Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/4F9KCelkBdaW6adR2HbwfE6Qa50.roa
File: 4F9KCelkBdaW6adR2HbwfE6Qa50.roa (raw, json)
Hash identifier: 28y0uJhPlCZ576LDD9F3Bdf7MivZvFfgd38Ys6VSm5M=
Subject key identifier: E0:5F:4A:09:E9:64:05:D6:96:E9:A7:51:D8:76:F0:7C:4E:90:6B:9D
Certificate issuer: /CN=05d4d49da3e14855a7b883603ff148c1bb21f690
Certificate serial: 019C95D1E61D9D8867B7DAB3826D61B8532D
Authority key identifier: 05:D4:D4:9D:A3:E1:48:55:A7:B8:83:60:3F:F1:48:C1:BB:21:F6:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BdTUnaPhSFWnuINgP_FIwbsh9pA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/4F9KCelkBdaW6adR2HbwfE6Qa50.roa
Signing time: Wed 25 Feb 2026 17:21:26 +0000
ROA not before: Wed 25 Feb 2026 17:21:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207459
IP address blocks: 2a09:f9c0::/29 maxlen: 29
2a0a:c380::/29 maxlen: 29
2a0e:4bc0::/29 maxlen: 29
2a0e:5640::/29 maxlen: 29
2a0e:5900::/29 maxlen: 29
2a0e:5cc0::/29 maxlen: 29
2a0e:ccc0::/29 maxlen: 29
2a11:1640::/29 maxlen: 29
2a11:3340::/29 maxlen: 29
2a11:4640::/29 maxlen: 29
2a11:5880::/29 maxlen: 29
2a11:65c0::/29 maxlen: 29
2a11:be80::/29 maxlen: 29
2a11:c700::/29 maxlen: 29
2a12:1140::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BdTUnaPhSFWnuINgP_FIwbsh9pA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:95:d1:e6:1d:9d:88:67:b7:da:b3:82:6d:61:b8:53:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05d4d49da3e14855a7b883603ff148c1bb21f690
Validity
Not Before: Feb 25 17:21:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e05f4a09e96405d696e9a751d876f07c4e906b9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d0:34:54:90:b3:e8:20:06:c2:6b:51:6a:45:
b5:93:df:8f:c6:82:56:9a:a1:b0:ab:ff:81:43:1a:
7b:7e:aa:20:09:39:0d:9c:c3:2c:b0:78:3d:0e:c2:
97:d0:27:fa:5c:3a:ed:7a:13:bf:34:f9:bc:c0:ef:
5c:1d:e1:ab:cc:cf:36:ed:6c:3a:48:e7:ad:69:f6:
ad:30:5f:c9:31:bc:4b:95:49:fa:40:de:7b:15:1d:
5f:bd:b1:d7:09:15:86:cd:9e:5f:ad:04:73:06:2e:
d4:3a:b6:a6:c5:00:93:f9:fc:1b:b2:3f:aa:9b:3d:
5d:d7:ad:9e:db:75:a8:48:3a:db:34:40:0e:c8:c0:
d8:a2:96:f9:c9:ab:47:26:f1:81:a6:66:4b:75:9c:
86:46:b4:45:1c:b6:38:3c:7e:01:59:1a:e9:12:0d:
ba:a7:24:a3:48:7a:31:cd:85:e6:39:27:66:4a:95:
34:06:e9:0d:e2:8b:10:1a:1e:fb:39:ac:cd:10:ce:
e9:b9:98:9b:a6:4c:0d:78:c0:1a:4a:0a:59:f8:f8:
a3:97:87:64:15:be:45:51:ea:7a:c8:09:46:86:94:
2b:22:c0:ec:c9:0f:47:c0:22:e5:4e:87:c8:e9:f2:
52:28:53:ec:9d:20:65:b5:10:3b:c6:13:00:58:ce:
26:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:5F:4A:09:E9:64:05:D6:96:E9:A7:51:D8:76:F0:7C:4E:90:6B:9D
X509v3 Authority Key Identifier:
keyid:05:D4:D4:9D:A3:E1:48:55:A7:B8:83:60:3F:F1:48:C1:BB:21:F6:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BdTUnaPhSFWnuINgP_FIwbsh9pA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/4F9KCelkBdaW6adR2HbwfE6Qa50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:f9c0::/29
2a0a:c380::/29
2a0e:4bc0::/29
2a0e:5640::/29
2a0e:5900::/29
2a0e:5cc0::/29
2a0e:ccc0::/29
2a11:1640::/29
2a11:3340::/29
2a11:4640::/29
2a11:5880::/29
2a11:65c0::/29
2a11:be80::/29
2a11:c700::/29
2a12:1140::/29
Signature Algorithm: sha256WithRSAEncryption
28:cd:0c:e0:40:78:21:16:04:ec:0a:7f:40:ed:ed:40:66:1d:
5a:c1:71:79:ec:8b:98:3c:8e:01:7d:55:d6:86:f9:3b:50:de:
20:5c:f5:b4:30:b6:32:7b:a6:6e:c4:85:b5:8d:1b:df:23:58:
0a:7e:cf:22:eb:9e:dc:aa:cc:dc:6a:fa:f5:0f:7e:85:80:ac:
df:e0:72:4a:17:36:64:c3:3c:02:df:65:46:0e:8b:c3:b3:1f:
1c:b5:fd:44:02:3f:1f:02:0b:e9:03:1c:f0:0a:8f:e0:b6:65:
8c:07:a0:c7:bc:af:ae:53:d1:db:2a:01:da:9c:61:77:03:40:
19:eb:39:5d:d2:ab:33:dc:6a:9a:37:ee:cc:26:a5:50:9a:df:
a8:28:86:81:52:f8:d0:07:67:45:92:7b:2a:8b:56:d5:d1:a3:
f3:da:3e:c6:e8:ad:af:87:d6:28:7c:31:f5:51:16:eb:46:02:
a2:d2:a8:93:36:17:c7:c5:e6:be:de:63:8b:df:bd:7b:5e:c2:
99:73:ab:52:bb:9a:5a:d0:cb:42:2a:3e:2b:e7:99:2d:98:4d:
f8:cd:81:ac:7c:08:59:cf:db:6b:e9:e0:cf:88:e5:88:4a:18:
23:e3:b7:8d:be:6a:a6:03:7e:c6:5a:a3:35:f9:1f:94:90:d4:
76:ec:d8:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:29:38 2026 by rpki-client