Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/E4bY0ltZvNP1-HupAPXY0-ZeBCU.roa
File: E4bY0ltZvNP1-HupAPXY0-ZeBCU.roa (raw, json)
Hash identifier: 3KMhjTFJ+WQEHP63JQ46+UXmsQRLh8CZFZ+BiwZhaII=
Subject key identifier: 13:86:D8:D2:5B:59:BC:D3:F5:F8:7B:A9:00:F5:D8:D3:E6:5E:04:25
Certificate issuer: /CN=6d39ce4c29ab3f802f9de933f4495026c4d0ee4a
Certificate serial: 019DDF26676F3DA1392CB6AEB82CD951CCD4
Authority key identifier: 6D:39:CE:4C:29:AB:3F:80:2F:9D:E9:33:F4:49:50:26:C4:D0:EE:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bTnOTCmrP4Avnekz9ElQJsTQ7ko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/E4bY0ltZvNP1-HupAPXY0-ZeBCU.roa
Signing time: Thu 30 Apr 2026 16:08:49 +0000
ROA not before: Thu 30 Apr 2026 16:08:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 153914
IP address blocks: 2a03:afc0:b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/bTnOTCmrP4Avnekz9ElQJsTQ7ko.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/bTnOTCmrP4Avnekz9ElQJsTQ7ko.mft
rsync://rpki.ripe.net/repository/DEFAULT/bTnOTCmrP4Avnekz9ElQJsTQ7ko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:df:26:67:6f:3d:a1:39:2c:b6:ae:b8:2c:d9:51:cc:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d39ce4c29ab3f802f9de933f4495026c4d0ee4a
Validity
Not Before: Apr 30 16:08:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1386d8d25b59bcd3f5f87ba900f5d8d3e65e0425
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:be:15:f4:56:4b:7c:4e:76:44:43:e9:e0:16:
cb:97:aa:7a:d0:f6:23:9c:d3:2f:3d:d4:d1:c0:53:
bf:b6:d3:e2:0e:f6:c6:5d:19:b3:3c:d7:75:cc:16:
63:fe:d6:46:6a:92:a5:79:25:a4:f0:99:a0:47:a7:
a1:5f:9d:a0:ff:81:d1:75:fd:a7:2f:9a:e0:25:94:
eb:f7:42:28:9e:c9:11:28:22:e1:b3:2e:8a:5c:64:
f0:a3:f9:d7:7d:26:45:8f:1a:93:4c:7d:cc:11:7b:
ab:f6:ce:af:69:46:b9:f3:6f:c9:a7:0f:27:10:bd:
c4:07:0a:95:a9:ac:5f:3f:08:5f:09:cd:60:2b:7e:
80:92:d0:67:7a:12:3a:ed:d0:ef:55:45:a0:dd:42:
5f:39:52:15:53:0f:55:62:56:a5:f0:02:1c:e5:92:
45:9b:f7:fd:cb:96:87:d9:fe:d9:3a:c0:d5:2a:07:
78:7e:24:79:58:a6:26:83:0d:37:f1:55:50:c5:77:
87:d1:aa:c9:95:38:7f:65:35:96:27:9e:4e:7a:32:
78:00:25:f9:10:d9:1f:e8:ef:f3:cd:59:c2:fc:16:
3c:3d:ba:68:b5:52:c5:86:0d:d7:30:84:e5:b8:e5:
ca:ed:3a:2a:51:a2:d5:47:3d:cd:37:01:1a:62:67:
f7:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:86:D8:D2:5B:59:BC:D3:F5:F8:7B:A9:00:F5:D8:D3:E6:5E:04:25
X509v3 Authority Key Identifier:
keyid:6D:39:CE:4C:29:AB:3F:80:2F:9D:E9:33:F4:49:50:26:C4:D0:EE:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bTnOTCmrP4Avnekz9ElQJsTQ7ko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/E4bY0ltZvNP1-HupAPXY0-ZeBCU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/bTnOTCmrP4Avnekz9ElQJsTQ7ko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:afc0:b::/48
Signature Algorithm: sha256WithRSAEncryption
75:21:16:f7:05:9d:95:90:e0:01:74:82:ff:7f:85:39:35:80:
b8:5f:9a:6d:1b:df:51:b7:ab:3c:33:00:3a:82:48:98:e3:7e:
a6:dc:cf:af:38:fd:9e:96:c8:98:e2:97:64:38:43:db:ac:cb:
4d:94:63:53:15:ae:ac:18:30:24:52:84:54:36:55:02:5f:29:
e5:de:9b:e8:4c:c2:d9:2f:1d:92:e7:5b:a1:13:0e:d0:81:41:
a7:ff:4d:57:f0:1f:ec:f8:03:e6:26:d3:43:db:12:47:8e:46:
99:11:fd:70:15:8b:f1:5e:e5:d7:40:be:c1:65:89:7c:23:71:
81:ed:43:9d:84:73:a2:5b:fd:5b:d8:5f:22:f6:68:6d:7b:80:
bb:a4:1b:be:12:ef:4b:48:3b:b5:05:2e:76:ef:09:0f:91:8a:
a3:5a:59:ca:c8:be:8e:7c:8a:19:3b:ba:d5:a8:73:a8:dd:02:
13:5f:c6:df:28:87:2d:f5:2f:cf:f5:8a:8a:87:9e:27:46:29:
01:eb:68:7a:cf:f5:19:61:70:50:06:d7:fb:41:bf:07:36:d2:
e2:ad:08:24:f4:c0:43:84:8b:ce:e1:76:f3:bf:be:34:85:74:
00:79:7e:ff:8c:a3:cc:df:61:6a:13:6a:90:ee:2a:f4:f3:f3:
2d:6d:1d:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:42:20 2026 by rpki-client