Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/C6uUnb-GcnQfqIvL7gX32SouFUA.roa
File: C6uUnb-GcnQfqIvL7gX32SouFUA.roa (raw, json)
Hash identifier: W8gXCQVnHQZj4Fig+/xRtixgdI9dMwYVfKpFVE38sls=
Subject key identifier: 0B:AB:94:9D:BF:86:72:74:1F:A8:8B:CB:EE:05:F7:D9:2A:2E:15:40
Certificate issuer: /CN=e15b90ffdfa0ab285485e78446b871998b24dcc0
Certificate serial: 019C815CA95379AF6F54964D2CA2FB11D99A
Authority key identifier: E1:5B:90:FF:DF:A0:AB:28:54:85:E7:84:46:B8:71:99:8B:24:DC:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VuQ_9-gqyhUheeERrhxmYsk3MA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/C6uUnb-GcnQfqIvL7gX32SouFUA.roa
Signing time: Sat 21 Feb 2026 18:00:59 +0000
ROA not before: Sat 21 Feb 2026 18:00:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 400342
IP address blocks: 2a13:9ac0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/4VuQ_9-gqyhUheeERrhxmYsk3MA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/4VuQ_9-gqyhUheeERrhxmYsk3MA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4VuQ_9-gqyhUheeERrhxmYsk3MA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:81:5c:a9:53:79:af:6f:54:96:4d:2c:a2:fb:11:d9:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e15b90ffdfa0ab285485e78446b871998b24dcc0
Validity
Not Before: Feb 21 18:00:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0bab949dbf8672741fa88bcbee05f7d92a2e1540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e3:e7:e7:d4:6e:0d:8d:05:8b:e5:d6:8a:f8:
bd:f3:7e:db:23:2e:fe:21:3a:9f:cd:da:13:ce:f4:
21:eb:90:1d:70:7d:20:31:2c:24:24:50:46:ca:ac:
28:4f:ac:12:75:7b:43:79:6b:fb:a6:23:4e:be:68:
33:3f:d7:c8:a3:0e:36:95:cc:6b:ac:f3:da:b3:0f:
20:87:7d:f9:76:df:7d:be:23:0e:7c:11:56:17:1f:
02:39:f0:84:8c:6e:b5:45:3b:52:24:de:65:57:76:
4f:d5:8d:1a:a0:2d:bc:16:7c:87:1a:32:ad:79:97:
25:6c:4d:2d:3b:95:57:28:96:30:d9:85:25:b4:7e:
c4:13:07:0e:79:2e:fb:84:2f:e5:f4:04:34:53:bb:
27:6a:ee:ce:e2:6f:b1:7b:36:66:85:84:79:c8:cf:
b2:25:72:cc:af:7d:7d:0a:ae:18:95:5d:21:11:da:
66:9b:4b:26:9d:b6:57:69:7b:c7:01:94:c9:d1:91:
a0:fd:02:5a:30:95:c6:c0:ae:ae:f3:49:c5:b3:6a:
05:9c:6c:16:b6:6d:a5:37:9d:5a:22:84:dd:2a:62:
a5:eb:91:51:10:02:c8:ac:e3:72:53:c7:43:1f:cc:
9b:35:2d:5c:e4:92:05:03:29:38:55:14:61:57:00:
2b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:AB:94:9D:BF:86:72:74:1F:A8:8B:CB:EE:05:F7:D9:2A:2E:15:40
X509v3 Authority Key Identifier:
keyid:E1:5B:90:FF:DF:A0:AB:28:54:85:E7:84:46:B8:71:99:8B:24:DC:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VuQ_9-gqyhUheeERrhxmYsk3MA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/C6uUnb-GcnQfqIvL7gX32SouFUA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/4VuQ_9-gqyhUheeERrhxmYsk3MA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9ac0::/29
Signature Algorithm: sha256WithRSAEncryption
33:6a:38:80:be:68:11:f8:19:8b:1c:46:31:ab:11:fa:f1:4d:
d4:f1:2f:79:ff:87:c8:a7:21:f0:0b:2b:f1:0a:71:d2:03:db:
8d:f2:19:c3:20:6f:25:75:94:be:1e:91:db:41:8b:e5:ed:51:
7e:0f:bd:2c:bc:9d:42:7c:0b:79:ea:77:67:78:78:8c:43:8b:
02:d6:62:0b:6a:52:43:8b:84:18:77:27:ae:f6:cb:60:c2:29:
96:26:da:fe:dc:5b:77:bd:1c:3d:98:a4:87:1c:7a:35:0a:6c:
4d:86:23:7b:cb:11:87:36:7c:0b:86:e1:ad:01:a7:f8:a1:41:
9d:f3:90:ea:f3:0d:7f:2b:8d:aa:39:f7:c7:93:d8:ab:7d:43:
2e:5c:4c:72:43:0d:51:92:61:28:ba:07:c0:41:2e:ad:63:c9:
f1:0d:13:83:10:98:68:cb:a5:e1:7e:3d:58:d6:13:53:82:0b:
72:a1:46:aa:a3:3f:c5:01:94:00:ff:ca:f0:54:3c:2f:99:a5:
f6:c6:3c:2b:6b:42:86:56:09:c9:09:60:7f:7e:95:af:a8:46:
51:41:32:79:37:f7:d0:2c:0f:38:e1:53:8e:72:39:9e:d0:16:
e3:a3:5b:39:9f:ef:a7:6f:a3:cd:75:74:10:6b:d7:85:13:d1:
17:b5:f1:a4
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZyBXKlTea9vVJZNLKL7EdmaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxNWI5MGZmZGZhMGFiMjg1NDg1ZTc4NDQ2Yjg3MTk5OGIy
NGRjYzAwHhcNMjYwMjIxMTgwMDU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYmFiOTQ5ZGJmODY3Mjc0MWZhODhiY2JlZTA1ZjdkOTJhMmUxNTQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0+Pn59RuDY0Fi+XWivi9837bIy7+
ITqfzdoTzvQh65AdcH0gMSwkJFBGyqwoT6wSdXtDeWv7piNOvmgzP9fIow42lcxr
rPPasw8gh335dt99viMOfBFWFx8COfCEjG61RTtSJN5lV3ZP1Y0aoC28FnyHGjKt
eZclbE0tO5VXKJYw2YUltH7EEwcOeS77hC/l9AQ0U7snau7O4m+xezZmhYR5yM+y
JXLMr319Cq4YlV0hEdpmm0smnbZXaXvHAZTJ0ZGg/QJaMJXGwK6u80nFs2oFnGwW
tm2lN51aIoTdKmKl65FREALIrONyU8dDH8ybNS1c5JIFAyk4VRRhVwArWwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFAurlJ2/hnJ0H6iLy+4F99kqLhVAMB8GA1UdIwQY
MBaAFOFbkP/foKsoVIXnhEa4cZmLJNzAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFZ1UV85LWdxeWhVaGVlRVJyaHhtWXNrM01BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS81ZjNlMjEtNmI0MS00OTY0LWJmZGEt
Y2JiZmRhOTI0MTlkLzEvQzZ1VW5iLUdjblFmcUl2TDdnWDMyU291RlVBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS81ZjNlMjEtNmI0MS00OTY0LWJmZGEtY2JiZmRhOTI0MTlk
LzEvNFZ1UV85LWdxeWhVaGVlRVJyaHhtWXNrM01BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhOawDAN
BgkqhkiG9w0BAQsFAAOCAQEAM2o4gL5oEfgZixxGMasR+vFN1PEvef+HyKch8Asr
8Qpx0gPbjfIZwyBvJXWUvh6R20GL5e1Rfg+9LLydQnwLeep3Z3h4jEOLAtZiC2pS
Q4uEGHcnrvbLYMIpliba/txbd70cPZikhxx6NQpsTYYje8sRhzZ8C4bhrQGn+KFB
nfOQ6vMNfyuNqjn3x5PYq31DLlxMckMNUZJhKLoHwEEurWPJ8Q0TgxCYaMul4X49
WNYTU4ILcqFGqqM/xQGUAP/K8FQ8L5ml9sY8K2tChlYJyQlgf36Vr6hGUUEyeTf3
0CwPOOFTjnI5ntAW46NbOZ/vp2+jzXV0EGvXhRPRF7XxpA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:42:17 2026 by rpki-client