc:33:79:91:de:ff:7a:e5:54:4c:45:7b:01:c7:82:8b:
66:f3:e1:31:8d:73:97:ac:5b:c0:36:c1:00:be:93:d0:18:39:
02:53:51:64:76:b2:0d:a6:a7:fe:6e:6d:aa:fc:0a:98:a4:74:
29:6f:37:0e:90:d5:14:f9:5e:16:0e:28:be:14:55:d7:9e:54:
bc:60:66:7b:5c:53:2a:7e:1a:0e:0d:d0:3f:f0:e4:ca:84:30:
89:42:b2:b7:5f:53:88:23:b1:7c:20:e8:34:45:67:87:fb:07:
c4:1b:c4:70:15:d3:45:d3:cf:76:41:5b:35:76:0d:1c:50:e7:
a4:49:04:cc:a4:fe:c9:3b:43:fc:45:44:b3:47:d9:a1:02:64:
ca:1b:ed:19:88:f4:53:f0:c9:39:2b:81:63:82:71:8f:dd:b3:
a0:60:c5:fe:f3:94:e0:92:0a:c0:e2:50:31:9a:9f:51:c7:08:
a3:65:0e:7c:d1:6a:22:a0:8b:c2:cf:d0:d1:4c:0b:fa:79:f8:
a5:82:0b:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 20:47:57 2026 by rpki-client