Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/1-mw2G1dqdbLZ8tiyeeAM8rSR6hQ.roa
File: 1-mw2G1dqdbLZ8tiyeeAM8rSR6hQ.roa (raw, json)
Hash identifier: h7CqqSl2LQjJmhCLF1MeDbbfhgUi7N6nFb/MApYSj04=
Subject key identifier: FA:6C:36:1B:57:6A:75:B2:D9:F2:D8:B2:79:E0:0C:F2:B4:91:EA:14
Certificate issuer: /CN=e15b90ffdfa0ab285485e78446b871998b24dcc0
Certificate serial: 019C51BAF53CA4DD1F712A6C639870BC40DB
Authority key identifier: E1:5B:90:FF:DF:A0:AB:28:54:85:E7:84:46:B8:71:99:8B:24:DC:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VuQ_9-gqyhUheeERrhxmYsk3MA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/1-mw2G1dqdbLZ8tiyeeAM8rSR6hQ.roa
Signing time: Thu 12 Feb 2026 12:02:12 +0000
ROA not before: Thu 12 Feb 2026 12:02:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 55201
IP address blocks: 2a13:9ac0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/4VuQ_9-gqyhUheeERrhxmYsk3MA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/4VuQ_9-gqyhUheeERrhxmYsk3MA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4VuQ_9-gqyhUheeERrhxmYsk3MA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:51:ba:f5:3c:a4:dd:1f:71:2a:6c:63:98:70:bc:40:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e15b90ffdfa0ab285485e78446b871998b24dcc0
Validity
Not Before: Feb 12 12:02:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fa6c361b576a75b2d9f2d8b279e00cf2b491ea14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:8d:07:90:51:ee:84:d4:39:f0:0f:16:e3:42:
ab:3a:58:1f:71:90:d0:a1:84:02:ec:7a:0d:d5:5c:
d2:4d:83:9b:3c:0e:c2:8e:57:12:e8:48:72:d7:de:
0f:0f:27:78:4d:67:4c:8d:3c:dd:61:b3:72:b0:34:
45:e3:35:ae:e2:33:fb:41:36:f6:9c:be:35:64:fe:
df:56:04:d0:29:37:eb:d6:d4:fa:c1:82:dc:49:71:
25:6e:ee:85:a1:a7:f3:4d:8a:d0:87:6c:b7:51:a4:
b0:2f:28:41:cf:9c:82:38:ad:76:89:5c:90:56:f0:
95:fd:b4:52:ac:a1:4b:be:3b:e4:92:31:a5:4d:6c:
7c:f9:05:3c:de:cf:57:9e:c9:96:cb:c8:00:57:7b:
83:f1:ce:d8:62:b2:21:4d:d0:fd:85:24:db:63:3e:
a8:e4:a9:3c:eb:c9:4d:14:a6:5d:36:83:3d:72:6e:
64:ab:49:49:62:a1:07:51:32:2c:10:49:90:e3:c4:
74:28:a1:ef:68:1f:0c:b0:82:9b:c1:67:d0:51:f2:
4b:f6:b5:ea:37:95:b7:5f:dd:ec:fb:fa:b5:e4:58:
f6:39:29:f5:42:c2:4e:ff:c7:3c:8e:85:74:23:32:
30:1a:05:6a:51:dc:9e:26:3f:a5:7c:a2:42:16:83:
32:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:6C:36:1B:57:6A:75:B2:D9:F2:D8:B2:79:E0:0C:F2:B4:91:EA:14
X509v3 Authority Key Identifier:
keyid:E1:5B:90:FF:DF:A0:AB:28:54:85:E7:84:46:B8:71:99:8B:24:DC:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VuQ_9-gqyhUheeERrhxmYsk3MA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/1-mw2G1dqdbLZ8tiyeeAM8rSR6hQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/4VuQ_9-gqyhUheeERrhxmYsk3MA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9ac0::/29
Signature Algorithm: sha256WithRSAEncryption
14:93:ea:82:34:16:b1:5f:5b:de:9e:ef:36:84:8d:69:71:e6:
6b:36:9d:30:60:3b:87:c7:d6:76:15:10:84:61:b1:f9:0e:d6:
90:f5:8e:d3:13:7c:85:f2:9f:ce:35:82:0a:27:47:23:31:db:
70:35:dd:aa:33:49:a8:2d:cd:90:6b:99:e8:2e:73:76:d2:fb:
61:f4:be:d9:51:30:d9:66:2e:45:17:09:5a:7f:74:a1:90:01:
ed:38:97:a0:d6:29:94:dc:2b:ea:af:8e:98:0f:06:f9:58:a3:
04:88:2f:a1:69:63:ba:58:42:46:26:e3:3f:74:4f:91:90:20:
4b:69:0d:57:1c:f7:62:35:94:5e:75:bf:b4:32:b8:81:7b:8e:
8e:c8:65:db:6e:48:1a:30:49:ae:f0:39:70:28:e1:cc:8b:92:
0b:e3:70:e8:2f:98:43:14:b6:49:42:ea:b7:a9:a9:12:cb:37:
96:2f:4b:e1:95:39:9e:63:bc:2a:64:9b:da:b1:7d:b9:e6:81:
4a:21:8d:16:35:4d:9f:df:4d:d9:bf:ea:a5:45:9f:83:64:aa:
9f:37:69:dd:ae:11:37:20:2b:ce:d0:82:d6:e7:7d:b5:59:ee:
b5:c1:cc:30:14:e1:d7:eb:b8:b9:5e:8d:da:77:1a:0c:eb:a4:
22:a2:e4:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:42:58 2026 by rpki-client