Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/o5A1ao-mwFTwUPsQpDad9dq5pGk.roa
File: o5A1ao-mwFTwUPsQpDad9dq5pGk.roa (raw, json)
Hash identifier: keQoluweRlLv1oitluma6Q7X3HvsfiP7/Q1ViPR+dys=
Subject key identifier: A3:90:35:6A:8F:A6:C0:54:F0:50:FB:10:A4:36:9D:F5:DA:B9:A4:69
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 019F9EDBD3722689F659D73DBD7F819924C4
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/o5A1ao-mwFTwUPsQpDad9dq5pGk.roa
Signing time: Sun 26 Jul 2026 14:37:14 +0000
ROA not before: Sun 26 Jul 2026 14:37:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214783
IP address blocks: 2a0b:ac00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 11:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9e:db:d3:72:26:89:f6:59:d7:3d:bd:7f:81:99:24:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Jul 26 14:37:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a390356a8fa6c054f050fb10a4369df5dab9a469
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:17:f2:70:88:15:11:92:1f:1c:f8:eb:cd:80:
09:4f:a5:f5:ac:17:69:42:2e:c2:7f:cd:58:74:04:
73:ab:57:b7:56:d4:78:46:de:9b:45:e5:94:3a:e7:
11:82:d9:67:98:a0:db:e0:74:43:cb:80:f2:8c:9f:
9b:16:e0:c3:5a:e9:fd:df:70:66:9d:e7:2f:a3:ab:
3a:87:0c:4b:f3:96:8b:3b:ed:88:e6:59:ab:a8:ba:
2a:77:a7:5e:de:ef:2b:ef:34:47:65:50:ad:a9:be:
1f:6e:bf:5f:e6:ce:1d:92:0a:10:3a:ee:c7:27:1d:
cd:fe:89:6e:38:f2:75:90:9b:7e:58:e9:5f:2f:6a:
b6:62:0b:1c:bb:76:4d:84:0d:ed:12:65:90:03:aa:
13:72:bc:fe:09:c2:5f:2d:89:ea:ca:22:ab:0c:f9:
ea:ea:a7:22:d1:c3:d6:76:ca:42:6b:2a:27:70:45:
ae:71:f5:77:36:e3:e7:c4:c3:8a:6c:71:cb:f0:b1:
46:b3:2e:c2:4f:cc:e5:0a:49:7a:09:3b:cb:00:e7:
de:83:cb:2a:a3:29:fc:40:da:fe:74:e6:9f:59:ec:
c9:9e:40:1a:c5:27:cd:6d:97:0c:43:a0:e6:b5:69:
07:59:d3:9b:ad:77:f5:3c:72:fc:5b:45:40:f9:fb:
b2:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:90:35:6A:8F:A6:C0:54:F0:50:FB:10:A4:36:9D:F5:DA:B9:A4:69
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/o5A1ao-mwFTwUPsQpDad9dq5pGk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:ac00::/29
Signature Algorithm: sha256WithRSAEncryption
6a:cc:25:12:dd:69:7b:78:5c:c4:0d:76:f9:90:db:28:80:b6:
a5:ed:a2:a0:b1:e7:b3:36:ce:3c:2f:86:ab:37:5b:f1:0a:d7:
12:15:3c:96:52:a0:ec:8f:cd:6e:e5:87:0c:ab:b2:32:db:c2:
d8:81:97:32:28:02:45:b2:95:cd:82:5c:86:54:24:f2:4d:f3:
92:b1:07:ac:45:34:af:aa:d0:1d:65:de:76:ce:e0:4a:ab:76:
80:9b:94:cc:d0:aa:d2:b3:8a:4f:b6:b3:dc:4b:ce:2d:a3:75:
8b:0e:4c:79:61:bb:55:3c:c7:c9:ef:94:4d:4a:f2:a7:9f:42:
31:46:92:a5:86:d6:66:d4:af:6b:5d:10:a1:65:f2:3f:5e:3d:
61:b0:ac:c4:7a:a1:71:c6:70:fb:96:f6:ce:aa:e1:3d:68:ca:
25:34:fb:16:7b:9b:3d:ac:81:2b:b1:b2:2b:b7:d6:1f:ef:4f:
e3:c2:76:b1:a5:4e:4f:00:df:e6:14:b5:ba:ba:35:6c:40:3c:
66:d3:19:13:ba:23:4b:cf:5b:50:6b:88:67:e8:7e:7e:bf:cb:
02:44:ca:ed:40:7c:40:d2:4e:31:43:12:57:a9:56:85:5e:74:
d3:68:f6:37:42:d3:1c:23:62:52:a4:a5:38:ea:5a:d7:64:e8:
e3:b7:bc:4b
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZ+e29NyJon2Wdc9vX+BmSTEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMTQxMTJkMDVlOWQ4NzYxNDlkMjc3OGQ0OGVkYWFhMzI0
ZGIwYTUwHhcNMjYwNzI2MTQzNzE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMzkwMzU2YThmYTZjMDU0ZjA1MGZiMTBhNDM2OWRmNWRhYjlhNDY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1hfycIgVEZIfHPjrzYAJT6X1rBdp
Qi7Cf81YdARzq1e3VtR4Rt6bReWUOucRgtlnmKDb4HRDy4DyjJ+bFuDDWun933Bm
necvo6s6hwxL85aLO+2I5lmrqLoqd6de3u8r7zRHZVCtqb4fbr9f5s4dkgoQOu7H
Jx3N/oluOPJ1kJt+WOlfL2q2Ygscu3ZNhA3tEmWQA6oTcrz+CcJfLYnqyiKrDPnq
6qci0cPWdspCayoncEWucfV3NuPnxMOKbHHL8LFGsy7CT8zlCkl6CTvLAOfeg8sq
oyn8QNr+dOafWezJnkAaxSfNbZcMQ6DmtWkHWdObrXf1PHL8W0VA+fuyXQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFKOQNWqPpsBU8FD7EKQ2nfXauaRpMB8GA1UdIwQY
MBaAFE8UES0F6dh2FJ0neNSO2qoyTbClMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUt
YmFmYmRmYzgxMzJhLzEvbzVBMWFvLW13RlR3VVBzUXBEYWQ5ZHE1cEdrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUtYmFmYmRmYzgxMzJh
LzEvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKgusADAN
BgkqhkiG9w0BAQsFAAOCAQEAaswlEt1pe3hcxA12+ZDbKIC2pe2ioLHnszbOPC+G
qzdb8QrXEhU8llKg7I/NbuWHDKuyMtvC2IGXMigCRbKVzYJchlQk8k3zkrEHrEU0
r6rQHWXeds7gSqt2gJuUzNCq0rOKT7az3EvOLaN1iw5MeWG7VTzHye+UTUryp59C
MUaSpYbWZtSva10QoWXyP149YbCsxHqhccZw+5b2zqrhPWjKJTT7FnubPayBK7Gy
K7fWH+9P48J2saVOTwDf5hS1uro1bEA8ZtMZE7ojS89bUGuIZ+h+fr/LAkTK7UB8
QNJOMUMSV6lWhV5002j2N0LTHCNiUqSlOOpa12To47e8Sw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 20:25:07 2026 by rpki-client