Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/4NtXU3o0i9nTQ0aPnN0oHNUECOE.roa
File: 4NtXU3o0i9nTQ0aPnN0oHNUECOE.roa (raw, json)
Hash identifier: 3YYvrIPQh3ZlkWIDJWGzPef2omYQb9s0JIFyF3ZtUx0=
Subject key identifier: E0:DB:57:53:7A:34:8B:D9:D3:43:46:8F:9C:DD:28:1C:D5:04:08:E1
Certificate issuer: /CN=baa0f258eef4b2bf4bbaa8430c1e58ca8c188ea7
Certificate serial: 019D078D8AFA1308D2903FF329CAB483D2BE
Authority key identifier: BA:A0:F2:58:EE:F4:B2:BF:4B:BA:A8:43:0C:1E:58:CA:8C:18:8E:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/4NtXU3o0i9nTQ0aPnN0oHNUECOE.roa
Signing time: Thu 19 Mar 2026 19:23:29 +0000
ROA not before: Thu 19 Mar 2026 19:23:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201592
IP address blocks: 2a09:2980::/29 maxlen: 29
2a09:af80::/29 maxlen: 29
2a09:d700::/29 maxlen: 29
2a09:dd00::/29 maxlen: 29
2a09:e300::/29 maxlen: 29
2a09:ef00::/29 maxlen: 29
2a0b:9000::/29 maxlen: 29
2a0d:95c0::/29 maxlen: 29
2a0e:3f40::/29 maxlen: 29
2a11:1480::/29 maxlen: 29
2a11:1f00::/29 maxlen: 29
2a11:3440::/29 maxlen: 29
2a11:6300::/29 maxlen: 29
2a11:9380::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:07:8d:8a:fa:13:08:d2:90:3f:f3:29:ca:b4:83:d2:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baa0f258eef4b2bf4bbaa8430c1e58ca8c188ea7
Validity
Not Before: Mar 19 19:23:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e0db57537a348bd9d343468f9cdd281cd50408e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:c1:6f:34:07:24:ea:2f:62:13:f9:ea:ce:f6:
6f:94:f8:f6:39:72:66:24:d0:5a:51:a9:4d:49:0d:
75:13:8b:4a:88:cf:43:66:c3:57:3b:48:04:f9:ac:
18:68:72:05:d7:10:c9:a0:e0:67:7d:42:e1:64:48:
03:a7:00:59:05:1f:51:ec:f3:ed:37:b5:23:68:68:
c2:f9:4e:ac:e1:da:5e:a1:29:dd:8a:e5:15:5a:66:
e1:0a:84:73:bf:e3:10:66:c1:5c:31:67:55:04:e1:
e0:08:a5:e2:40:d9:15:a3:1e:06:88:c7:83:d0:06:
5b:92:20:e9:45:78:a8:9b:46:eb:14:08:ce:3f:29:
f2:59:f5:ae:12:a5:75:51:e2:04:74:f2:25:03:8c:
eb:6b:59:a0:4f:5f:03:e0:b7:85:1e:70:e7:0d:33:
6d:6f:7c:5a:cc:18:17:a8:87:2f:7f:b1:5f:ed:b6:
dd:67:0d:21:1a:03:cc:6e:f6:72:58:b8:bd:82:6f:
e5:cc:4d:38:3c:9a:10:7e:bb:9f:bf:44:d2:94:f6:
dc:ae:69:80:75:ea:8e:72:84:0b:a4:00:a9:85:57:
17:cd:35:3e:cd:64:6a:7d:04:57:f4:36:d0:c9:f0:
e2:18:d8:f5:ef:7b:9a:2b:68:03:cd:f4:d6:f7:b4:
91:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:DB:57:53:7A:34:8B:D9:D3:43:46:8F:9C:DD:28:1C:D5:04:08:E1
X509v3 Authority Key Identifier:
keyid:BA:A0:F2:58:EE:F4:B2:BF:4B:BA:A8:43:0C:1E:58:CA:8C:18:8E:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/4NtXU3o0i9nTQ0aPnN0oHNUECOE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:2980::/29
2a09:af80::/29
2a09:d700::/29
2a09:dd00::/29
2a09:e300::/29
2a09:ef00::/29
2a0b:9000::/29
2a0d:95c0::/29
2a0e:3f40::/29
2a11:1480::/29
2a11:1f00::/29
2a11:3440::/29
2a11:6300::/29
2a11:9380::/29
Signature Algorithm: sha256WithRSAEncryption
3d:c6:23:d2:74:eb:6a:dc:55:06:fb:74:02:83:86:1a:bc:23:
af:fa:54:64:eb:eb:a2:9d:93:2e:11:f1:04:b7:6f:41:85:94:
7b:b8:cf:3f:5d:4a:f6:c0:ce:f0:74:dc:95:3f:a0:89:32:fb:
eb:4a:2c:01:54:ac:49:8c:56:1f:a0:35:8a:6a:26:bd:ab:ca:
21:2a:06:13:b0:5d:f1:86:37:3f:23:06:bd:b6:8f:11:15:fd:
06:09:6c:52:c8:63:92:e9:a1:ad:34:45:be:b2:27:8a:38:81:
f4:10:50:93:d1:fb:03:25:4c:b3:20:4c:70:fc:95:02:0d:d9:
60:68:e8:12:fb:25:2e:82:8d:80:d7:39:20:e9:cd:4f:66:f7:
b8:84:6b:59:16:85:ac:2e:52:52:7b:d7:aa:b8:3f:0b:d9:dd:
44:5d:9b:77:86:bb:74:61:fd:18:5b:05:b6:cc:a2:65:82:40:
f9:89:7e:d0:ab:87:84:c0:cc:04:70:91:32:17:05:37:3b:c6:
97:19:e7:c8:81:b1:a8:4a:ce:26:8c:4d:3a:4e:d8:ff:34:d9:
a4:ea:06:a9:cc:c0:9c:67:42:f1:c7:f2:5c:b5:7a:8b:cc:72:
0e:b8:43:bb:8c:e1:84:70:35:fc:19:82:e6:1f:e4:07:dc:b2:
0a:03:3e:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:30:52 2026 by rpki-client