Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/4hTD-DZT4Iazl0bBuqd9-UP4b9k.roa
File: 4hTD-DZT4Iazl0bBuqd9-UP4b9k.roa (raw, json)
Hash identifier: ZfJPPMXvyCps7xTrLnGpgvKv+BuYctMwZ4XOVWpmTwA=
Subject key identifier: E2:14:C3:F8:36:53:E0:86:B3:97:46:C1:BA:A7:7D:F9:43:F8:6F:D9
Certificate issuer: /CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75
Certificate serial: 01A0C88223D1973D8AD2A6C6987E1B8D4860
Authority key identifier: 17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/4hTD-DZT4Iazl0bBuqd9-UP4b9k.roa
Signing time: Tue 22 Sep 2026 09:46:07 +0000
ROA not before: Tue 22 Sep 2026 09:46:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 7029
IP address blocks: 2a11:b040::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.mft
rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 13:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:82:23:d1:97:3d:8a:d2:a6:c6:98:7e:1b:8d:48:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75
Validity
Not Before: Sep 22 09:46:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e214c3f83653e086b39746c1baa77df943f86fd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:fa:fd:75:9e:54:87:63:f2:7c:9a:e7:39:45:
d0:ba:8a:a5:a8:ee:71:97:dc:54:c3:35:d4:d1:d5:
2f:55:f4:ef:fb:ce:22:4c:05:c1:0d:47:97:ec:90:
4f:73:6d:10:f5:48:07:48:72:09:52:69:cb:f7:fe:
2a:e8:4e:09:f4:c2:b9:97:06:01:2e:f5:8d:a4:3e:
72:c9:16:9e:38:02:b9:11:88:21:45:5e:a7:01:60:
0e:cc:85:2c:f4:83:03:47:57:c9:0a:69:d9:1a:90:
2f:70:69:bd:b1:2a:30:4c:40:a1:b6:94:fa:76:52:
c2:ea:41:52:23:dd:12:cb:29:8e:fd:6a:e9:fc:26:
46:5c:20:7c:09:a8:61:4d:a7:74:74:4c:88:8f:7d:
c6:d7:04:ef:02:c4:ed:39:10:2d:68:00:db:52:22:
37:16:03:95:45:5a:f7:b4:32:1b:55:f1:e4:cf:f7:
73:40:05:3e:8b:dd:07:d6:a4:55:bf:de:bd:40:6a:
8c:b9:c2:61:a6:8f:ba:d1:8b:38:f1:88:24:7f:06:
d3:52:78:76:c5:2f:71:7a:f2:88:84:78:67:24:7a:
7c:09:53:44:91:da:f3:05:fc:1c:a3:80:02:45:82:
5e:84:24:b1:61:4f:cb:d7:40:0d:c6:37:79:b2:20:
92:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:14:C3:F8:36:53:E0:86:B3:97:46:C1:BA:A7:7D:F9:43:F8:6F:D9
X509v3 Authority Key Identifier:
keyid:17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/4hTD-DZT4Iazl0bBuqd9-UP4b9k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:b040::/29
Signature Algorithm: sha256WithRSAEncryption
0a:b8:5f:6f:da:14:e7:25:0f:33:30:16:46:c5:92:b3:ce:70:
de:19:70:c9:e2:16:42:5d:d1:ce:43:6e:d0:d4:1a:44:cb:02:
35:10:10:c6:72:cc:c8:7b:a9:df:06:5f:7c:8d:71:d5:1a:5e:
ea:b9:d5:1a:fc:5d:88:37:9c:2f:f5:e6:d8:d4:6b:4e:74:5b:
c1:6d:86:8e:bc:36:d4:4f:1c:23:61:9b:13:da:6a:30:71:ea:
0c:e0:28:e0:51:81:ff:58:94:ca:5b:c9:cf:74:01:83:b0:94:
fa:74:4b:07:de:49:51:65:e2:0c:85:72:ef:00:18:94:cb:ab:
6d:1a:60:1e:06:59:45:60:d4:5f:8f:a4:03:de:82:44:2b:27:
05:59:8c:1e:99:c7:aa:89:81:72:2a:60:7d:60:e0:a1:07:62:
77:64:35:a3:8f:15:d5:a9:5f:65:e8:1c:6b:3d:1d:c4:3f:dd:
4b:b2:7a:f7:82:b3:79:af:1b:19:d5:1e:5e:1f:07:4c:f8:96:
e1:1a:5f:d0:4e:55:ec:07:7d:c4:34:27:e5:79:bc:8b:db:1c:
a3:74:87:c3:d7:41:b7:0d:3f:4b:e2:14:ff:2d:11:4a:40:55:
16:a7:62:df:db:ea:36:9b:a9:0c:b1:f6:c3:13:f3:76:dc:82:
2f:6e:67:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:17:01 2026 by rpki-client