Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/51YaYG9XEv_ce7V1_-oectEYc_k.roa
File: 51YaYG9XEv_ce7V1_-oectEYc_k.roa (raw, json)
Hash identifier: UMLgnYRk6N5DTUGrhFUdvyzPpmHnLJ1AF8mRPuAEYyA=
Subject key identifier: E7:56:1A:60:6F:57:12:FF:DC:7B:B5:75:FF:EA:1E:72:D1:18:73:F9
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 01A1D4303D3718F46912122ECE9A27A0C824
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/51YaYG9XEv_ce7V1_-oectEYc_k.roa
Signing time: Fri 13 Nov 2026 09:14:53 +0000
ROA not before: Fri 13 Nov 2026 09:14:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216215
IP address blocks: 2a05:9a40::/29 maxlen: 29
2a06:5fc0::/29 maxlen: 29
2a0b:ac00::/29 maxlen: 29
2a10:b40::/29 maxlen: 29
2a10:3f80::/29 maxlen: 29
2a10:77c0::/29 maxlen: 29
2a13:b4c0::/29 maxlen: 29
2a13:b9c0::/29 maxlen: 29
2a13:c340::/29 maxlen: 29
2a14:62c0::/29 maxlen: 29
2a14:68c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:d4:30:3d:37:18:f4:69:12:12:2e:ce:9a:27:a0:c8:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Nov 13 09:14:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e7561a606f5712ffdc7bb575ffea1e72d11873f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:14:8d:50:cc:94:e2:78:2a:ba:09:61:d2:99:
83:ee:f9:51:99:77:16:7d:f2:5c:23:48:da:eb:9f:
30:95:93:5d:ac:73:68:25:30:1b:01:ed:8e:36:fe:
03:9a:84:17:16:92:7b:90:f8:a5:16:64:60:58:ab:
b7:04:ad:ed:35:24:c8:06:54:1a:9a:2e:28:60:74:
8e:61:21:c4:fd:b0:5a:50:fa:d6:17:ec:86:e1:e9:
2c:ac:55:12:b3:30:0c:da:1c:a0:0f:1b:ad:70:4c:
48:85:9d:6f:7f:79:b1:1e:93:c4:09:f0:d3:65:4a:
6b:f0:06:c2:a0:11:13:03:05:a4:56:78:6c:a0:83:
81:00:0f:32:ef:6b:fe:c1:de:17:9d:4b:ce:70:3b:
a4:4c:08:70:ff:cd:41:fe:85:c0:5a:1d:8e:46:85:
3b:fe:59:79:d8:a4:47:fa:52:0e:d2:a4:d3:78:1e:
e7:c1:b9:70:49:79:c3:62:6d:2a:4c:f2:65:51:1b:
06:92:3e:b4:97:73:e9:89:c6:69:67:9e:c2:c0:b9:
2a:ae:0a:57:cd:c5:94:99:6f:16:ed:0f:2f:0c:ee:
7c:5e:d2:fc:3d:e8:54:e3:51:ac:73:25:d4:0a:eb:
c6:44:73:5a:6a:8f:0c:a4:59:a8:9d:e9:25:d1:41:
f2:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:56:1A:60:6F:57:12:FF:DC:7B:B5:75:FF:EA:1E:72:D1:18:73:F9
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/51YaYG9XEv_ce7V1_-oectEYc_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:9a40::/29
2a06:5fc0::/29
2a0b:ac00::/29
2a10:b40::/29
2a10:3f80::/29
2a10:77c0::/29
2a13:b4c0::/29
2a13:b9c0::/29
2a13:c340::/29
2a14:62c0::/29
2a14:68c0::/29
Signature Algorithm: sha256WithRSAEncryption
d5:fa:85:01:0e:61:24:bf:eb:12:ad:15:0b:02:6d:73:37:9c:
76:53:51:3c:f3:28:78:28:ac:d1:0f:37:a3:3c:0b:64:46:de:
6e:5b:d5:c9:d0:b5:ec:60:7d:38:a3:37:6d:8d:e2:8f:0e:a7:
40:02:65:3c:9e:70:eb:b9:49:7b:63:0f:bf:b3:03:b3:39:6a:
de:ea:d8:41:a4:95:65:bf:55:1c:50:a6:1e:bd:75:4d:5e:61:
25:d4:f0:ed:04:ca:f7:08:44:a4:fc:b0:46:75:46:53:43:40:
11:9a:3a:4b:c6:1c:2b:a9:66:32:f6:97:9b:f3:3c:82:a7:0e:
fc:9c:d2:5b:52:53:16:02:64:32:31:7b:26:17:a2:7e:29:45:
51:d8:6c:22:bb:10:e6:c8:81:f9:88:c1:3f:41:36:d2:39:a6:
22:37:1a:05:b2:f2:06:c4:51:a6:66:d3:b5:65:5d:f0:2f:18:
3e:02:07:66:76:5f:74:93:3f:51:33:75:4c:49:dc:57:31:ca:
88:e4:56:6b:a9:b7:eb:31:c8:6b:33:d7:92:d1:b5:36:77:5f:
36:67:54:df:66:ea:7c:eb:6b:bb:b9:e2:32:16:cb:3f:03:9c:
f2:22:17:9d:c2:43:74:5d:9c:c1:64:e8:dc:c7:82:9f:bf:ef:
c7:43:41:ec
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgISAaHUMD03GPRpEhIuzponoMgkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMTQxMTJkMDVlOWQ4NzYxNDlkMjc3OGQ0OGVkYWFhMzI0
ZGIwYTUwHhcNMjYxMTEzMDkxNDUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNzU2MWE2MDZmNTcxMmZmZGM3YmI1NzVmZmVhMWU3MmQxMTg3M2Y5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhSNUMyU4ngquglh0pmD7vlRmXcW
ffJcI0ja658wlZNdrHNoJTAbAe2ONv4DmoQXFpJ7kPilFmRgWKu3BK3tNSTIBlQa
mi4oYHSOYSHE/bBaUPrWF+yG4eksrFUSszAM2hygDxutcExIhZ1vf3mxHpPECfDT
ZUpr8AbCoBETAwWkVnhsoIOBAA8y72v+wd4XnUvOcDukTAhw/81B/oXAWh2ORoU7
/ll52KRH+lIO0qTTeB7nwblwSXnDYm0qTPJlURsGkj60l3PpicZpZ57CwLkqrgpX
zcWUmW8W7Q8vDO58XtL8PehU41GscyXUCuvGRHNaao8MpFmonekl0UHypQIDAQAB
o4ICUDCCAkwwHQYDVR0OBBYEFOdWGmBvVxL/3Hu1df/qHnLRGHP5MB8GA1UdIwQY
MBaAFE8UES0F6dh2FJ0neNSO2qoyTbClMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUt
YmFmYmRmYzgxMzJhLzEvNTFZYVlHOVhFdl9jZTdWMV8tb2VjdEVZY19rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUtYmFmYmRmYzgxMzJh
LzEvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGYGCCsGAQUFBwEHAQH/BFcwVTBTBAIAAjBNAwUDKgWaQAMF
AyoGX8ADBQMqC6wAAwUDKhALQAMFAyoQP4ADBQMqEHfAAwUDKhO0wAMFAyoTucAD
BQMqE8NAAwUDKhRiwAMFAyoUaMAwDQYJKoZIhvcNAQELBQADggEBANX6hQEOYSS/
6xKtFQsCbXM3nHZTUTzzKHgorNEPN6M8C2RG3m5b1cnQtexgfTijN22N4o8Op0AC
ZTyecOu5SXtjD7+zA7M5at7q2EGklWW/VRxQph69dU1eYSXU8O0EyvcIRKT8sEZ1
RlNDQBGaOkvGHCupZjL2l5vzPIKnDvyc0ltSUxYCZDIxeyYXon4pRVHYbCK7EObI
gfmIwT9BNtI5piI3GgWy8gbEUaZm07VlXfAvGD4CB2Z2X3STP1EzdUxJ3Fcxyojk
Vmupt+sxyGsz15LRtTZ3XzZnVN9m6nzra7u54jIWyz8DnPIiF53CQ3RdnMFk6NzH
gp+/78dDQew=
-----END CERTIFICATE-----
Generated at Sun Nov 15 16:53:35 2026 by rpki-client