Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/0cS1nbk5Int4JJx8ZFuF4CwEQoo.roa
File: 0cS1nbk5Int4JJx8ZFuF4CwEQoo.roa (raw, json)
Hash identifier: XeB6K6T8p6c7RwUL3urLh05fa1KeuyMXlU3sgTg6kwI=
Subject key identifier: D1:C4:B5:9D:B9:39:22:7B:78:24:9C:7C:64:5B:85:E0:2C:04:42:8A
Certificate issuer: /CN=e15b90ffdfa0ab285485e78446b871998b24dcc0
Certificate serial: 019C815B3FE9E2C694E4F0CB918773A502D5
Authority key identifier: E1:5B:90:FF:DF:A0:AB:28:54:85:E7:84:46:B8:71:99:8B:24:DC:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VuQ_9-gqyhUheeERrhxmYsk3MA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/0cS1nbk5Int4JJx8ZFuF4CwEQoo.roa
Signing time: Sat 21 Feb 2026 17:59:26 +0000
ROA not before: Sat 21 Feb 2026 17:59:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197537
IP address blocks: 2a13:9ac0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/4VuQ_9-gqyhUheeERrhxmYsk3MA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/4VuQ_9-gqyhUheeERrhxmYsk3MA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4VuQ_9-gqyhUheeERrhxmYsk3MA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:81:5b:3f:e9:e2:c6:94:e4:f0:cb:91:87:73:a5:02:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e15b90ffdfa0ab285485e78446b871998b24dcc0
Validity
Not Before: Feb 21 17:59:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d1c4b59db939227b78249c7c645b85e02c04428a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:80:fe:c9:db:5e:14:56:f4:77:ae:68:f6:f5:
d8:c4:6a:ec:b2:dc:13:4f:7b:ee:50:18:c0:7a:8b:
95:78:0c:b1:b4:6a:41:e9:c5:ec:b7:dc:54:49:44:
50:9e:06:2e:f4:d2:10:9a:ee:b0:5f:72:2e:57:72:
ab:71:b8:8b:22:07:b9:c5:9a:de:8c:2c:14:7c:e5:
5e:28:2f:93:fe:12:33:95:96:f8:22:33:3a:23:eb:
d6:57:64:d4:79:43:79:25:d6:2c:67:dc:e5:ad:34:
e2:25:17:ec:a8:b5:21:6d:0d:bf:38:af:0b:53:18:
e6:fa:09:da:d3:25:2f:5a:3e:5d:5e:f7:27:cb:b1:
21:11:86:7c:9d:56:60:d1:8b:6e:61:8a:ec:90:c6:
fb:58:f7:6f:06:8a:11:73:d9:2f:ff:bb:b8:e3:b3:
8b:eb:86:5d:58:4c:5c:7e:87:1e:b8:8d:f4:44:5a:
51:28:fa:ed:28:97:a3:2a:16:14:02:43:e8:48:18:
40:be:21:ea:6c:e9:ab:b5:19:33:16:82:49:60:41:
5e:6a:e2:b4:4f:47:46:66:2a:8a:ae:84:1b:c3:5b:
24:e4:ac:1c:b1:2d:94:26:c7:f4:76:9a:e2:5d:56:
30:b7:95:72:62:89:02:c9:d4:70:8b:92:42:9e:9a:
89:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:C4:B5:9D:B9:39:22:7B:78:24:9C:7C:64:5B:85:E0:2C:04:42:8A
X509v3 Authority Key Identifier:
keyid:E1:5B:90:FF:DF:A0:AB:28:54:85:E7:84:46:B8:71:99:8B:24:DC:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VuQ_9-gqyhUheeERrhxmYsk3MA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/0cS1nbk5Int4JJx8ZFuF4CwEQoo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/4VuQ_9-gqyhUheeERrhxmYsk3MA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9ac0::/29
Signature Algorithm: sha256WithRSAEncryption
56:40:e4:f2:2d:46:15:ef:92:74:4c:83:8f:1d:f4:2a:40:47:
cc:9d:c9:91:e8:de:ff:2f:53:79:78:d6:9f:7f:16:0c:11:7f:
be:18:b2:b1:32:85:01:61:66:50:9b:7b:83:ae:35:7b:51:29:
f5:4b:f1:90:4a:fd:24:1a:8f:43:12:75:7b:47:cc:a9:d3:23:
96:8f:b1:c1:da:0a:a7:f8:b6:38:ca:53:9b:ef:77:da:4f:f1:
66:79:b2:35:a2:e3:02:0f:9e:b4:6c:8b:73:9c:29:37:a8:68:
a3:99:0f:e4:05:96:e4:40:da:2c:7f:3e:6c:53:85:40:9e:b9:
bc:e7:6d:e4:86:51:e6:c1:73:e5:df:c8:a6:89:92:69:51:05:
b9:11:8f:16:32:d8:06:af:54:c4:d5:90:e6:df:53:07:01:6a:
d6:3d:27:73:47:b5:4e:a5:39:d4:8f:79:0f:96:52:cf:be:0b:
1d:3f:9d:c4:ab:57:12:3c:49:71:3d:9b:bc:a0:1f:4c:12:e1:
4a:7a:5b:2a:da:7f:d0:84:87:86:64:c2:3c:c7:07:5a:4f:b4:
ce:1a:3b:d8:e2:f3:5e:08:cf:db:16:15:00:27:ef:98:82:66:
20:64:3f:2b:f6:a8:e1:32:c9:70:11:d0:6a:7a:e9:67:c9:dc:
bf:30:ff:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:49:01 2026 by rpki-client