Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/wPbiHw8t6o2qy6LYKJtcMDlKzGw.roa
File: wPbiHw8t6o2qy6LYKJtcMDlKzGw.roa (raw, json)
Hash identifier: EePLKRmXC1WeR6Y8OuX+aCUEnEELhQ23ERCnddS8JRk=
Subject key identifier: C0:F6:E2:1F:0F:2D:EA:8D:AA:CB:A2:D8:28:9B:5C:30:39:4A:CC:6C
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 019F8FA35833E05390B3C88E6F11E2D1273E
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/wPbiHw8t6o2qy6LYKJtcMDlKzGw.roa
Signing time: Thu 23 Jul 2026 15:41:14 +0000
ROA not before: Thu 23 Jul 2026 15:41:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 2a10:3c83::/32 maxlen: 32
2a10:3c85::/32 maxlen: 32
2a10:3c86::/32 maxlen: 32
2a13:c240::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:a3:58:33:e0:53:90:b3:c8:8e:6f:11:e2:d1:27:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Jul 23 15:41:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c0f6e21f0f2dea8daacba2d8289b5c30394acc6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c2:de:5a:8c:bf:f7:f3:f3:7b:2c:3e:dc:c1:
c2:75:9a:fc:d1:bf:db:11:1b:d1:d5:ca:e5:41:4f:
f3:a5:ec:e2:88:7b:84:f0:5c:f3:98:64:c4:d1:37:
cd:bc:38:1a:1d:ae:62:be:dd:43:66:28:fd:8e:9c:
4e:fb:99:12:19:a9:b1:36:95:35:fd:b6:8d:d0:0e:
ea:88:e9:61:1d:5a:00:34:f3:b3:fc:de:a2:66:21:
05:97:57:b9:74:29:c0:53:d8:d7:2b:5b:d0:0e:d6:
6a:31:0c:68:28:a6:55:25:58:6a:a9:2f:b3:ab:31:
7e:f0:d2:37:0f:81:fb:da:ef:1b:3b:72:7f:ad:31:
e8:b9:d9:7d:ce:33:e7:fa:36:42:69:b1:c9:43:bd:
29:c1:35:53:30:b4:3d:a9:55:b5:c3:89:6e:d5:ff:
93:14:4d:e5:5f:70:6c:cd:53:2e:7e:5a:79:be:5b:
14:b2:38:14:76:eb:91:fd:6d:cf:05:6e:9f:ef:30:
a4:0b:dd:6a:72:6e:96:4e:bc:fa:de:d5:2f:4e:e7:
f5:4c:30:1b:ff:cb:9c:7e:e0:a6:72:18:0a:a9:9f:
4c:7c:1e:69:84:71:61:d1:b6:7b:2d:f1:30:f9:87:
cd:f2:ff:cd:82:3b:26:e4:f3:4a:d5:a5:1a:c1:1f:
3f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:F6:E2:1F:0F:2D:EA:8D:AA:CB:A2:D8:28:9B:5C:30:39:4A:CC:6C
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/wPbiHw8t6o2qy6LYKJtcMDlKzGw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:3c83::/32
2a10:3c85::-2a10:3c86:ffff:ffff:ffff:ffff:ffff:ffff
2a13:c240::/29
Signature Algorithm: sha256WithRSAEncryption
28:2f:56:98:0a:ad:d7:d5:b1:76:41:36:9c:9a:61:e4:21:b5:
fc:73:00:b9:ae:d1:f4:4e:6d:69:69:33:19:2a:74:b0:bf:ac:
62:02:7b:65:e2:db:a6:15:a4:02:12:bf:12:09:3e:d9:7d:d8:
f1:d5:4d:ca:09:d1:89:ef:04:5d:dc:98:cc:ea:22:09:1e:1b:
5d:1e:2f:c3:65:5f:b8:57:63:bc:88:a2:df:cb:7b:e5:51:5d:
63:e9:c2:49:75:dc:ad:fa:a7:9f:2b:d7:ce:d5:9c:1d:dd:92:
21:8c:4c:8a:24:0b:b3:a1:13:d0:a9:43:59:db:3a:b1:86:a9:
48:a1:85:5e:ae:75:0f:76:1f:89:93:0f:e7:6a:e7:d5:14:6d:
5f:71:d9:7c:e6:a7:f5:0a:8f:79:46:a1:8c:ae:d7:4c:37:22:
03:e2:41:82:a6:62:b0:33:82:82:53:1d:a0:6c:f0:ac:0b:dc:
20:65:30:52:6f:15:7d:2d:ef:ce:ea:45:4f:6f:8d:a6:47:a9:
d3:24:67:39:3c:6d:1f:f9:f2:58:d7:88:bc:41:78:0f:be:04:
1b:00:5b:64:25:4c:83:55:7b:11:a5:b2:59:11:5d:e3:07:fc:
db:7f:06:45:61:89:b6:57:93:3f:02:65:d3:b6:93:2b:6b:d4:
90:19:f0:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:59:50 2026 by rpki-client