Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/4QPa_bhllvu1CUaVrpePD8PVRZ0.roa
File: 4QPa_bhllvu1CUaVrpePD8PVRZ0.roa (raw, json)
Hash identifier: gL30W1NMa55f7C7irdP/nXQU3MWnglLZ0ADvoKvXlnI=
Subject key identifier: E1:03:DA:FD:B8:65:96:FB:B5:09:46:95:AE:97:8F:0F:C3:D5:45:9D
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 01A0C8B0D8B08A690E145F0982F7F48504CE
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/4QPa_bhllvu1CUaVrpePD8PVRZ0.roa
Signing time: Tue 22 Sep 2026 10:37:08 +0000
ROA not before: Tue 22 Sep 2026 10:37:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402604
IP address blocks: 2a06:6ec0::/29 maxlen: 29
2a0e:c740::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:b0:d8:b0:8a:69:0e:14:5f:09:82:f7:f4:85:04:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Sep 22 10:37:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e103dafdb86596fbb5094695ae978f0fc3d5459d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:15:3c:63:7f:21:82:46:25:aa:8c:86:93:65:
91:99:fe:0b:f9:aa:41:6a:41:97:19:ec:0c:45:07:
05:39:c0:14:be:6e:28:db:f8:94:9e:44:06:b0:7a:
cd:55:75:df:68:a6:3a:13:4a:f7:27:a8:0a:a6:2c:
92:c0:24:14:a4:15:5a:0e:44:18:0a:90:2d:bf:03:
c7:0b:26:01:15:18:67:b2:08:a6:25:d9:b2:a0:96:
9a:c9:4b:90:19:57:3d:a0:70:78:bb:34:73:20:06:
5d:95:17:8f:b9:f0:e4:20:a3:22:3d:23:83:21:4e:
74:18:f9:e4:b1:43:a5:a0:bc:36:da:7e:65:58:2c:
ea:30:a3:e4:ce:ff:a3:8b:56:67:4f:aa:ef:57:70:
0c:77:9e:9f:47:21:de:e7:5a:f6:6a:06:c3:a7:3d:
1e:c5:7c:aa:af:e5:81:9f:61:09:48:16:b0:5d:88:
41:fd:3a:f0:21:32:b7:90:22:d8:eb:84:0f:f5:f5:
28:7b:26:e4:c6:7b:22:e4:fa:d3:47:f8:ab:14:4b:
e1:55:7e:b3:16:74:44:1d:19:9c:e3:4a:6f:23:6d:
dd:01:9a:a0:3f:d2:26:14:a1:84:fe:85:90:1e:d2:
ad:f7:66:53:fc:25:8a:90:8e:9d:32:cf:be:dd:f9:
e2:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:03:DA:FD:B8:65:96:FB:B5:09:46:95:AE:97:8F:0F:C3:D5:45:9D
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/4QPa_bhllvu1CUaVrpePD8PVRZ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:6ec0::/29
2a0e:c740::/29
Signature Algorithm: sha256WithRSAEncryption
6d:c2:02:bf:7c:b9:7a:34:fe:d1:6e:1f:5a:34:c2:ea:58:72:
75:01:2c:2e:41:87:6d:53:98:a3:1b:ba:5a:51:cd:2b:6e:a1:
ba:4c:82:57:2b:42:6c:95:07:fa:ef:75:3f:93:16:8f:4e:ee:
0b:08:7d:16:25:00:4c:f3:5c:39:be:3f:3f:c8:6e:46:63:cd:
bc:ab:84:43:91:85:12:68:7a:41:b1:6f:db:18:87:07:0e:a1:
fe:b1:72:db:90:38:e1:52:e4:5c:a1:fe:67:88:2e:c6:e5:a3:
63:08:48:5c:51:db:65:52:3d:23:4c:52:33:8c:4f:cf:15:0a:
5c:d2:26:86:69:16:21:9f:95:20:90:f5:0e:a9:0e:78:2b:0c:
54:b7:e6:ad:57:1e:16:b8:19:35:5b:db:bd:8c:87:f6:03:4f:
26:1e:73:2b:80:aa:dd:6f:b0:ed:a7:8c:8c:fe:3c:28:d9:4d:
64:bd:54:56:cf:51:18:09:e0:bf:59:f6:70:10:de:b6:13:b2:
7b:0b:6b:88:99:c1:48:6f:bb:07:3f:c2:7d:26:d4:7a:b4:c3:
b3:f3:f6:48:f2:74:41:67:0e:cb:29:26:cd:1c:18:85:c3:e2:
c8:0d:7e:45:aa:fe:19:88:b3:52:bc:32:6a:0f:e7:eb:ba:a7:
27:cb:aa:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:02:34 2026 by rpki-client