Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/4dXgMOVCVmLmzl7AuS--VH5SaAg.roa
File: 4dXgMOVCVmLmzl7AuS--VH5SaAg.roa (raw, json)
Hash identifier: pqIU557sGgJL4CWbBTIBl7mSAIEET2y/vdRGqIZMiEA=
Subject key identifier: E1:D5:E0:30:E5:42:56:62:E6:CE:5E:C0:B9:2F:BE:54:7E:52:68:08
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 019E06A80D89C800E73AE5126F39D407660C
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/4dXgMOVCVmLmzl7AuS--VH5SaAg.roa
Signing time: Fri 08 May 2026 08:15:37 +0000
ROA not before: Fri 08 May 2026 08:15:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35273
IP address blocks: 2a09:6280:b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:06:a8:0d:89:c8:00:e7:3a:e5:12:6f:39:d4:07:66:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: May 8 08:15:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e1d5e030e5425662e6ce5ec0b92fbe547e526808
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:d4:09:25:64:07:9a:65:68:73:bc:ab:9e:90:
f0:b3:93:0e:3e:08:39:a7:a8:fe:b9:5e:df:e1:20:
5d:66:bd:0d:77:47:73:e4:75:5b:ec:da:d7:ea:37:
d0:a9:41:0c:ce:4f:24:8a:d8:77:4f:b3:38:2e:6f:
9b:7f:c9:f0:33:64:be:ef:9e:4c:9a:26:1e:f4:4e:
97:ad:15:f4:a3:31:ac:93:29:8e:6e:c2:88:d9:eb:
fe:0f:5c:ef:91:6d:68:ad:ec:ca:09:aa:2d:f3:64:
fb:b8:7c:3c:44:28:65:e0:b5:96:7f:8a:32:06:19:
1d:ce:13:e7:60:6d:b9:a5:48:b5:e4:dd:79:0b:bf:
2e:76:ce:40:b8:e8:3c:54:15:50:29:b7:2e:62:c1:
f6:05:1a:5e:9a:63:0e:77:81:af:b0:f1:87:08:19:
e4:4e:bd:bd:d4:e3:86:6b:fb:bb:6e:8a:12:57:ad:
b5:19:ae:1a:50:14:02:70:4d:a4:35:eb:bc:cb:65:
d1:07:1d:7f:8a:cc:6c:4a:7b:c7:bb:eb:55:cd:41:
1b:26:1a:f8:19:b9:00:a0:cf:44:66:a7:1b:1c:5c:
a0:83:e6:50:5a:15:d1:95:81:3c:bb:75:3a:3d:6d:
e1:2e:ff:13:e7:e8:06:8e:e6:af:c4:76:9b:19:eb:
4c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:D5:E0:30:E5:42:56:62:E6:CE:5E:C0:B9:2F:BE:54:7E:52:68:08
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/4dXgMOVCVmLmzl7AuS--VH5SaAg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:6280:b::/48
Signature Algorithm: sha256WithRSAEncryption
bc:b2:30:23:28:ae:e0:97:00:09:0f:d6:ca:e6:f9:d3:2f:b6:
e5:95:be:03:37:01:98:fd:a7:34:e4:aa:79:6f:30:12:f4:22:
cd:d9:7c:8f:e4:57:99:73:45:e3:f4:06:e7:c4:3a:66:0e:87:
6f:04:f9:02:80:44:87:6f:25:ad:ee:34:37:10:c0:da:e6:fd:
a5:98:a4:02:48:31:f2:a4:0e:f6:4d:c7:82:75:92:fd:15:f7:
78:63:4d:3f:0d:bf:ed:11:e0:56:f7:db:bd:d4:86:ef:fe:f3:
77:88:5f:cf:bc:0d:de:68:73:e6:6a:27:26:45:4c:70:89:05:
2c:c7:fa:e3:77:fa:6c:5c:8b:7b:67:b1:20:6a:f5:78:a6:5b:
17:bd:53:df:d9:cb:bd:95:9d:a5:27:0c:c1:f4:f3:cf:29:1c:
fc:2c:eb:6a:ee:79:2a:83:39:6e:ba:ec:82:ea:94:c8:31:4c:
9b:ee:c5:c4:54:1e:a1:6f:08:ad:62:00:a3:2e:05:a6:45:91:
d3:f6:60:95:54:71:f8:27:d3:1c:e3:60:0e:6d:3a:dc:99:fa:
37:d5:fd:38:c6:78:73:79:68:e2:24:f7:50:93:e6:ae:17:ee:
4a:24:3d:79:ca:61:a2:9c:a1:78:64:8a:ea:cd:13:c4:2a:d2:
0b:1d:d7:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:25:40 2026 by rpki-client