Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/679033-5b74-48b1-8d7f-cc153468e198/1/CsfJ4beBzCwJq0xUUEN3KAIAoOg.roa
File: CsfJ4beBzCwJq0xUUEN3KAIAoOg.roa (raw, json)
Hash identifier: H8thqU9uIxmfJJLIfwRRTbW1/O7obGLOypWNiqyA/nk=
Subject key identifier: 0A:C7:C9:E1:B7:81:CC:2C:09:AB:4C:54:50:43:77:28:02:00:A0:E8
Certificate issuer: /CN=ab018ada0c444ead782fa48bc37fd0f88fffa576
Certificate serial: 019F3E18D9DF781EC2FF93DCAB126EE9E7D5
Authority key identifier: AB:01:8A:DA:0C:44:4E:AD:78:2F:A4:8B:C3:7F:D0:F8:8F:FF:A5:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwGK2gxETq14L6SLw3_Q-I__pXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/679033-5b74-48b1-8d7f-cc153468e198/1/CsfJ4beBzCwJq0xUUEN3KAIAoOg.roa
Signing time: Tue 07 Jul 2026 19:40:43 +0000
ROA not before: Tue 07 Jul 2026 19:40:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209534
IP address blocks: 2a13:7f80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/679033-5b74-48b1-8d7f-cc153468e198/1/qwGK2gxETq14L6SLw3_Q-I__pXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/679033-5b74-48b1-8d7f-cc153468e198/1/qwGK2gxETq14L6SLw3_Q-I__pXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/qwGK2gxETq14L6SLw3_Q-I__pXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 13:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3e:18:d9:df:78:1e:c2:ff:93:dc:ab:12:6e:e9:e7:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab018ada0c444ead782fa48bc37fd0f88fffa576
Validity
Not Before: Jul 7 19:40:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0ac7c9e1b781cc2c09ab4c54504377280200a0e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:88:5e:7f:2b:aa:57:1a:56:47:22:07:9e:1e:
47:7b:2c:75:10:59:6f:9b:ff:fe:ad:95:c5:39:f2:
a2:fa:5c:20:e1:5d:4d:dd:02:bb:8a:cb:4b:6c:31:
21:b0:51:cd:4f:e2:3f:01:5a:f3:7a:86:9b:f9:ea:
38:b5:39:95:d3:b1:3d:16:e1:b2:2f:7f:be:90:be:
5f:b3:61:a9:ba:1b:03:72:50:eb:f1:5c:f0:1f:2a:
a1:f0:3d:1a:39:18:07:06:7c:a2:4b:02:8d:15:c0:
8f:70:b6:69:ec:ac:ba:47:9a:72:e7:95:e4:2e:5a:
43:48:6f:f2:1c:c2:34:b8:1c:81:5b:82:e5:26:0a:
c0:45:b5:11:2a:48:62:0d:dd:c5:5f:b0:b7:d4:2c:
d1:bf:f7:58:c3:77:47:97:94:a3:eb:0d:c5:3e:9e:
4c:3f:df:cc:bf:e7:67:33:f7:55:e0:ef:a0:20:88:
64:2b:3a:b2:ed:6e:bb:21:fb:78:f5:2f:64:3e:00:
3a:e2:61:c8:9f:ac:2d:ae:b2:8f:61:57:df:ae:c3:
d6:8c:42:5d:a4:00:c2:d8:67:30:40:db:16:89:37:
79:f8:80:2e:1b:7b:b2:7f:94:0e:57:56:e1:e5:b8:
30:b2:e1:31:03:1c:6d:5b:78:5b:76:a5:79:af:bb:
55:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:C7:C9:E1:B7:81:CC:2C:09:AB:4C:54:50:43:77:28:02:00:A0:E8
X509v3 Authority Key Identifier:
keyid:AB:01:8A:DA:0C:44:4E:AD:78:2F:A4:8B:C3:7F:D0:F8:8F:FF:A5:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwGK2gxETq14L6SLw3_Q-I__pXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/679033-5b74-48b1-8d7f-cc153468e198/1/CsfJ4beBzCwJq0xUUEN3KAIAoOg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/679033-5b74-48b1-8d7f-cc153468e198/1/qwGK2gxETq14L6SLw3_Q-I__pXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:7f80::/29
Signature Algorithm: sha256WithRSAEncryption
3b:7b:c9:ae:ec:81:93:40:75:65:22:f4:7e:24:4a:d7:b2:bb:
e7:3f:2d:14:ee:89:22:e8:2c:b6:aa:fc:ab:e2:08:71:94:d8:
c8:a8:e7:d4:61:8d:ce:73:f6:2c:43:48:61:e6:76:02:8e:ae:
86:f4:6f:33:90:8a:54:7e:3a:97:c6:20:a3:f9:3b:97:36:16:
fd:2b:f7:3e:95:28:c2:15:ae:90:9f:2a:7d:14:4e:59:9a:fd:
7a:cc:db:57:ce:9b:95:12:d5:ed:ec:44:78:e4:76:d5:e8:30:
69:78:0a:0b:fd:09:a5:78:5d:ac:d8:bf:c4:fa:7d:56:16:ea:
ca:37:6e:6f:9f:ad:14:48:81:1d:d8:8e:85:f5:cd:78:0f:a1:
6d:91:aa:d3:61:3b:a1:3a:9f:7a:b4:e3:6d:d6:7b:bd:0f:c4:
be:70:46:13:bc:10:a9:6a:42:7f:56:11:28:60:51:70:51:0f:
63:3b:41:19:aa:4e:c1:31:3e:c5:6a:0a:6d:38:8b:37:91:53:
54:f8:bb:05:2f:9b:d9:86:35:f7:07:72:1f:08:2a:8c:f1:91:
89:b9:c1:f2:12:18:1e:67:d5:e8:05:50:7a:eb:c1:b8:f4:72:
0b:41:c5:03:a2:92:b0:c1:81:77:c9:00:63:5e:40:dd:39:a1:
04:7e:04:f5
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZ8+GNnfeB7C/5PcqxJu6efVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiMDE4YWRhMGM0NDRlYWQ3ODJmYTQ4YmMzN2ZkMGY4OGZm
ZmE1NzYwHhcNMjYwNzA3MTk0MDQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYWM3YzllMWI3ODFjYzJjMDlhYjRjNTQ1MDQzNzcyODAyMDBhMGU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYhefyuqVxpWRyIHnh5Heyx1EFlv
m//+rZXFOfKi+lwg4V1N3QK7istLbDEhsFHNT+I/AVrzeoab+eo4tTmV07E9FuGy
L3++kL5fs2GpuhsDclDr8VzwHyqh8D0aORgHBnyiSwKNFcCPcLZp7Ky6R5py55Xk
LlpDSG/yHMI0uByBW4LlJgrARbURKkhiDd3FX7C31CzRv/dYw3dHl5Sj6w3FPp5M
P9/Mv+dnM/dV4O+gIIhkKzqy7W67Ift49S9kPgA64mHIn6wtrrKPYVffrsPWjEJd
pADC2GcwQNsWiTd5+IAuG3uyf5QOV1bh5bgwsuExAxxtW3hbdqV5r7tVZQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFArHyeG3gcwsCatMVFBDdygCAKDoMB8GA1UdIwQY
MBaAFKsBitoMRE6teC+ki8N/0PiP/6V2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXdHSzJneEVUcTE0TDZTTHczX1EtSV9fcFhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS82NzkwMzMtNWI3NC00OGIxLThkN2Yt
Y2MxNTM0NjhlMTk4LzEvQ3NmSjRiZUJ6Q3dKcTB4VVVFTjNLQUlBb09nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS82NzkwMzMtNWI3NC00OGIxLThkN2YtY2MxNTM0NjhlMTk4
LzEvcXdHSzJneEVUcTE0TDZTTHczX1EtSV9fcFhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhN/gDAN
BgkqhkiG9w0BAQsFAAOCAQEAO3vJruyBk0B1ZSL0fiRK17K75z8tFO6JIugstqr8
q+IIcZTYyKjn1GGNznP2LENIYeZ2Ao6uhvRvM5CKVH46l8Ygo/k7lzYW/Sv3PpUo
whWukJ8qfRROWZr9eszbV86blRLV7exEeOR21egwaXgKC/0JpXhdrNi/xPp9Vhbq
yjdub5+tFEiBHdiOhfXNeA+hbZGq02E7oTqferTjbdZ7vQ/EvnBGE7wQqWpCf1YR
KGBRcFEPYztBGapOwTE+xWoKbTiLN5FTVPi7BS+b2YY19wdyHwgqjPGRibnB8hIY
HmfV6AVQeuvBuPRyC0HFA6KSsMGBd8kAY15A3TmhBH4E9Q==
-----END CERTIFICATE-----
Generated at Thu Jul 23 19:00:49 2026 by rpki-client