Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/R3LpsWa0T2UH4e0AdWwSKDrAm04.roa
File: R3LpsWa0T2UH4e0AdWwSKDrAm04.roa (raw, json)
Hash identifier: CEwfa/XRgGQyyNoOinJK+g96IGBckKd8VeouHk8xpdg=
Subject key identifier: 47:72:E9:B1:66:B4:4F:65:07:E1:ED:00:75:6C:12:28:3A:C0:9B:4E
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 019F8FA358FD870F6B23C5E967484232B4F1
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/R3LpsWa0T2UH4e0AdWwSKDrAm04.roa
Signing time: Thu 23 Jul 2026 15:41:14 +0000
ROA not before: Thu 23 Jul 2026 15:41:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25198
IP address blocks: 2a10:3c82::/32 maxlen: 32
2a13:b9c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:a3:58:fd:87:0f:6b:23:c5:e9:67:48:42:32:b4:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Jul 23 15:41:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4772e9b166b44f6507e1ed00756c12283ac09b4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ab:a2:06:cb:8c:a0:fb:03:80:ce:3d:20:63:
0a:20:44:f4:4a:ae:85:49:ec:b8:89:ff:a5:9f:1d:
29:d5:a7:da:a2:84:d8:f2:7d:47:75:d6:70:15:d8:
42:cf:02:c1:95:0c:19:d6:e3:96:83:40:63:7e:d5:
f6:ba:04:1f:4b:53:2e:6c:03:21:c9:4c:71:7b:8a:
79:c6:e1:b5:37:e2:52:8e:8f:8f:f2:1e:00:66:96:
a0:ca:22:02:cb:25:30:31:4b:33:f5:bd:86:14:8f:
8d:3a:59:86:13:34:cb:62:f8:fd:6c:24:6a:16:12:
78:fe:fa:c9:ed:74:cb:55:3b:ab:d1:75:bd:a3:fa:
a6:9e:d6:06:3e:e4:55:8e:56:e7:68:eb:37:3d:bb:
aa:6a:81:19:11:ad:3e:3f:b6:ae:46:bf:19:a3:6a:
8a:7c:44:15:bb:72:43:d8:92:b7:08:04:f3:40:d1:
ed:18:4f:9a:ee:a6:6c:20:af:74:5d:66:2f:73:e0:
0b:16:3c:9f:7b:51:54:81:91:c8:00:27:85:25:e1:
81:83:24:4c:94:46:10:88:bf:2b:d2:d5:c0:fa:47:
57:1b:98:4f:9f:68:37:9b:3f:7a:87:cc:eb:02:c6:
75:c0:0c:6a:b0:a0:24:20:4a:9d:97:6f:a8:d1:35:
0d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:72:E9:B1:66:B4:4F:65:07:E1:ED:00:75:6C:12:28:3A:C0:9B:4E
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/R3LpsWa0T2UH4e0AdWwSKDrAm04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:3c82::/32
2a13:b9c0::/29
Signature Algorithm: sha256WithRSAEncryption
48:31:96:bf:bd:be:0f:6c:83:52:2e:de:ff:35:6e:56:c9:4b:
4d:ce:d6:76:d9:48:13:95:03:81:2b:d6:83:41:dd:b8:e2:de:
65:6a:27:8f:48:0d:fe:73:18:65:fb:6c:44:11:7f:ff:29:7b:
5b:8d:b1:1c:15:e5:95:d0:c8:ca:17:23:09:da:5e:66:0f:d7:
69:59:03:7a:1d:e9:f8:b2:71:47:96:d9:44:ed:c9:9f:cc:86:
59:37:42:60:12:ef:35:f7:bf:8a:8a:ef:6a:b4:98:07:e4:86:
54:6f:6a:7b:aa:8d:54:b7:54:94:9e:39:72:f2:42:f7:24:98:
80:5d:cb:43:b6:9a:b8:28:72:5a:dc:96:9b:4f:23:79:3f:72:
16:98:07:a7:37:46:cc:c1:e5:5e:45:d1:1d:21:60:a6:73:0c:
d1:76:f4:fb:95:be:f9:ef:cb:c7:c5:b8:a7:67:eb:03:f8:f7:
e6:79:6c:5a:f4:2c:3d:c1:06:f2:fa:9d:af:2d:12:8c:0b:b5:
09:23:51:29:51:3f:78:0b:23:b8:56:21:28:1b:03:72:c4:91:
39:6b:af:58:59:ea:34:e8:34:59:e0:7a:17:6b:44:3d:66:84:
8c:6c:c2:4b:bf:69:92:d1:59:c2:ef:3b:a8:e6:ab:ed:c7:b5:
ab:19:fe:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:46:35 2026 by rpki-client