Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/haQRwP2dzsg-sHVyLxYX0ft7Uk8.roa
File: haQRwP2dzsg-sHVyLxYX0ft7Uk8.roa (raw, json)
Hash identifier: E+J4U5Y2xIVaeCaY8cTdAkE1+HOCrIQ4nNQKMPeb/WA=
Subject key identifier: 85:A4:11:C0:FD:9D:CE:C8:3E:B0:75:72:2F:16:17:D1:FB:7B:52:4F
Certificate issuer: /CN=63392e929317ae6bde08a5a3b98a2b701ddb893a
Certificate serial: 019C4B2F8B9E0A8E0B4DFF53C9D917AF8C1E
Authority key identifier: 63:39:2E:92:93:17:AE:6B:DE:08:A5:A3:B9:8A:2B:70:1D:DB:89:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YzkukpMXrmveCKWjuYorcB3biTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/haQRwP2dzsg-sHVyLxYX0ft7Uk8.roa
Signing time: Wed 11 Feb 2026 05:32:12 +0000
ROA not before: Wed 11 Feb 2026 05:32:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 38136
IP address blocks: 2a12:f8c3:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/YzkukpMXrmveCKWjuYorcB3biTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:4b:2f:8b:9e:0a:8e:0b:4d:ff:53:c9:d9:17:af:8c:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63392e929317ae6bde08a5a3b98a2b701ddb893a
Validity
Not Before: Feb 11 05:32:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=85a411c0fd9dcec83eb075722f1617d1fb7b524f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4c:fc:3d:ad:46:0b:3f:df:53:ba:a7:af:d6:
ab:56:f4:4b:22:e3:c8:f8:5b:7d:ae:d0:df:dc:e2:
44:a0:53:59:1e:b5:eb:1a:11:21:fa:93:a8:99:21:
c1:8e:de:99:94:1c:d8:44:ff:7e:fc:1b:3f:16:3e:
1a:7f:28:3e:d9:36:4a:1b:b4:21:38:99:44:8e:c6:
1a:37:3e:5c:ee:69:f3:d8:8c:e3:8c:0c:12:e9:bc:
71:bd:28:eb:54:67:f5:f8:4f:94:63:cc:cc:f0:fb:
21:47:2b:cc:6d:ee:47:f9:f8:0a:da:fd:01:0d:64:
1c:9d:c3:42:66:48:fe:d6:a3:ae:ea:e1:b7:5d:e9:
e1:52:2b:b8:0a:2f:ad:a4:0c:fd:06:bd:53:57:76:
00:fc:83:58:de:08:61:fd:c3:cc:7b:c1:ff:b9:10:
f0:4c:7c:0a:b5:db:fa:5a:9b:8e:ff:bb:ad:7d:30:
d9:c3:9f:ba:07:b0:c5:b7:7c:1e:48:f4:3c:be:5b:
80:b5:e9:e6:cb:ff:25:a9:ca:98:57:2d:57:18:4c:
7b:34:da:59:14:38:89:a1:ba:9c:fb:20:76:60:0f:
7f:62:41:13:6e:e3:b6:6d:f9:47:1a:6e:93:a9:e5:
cf:49:0d:fa:f6:52:ec:28:d7:73:11:38:0e:c7:dc:
22:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:A4:11:C0:FD:9D:CE:C8:3E:B0:75:72:2F:16:17:D1:FB:7B:52:4F
X509v3 Authority Key Identifier:
keyid:63:39:2E:92:93:17:AE:6B:DE:08:A5:A3:B9:8A:2B:70:1D:DB:89:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YzkukpMXrmveCKWjuYorcB3biTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/haQRwP2dzsg-sHVyLxYX0ft7Uk8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:f8c3:1::/48
Signature Algorithm: sha256WithRSAEncryption
b3:89:fb:f9:fa:57:44:f6:1e:83:25:58:37:f7:ed:9a:9e:75:
84:be:6b:6c:42:76:d5:0c:db:05:9f:20:8b:2c:9d:be:e2:f1:
64:61:15:6f:70:f0:7a:67:64:d7:4b:23:e5:97:84:4b:8c:1f:
7f:f5:39:bf:74:1a:8e:33:76:c9:8f:0e:8c:fa:47:73:7e:6f:
b6:19:09:3e:0e:9b:bb:d2:63:fb:13:66:a4:96:31:96:57:87:
d9:68:ff:e6:52:96:2b:4b:c2:d6:e0:f4:25:93:83:8a:c8:cd:
c9:d2:38:32:be:96:19:e3:06:e2:1c:c1:ad:f4:31:7b:69:7b:
42:32:51:1c:40:96:0e:3c:ce:a1:7f:94:44:ce:58:c2:b0:9c:
07:90:8f:1d:c2:a1:88:9d:b1:51:13:a2:15:62:53:62:ab:f9:
3d:0f:10:9d:f1:7e:cd:64:e5:99:24:6d:9b:a0:59:e2:3c:7f:
5a:45:8b:e5:7f:b4:87:03:79:75:50:0d:00:da:03:44:b1:52:
c6:24:b6:f1:71:0e:99:d6:18:5b:ca:84:94:1e:55:3d:27:12:
ce:e3:12:c5:67:7e:9a:d3:4e:fc:72:5b:16:87:e5:5c:35:ba:
0d:d3:b4:a2:44:34:4c:bf:f3:d4:42:bd:b6:a5:8f:60:ee:0b:
2b:27:21:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:51:37 2026 by rpki-client