Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/Q4Wija57CgvObevbLOpTKoX14o0.roa
File: Q4Wija57CgvObevbLOpTKoX14o0.roa (raw, json)
Hash identifier: lMEQIZqIApL2KZrGTNwykcKVOuX663MtId2Rw00EyOg=
Subject key identifier: 43:85:A2:8D:AE:7B:0A:0B:CE:6D:EB:DB:2C:EA:53:2A:85:F5:E2:8D
Certificate issuer: /CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Certificate serial: 01A19D38226861F2A654CFB6D4D3B7E76D1A
Authority key identifier: E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/Q4Wija57CgvObevbLOpTKoX14o0.roa
Signing time: Mon 02 Nov 2026 17:04:24 +0000
ROA not before: Mon 02 Nov 2026 17:04:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205941
IP address blocks: 2a0f:a146::/31 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft
rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 11:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9d:38:22:68:61:f2:a6:54:cf:b6:d4:d3:b7:e7:6d:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Validity
Not Before: Nov 2 17:04:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4385a28dae7b0a0bce6debdb2cea532a85f5e28d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8c:aa:ed:f4:84:72:19:22:48:49:41:36:d8:
6c:ea:8d:85:7c:c4:fb:04:ef:a0:8d:81:5b:80:75:
f2:46:38:47:60:c2:4d:61:0a:37:32:39:1d:4c:f8:
f1:91:f5:01:1a:26:bd:fc:38:97:7f:52:78:c5:86:
4f:ca:cc:2c:f5:34:b7:0f:44:ce:d7:cd:a8:f4:05:
bf:05:62:57:d0:3a:7a:f6:d2:86:09:aa:61:ee:c0:
fa:db:06:ab:58:fc:01:c7:75:e8:1d:1d:c5:01:87:
84:0c:1d:c7:51:a1:77:5f:14:c7:41:a8:7e:76:de:
bc:49:d8:1d:6b:92:2b:d5:d0:49:03:e4:7e:84:6a:
a1:d1:5a:25:c1:cb:34:31:e0:d3:8a:b6:00:2f:da:
35:20:e8:94:ae:98:05:99:53:b9:96:08:5f:53:a4:
be:6b:94:e9:d4:82:58:68:67:eb:74:aa:f7:a0:db:
91:d1:65:97:db:b9:9e:75:24:28:86:47:72:55:27:
80:5f:9e:53:ca:3f:99:9e:85:92:58:a5:e0:a2:7b:
28:79:34:1a:5b:cf:8f:d7:a1:e9:ea:82:6f:a7:30:
9e:60:12:aa:ad:df:d2:b2:35:7b:f8:19:72:c6:c1:
91:0f:3d:b6:7f:45:c3:37:c0:0e:2e:f6:d1:74:cf:
5f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:85:A2:8D:AE:7B:0A:0B:CE:6D:EB:DB:2C:EA:53:2A:85:F5:E2:8D
X509v3 Authority Key Identifier:
keyid:E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/Q4Wija57CgvObevbLOpTKoX14o0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:a146::/31
Signature Algorithm: sha256WithRSAEncryption
2b:32:ba:04:6e:fb:95:78:73:1a:a4:1d:0b:51:1d:21:4f:e3:
92:83:7a:3f:a8:4e:a3:8e:2e:6d:94:3d:2b:59:49:3a:2f:68:
73:9c:0d:1f:74:80:5a:00:5d:9d:fb:b3:f8:73:40:2a:83:c2:
17:bf:00:f6:0f:c4:e6:2d:34:f2:48:a3:bb:02:5a:9b:20:03:
eb:51:e1:9a:0d:9c:20:f7:fe:98:f1:51:15:4c:02:18:93:9a:
c5:db:a7:ff:45:6a:fa:fe:10:e5:6c:64:c2:fa:8e:7b:c8:61:
f0:6c:a6:c1:18:89:5d:69:f8:eb:7a:b0:ce:ca:a8:26:d7:e0:
1b:47:19:ae:b0:c2:10:66:f3:cd:5e:6c:12:db:46:c6:1a:68:
f2:d0:04:5e:de:c8:d3:2e:00:b0:b7:de:67:f9:f4:92:fa:c9:
a2:0c:f9:21:b0:9d:5f:e6:c6:c6:14:2c:64:72:6a:4b:3b:b0:
8c:21:ac:98:09:21:b4:28:8a:dc:13:b1:d7:fd:f2:d2:40:0a:
c6:70:ff:49:db:27:6e:36:4c:1a:84:bb:9e:84:d4:fd:96:05:
0c:b6:71:48:db:b2:47:79:7f:b3:42:c1:8d:8d:1f:a6:24:4f:
11:d0:39:f4:a9:17:b0:ec:23:3d:fc:ee:8e:ea:56:39:ee:8e:
eb:b8:95:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:23:08 2026 by rpki-client