Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/uIa4zkFY4A9vzw58kSKCmfk0DOQ.roa
File: uIa4zkFY4A9vzw58kSKCmfk0DOQ.roa (raw, json)
Hash identifier: 5GA0c289K1eM0975vFreXvBAvts4XCEq2R0BlZHe6C4=
Subject key identifier: B8:86:B8:CE:41:58:E0:0F:6F:CF:0E:7C:91:22:82:99:F9:34:0C:E4
Certificate issuer: /CN=e15b90ffdfa0ab285485e78446b871998b24dcc0
Certificate serial: 019C815B40808E601A9454288F3B67723EAA
Authority key identifier: E1:5B:90:FF:DF:A0:AB:28:54:85:E7:84:46:B8:71:99:8B:24:DC:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VuQ_9-gqyhUheeERrhxmYsk3MA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/uIa4zkFY4A9vzw58kSKCmfk0DOQ.roa
Signing time: Sat 21 Feb 2026 17:59:27 +0000
ROA not before: Sat 21 Feb 2026 17:59:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216138
IP address blocks: 2a13:9ac0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/4VuQ_9-gqyhUheeERrhxmYsk3MA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/4VuQ_9-gqyhUheeERrhxmYsk3MA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4VuQ_9-gqyhUheeERrhxmYsk3MA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:81:5b:40:80:8e:60:1a:94:54:28:8f:3b:67:72:3e:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e15b90ffdfa0ab285485e78446b871998b24dcc0
Validity
Not Before: Feb 21 17:59:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b886b8ce4158e00f6fcf0e7c91228299f9340ce4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f7:f9:ce:69:d6:72:6b:5a:16:df:5f:85:99:
c7:8f:94:40:80:d7:87:ce:4e:11:5a:f7:92:df:15:
3b:df:25:0e:4d:e4:49:70:21:6c:fa:5c:89:7e:6f:
f3:fe:48:a8:46:a0:83:ca:65:0d:52:29:f4:6d:a1:
52:b4:43:32:b9:bb:3e:1c:f8:0a:26:a6:6b:f8:a9:
da:88:9c:25:af:e8:94:2d:c5:c0:ae:51:57:4f:18:
ec:29:be:bb:dd:5d:51:01:81:d1:4f:c5:7d:2f:48:
40:75:95:42:29:5d:4e:62:b2:51:d4:4e:69:7e:2e:
0f:f9:79:fc:12:1d:19:66:fe:c4:ff:a2:03:f5:f2:
f5:07:cc:53:fc:a2:21:20:f9:88:e7:17:ea:64:73:
09:57:1c:55:61:d4:3e:95:eb:c3:f2:a7:e6:fc:e5:
28:84:49:39:10:96:2e:68:e4:0b:9d:3b:c1:7f:02:
8f:d7:4e:ea:e3:b5:99:8d:2c:77:f5:56:de:b8:16:
9a:40:d0:4e:d3:2e:e1:37:3e:6e:0f:91:6c:a7:86:
34:80:8a:5c:95:bc:b0:9d:e5:11:ac:ae:5f:59:b4:
2f:ee:1e:ae:0e:10:92:c7:cb:03:9f:ff:08:81:58:
1f:44:96:d9:4d:8e:43:d0:65:27:6e:44:84:c6:02:
63:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:86:B8:CE:41:58:E0:0F:6F:CF:0E:7C:91:22:82:99:F9:34:0C:E4
X509v3 Authority Key Identifier:
keyid:E1:5B:90:FF:DF:A0:AB:28:54:85:E7:84:46:B8:71:99:8B:24:DC:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VuQ_9-gqyhUheeERrhxmYsk3MA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/uIa4zkFY4A9vzw58kSKCmfk0DOQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/4VuQ_9-gqyhUheeERrhxmYsk3MA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9ac0::/29
Signature Algorithm: sha256WithRSAEncryption
57:e2:59:6d:0e:92:da:bf:37:95:0d:18:f3:34:ce:42:8b:9e:
73:7b:18:1d:ca:27:21:30:ff:03:24:a7:f7:50:58:da:3c:ab:
46:78:bc:ba:4b:68:d3:c4:3b:1d:40:48:27:7d:74:48:29:aa:
45:16:87:49:75:74:06:7e:de:6c:b1:cb:a8:a1:a6:ad:8b:4b:
73:a7:2c:34:7f:27:20:fb:49:8f:65:bc:46:1e:43:0c:4a:02:
7f:ab:7e:ea:50:88:a7:5d:b3:6b:99:75:d6:a4:ad:da:67:ed:
89:cb:f9:f5:43:bf:48:e0:78:d8:24:2e:7d:4c:c6:40:05:87:
af:32:a6:13:cf:1c:25:51:5d:ca:8f:c3:c6:57:07:f5:43:7d:
7e:6f:e7:db:b8:90:17:53:ac:12:12:b4:5a:f9:24:8b:0f:80:
10:3a:0c:ef:a5:17:cb:6f:b2:d7:d2:49:73:b5:0b:d2:fc:03:
61:01:35:00:11:00:60:33:41:eb:c5:f7:c1:c1:11:c1:9f:1e:
75:af:92:62:96:f2:67:e8:0e:ea:c4:1a:f5:a2:57:d1:e7:45:
e4:31:02:fb:85:7e:d8:14:6b:de:b6:d2:8f:df:cf:ea:f2:b8:
7a:69:b1:39:35:da:ad:61:2c:b2:00:2c:f3:31:3f:bd:27:27:
4b:7c:97:30
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZyBW0CAjmAalFQojztncj6qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxNWI5MGZmZGZhMGFiMjg1NDg1ZTc4NDQ2Yjg3MTk5OGIy
NGRjYzAwHhcNMjYwMjIxMTc1OTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiODg2YjhjZTQxNThlMDBmNmZjZjBlN2M5MTIyODI5OWY5MzQwY2U0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsff5zmnWcmtaFt9fhZnHj5RAgNeH
zk4RWveS3xU73yUOTeRJcCFs+lyJfm/z/kioRqCDymUNUin0baFStEMyubs+HPgK
JqZr+KnaiJwlr+iULcXArlFXTxjsKb673V1RAYHRT8V9L0hAdZVCKV1OYrJR1E5p
fi4P+Xn8Eh0ZZv7E/6ID9fL1B8xT/KIhIPmI5xfqZHMJVxxVYdQ+levD8qfm/OUo
hEk5EJYuaOQLnTvBfwKP107q47WZjSx39VbeuBaaQNBO0y7hNz5uD5Fsp4Y0gIpc
lbywneURrK5fWbQv7h6uDhCSx8sDn/8IgVgfRJbZTY5D0GUnbkSExgJjuwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFLiGuM5BWOAPb88OfJEigpn5NAzkMB8GA1UdIwQY
MBaAFOFbkP/foKsoVIXnhEa4cZmLJNzAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFZ1UV85LWdxeWhVaGVlRVJyaHhtWXNrM01BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS81ZjNlMjEtNmI0MS00OTY0LWJmZGEt
Y2JiZmRhOTI0MTlkLzEvdUlhNHprRlk0QTl2enc1OGtTS0NtZmswRE9RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS81ZjNlMjEtNmI0MS00OTY0LWJmZGEtY2JiZmRhOTI0MTlk
LzEvNFZ1UV85LWdxeWhVaGVlRVJyaHhtWXNrM01BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhOawDAN
BgkqhkiG9w0BAQsFAAOCAQEAV+JZbQ6S2r83lQ0Y8zTOQouec3sYHconITD/AySn
91BY2jyrRni8ukto08Q7HUBIJ310SCmqRRaHSXV0Bn7ebLHLqKGmrYtLc6csNH8n
IPtJj2W8Rh5DDEoCf6t+6lCIp12za5l11qSt2mfticv59UO/SOB42CQufUzGQAWH
rzKmE88cJVFdyo/DxlcH9UN9fm/n27iQF1OsEhK0Wvkkiw+AEDoM76UXy2+y19JJ
c7UL0vwDYQE1ABEAYDNB68X3wcERwZ8eda+SYpbyZ+gO6sQa9aJX0edF5DEC+4V+
2BRr3rbSj9/P6vK4emmxOTXarWEssgAs8zE/vScnS3yXMA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:32:14 2026 by rpki-client