Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/1DH2imTvr6nkc07Ghb0z88l-PY4.roa
File: 1DH2imTvr6nkc07Ghb0z88l-PY4.roa (raw, json)
Hash identifier: fBR07YNp1FxUxcmuGcL7ywMcN+M4e3UJi3MRoMBb/vg=
Subject key identifier: D4:31:F6:8A:64:EF:AF:A9:E4:73:4E:C6:85:BD:33:F3:C9:7E:3D:8E
Certificate issuer: /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Certificate serial: 019B7758E9D6C0D10DC07DCD26540948326A
Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/1DH2imTvr6nkc07Ghb0z88l-PY4.roa
Signing time: Thu 01 Jan 2026 02:17:54 +0000
ROA not before: Thu 01 Jan 2026 02:17:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62874
IP address blocks: 2a00:f826:11::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.mft
rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:58:e9:d6:c0:d1:0d:c0:7d:cd:26:54:09:48:32:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Validity
Not Before: Jan 1 02:17:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d431f68a64efafa9e4734ec685bd33f3c97e3d8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:56:1b:aa:67:e6:a9:37:c2:3a:5f:b8:9d:41:
57:77:2c:63:40:12:0f:68:2c:73:f7:d5:8f:26:80:
af:94:e5:ab:d8:a9:f6:8a:ae:3c:cb:61:ea:f1:50:
e8:e1:06:02:58:2c:92:81:cf:e3:e8:f5:9e:5f:ed:
d0:dd:3c:79:10:59:d9:8d:ba:e2:65:64:4c:8c:b4:
ef:eb:a5:74:bd:1c:ea:b1:0a:a5:ae:b0:06:c8:25:
8a:9a:3e:3e:56:dc:c9:48:b3:e5:7d:c1:1c:b6:46:
26:39:1f:94:67:0e:6b:56:19:ea:cc:41:2c:8a:e3:
80:9f:36:d5:ea:4f:f0:7f:2a:37:2f:6f:3c:64:81:
f7:04:15:55:49:d2:49:03:95:0b:2b:a4:7f:3e:4a:
15:c3:c0:4b:2f:54:c1:cc:22:51:56:91:01:f4:d1:
af:8e:19:6b:d8:e0:40:c8:0a:95:d3:4f:07:d5:8d:
ca:74:93:85:95:74:40:b4:a9:5f:f2:fb:e7:df:da:
20:9d:54:36:e8:0c:60:6c:17:50:7f:17:98:94:bc:
19:2f:e8:b9:ac:91:2b:c8:bd:20:71:15:c6:90:08:
3f:1c:4f:6a:dd:75:63:34:a2:dc:58:ea:70:cc:b1:
c0:4f:73:a7:96:da:de:f0:34:01:78:54:cd:46:53:
1d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:31:F6:8A:64:EF:AF:A9:E4:73:4E:C6:85:BD:33:F3:C9:7E:3D:8E
X509v3 Authority Key Identifier:
keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/1DH2imTvr6nkc07Ghb0z88l-PY4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:f826:11::/48
Signature Algorithm: sha256WithRSAEncryption
47:da:dc:0e:ea:09:c6:77:54:3e:4a:2c:fa:26:a9:dc:72:60:
29:1c:16:66:44:83:cd:38:c2:68:1d:bf:db:20:57:a7:4c:96:
7a:35:6c:2e:56:0f:85:86:ef:bc:78:58:75:a0:70:8c:15:1f:
aa:dd:ad:8a:f5:9f:c7:0a:fa:3a:8f:21:c7:7e:eb:19:48:5a:
69:15:db:6c:57:b1:2b:2c:e9:22:f6:8a:d6:a0:29:0c:e4:c5:
5b:be:e1:b5:68:5d:65:3e:19:a1:99:e9:47:c2:14:89:2d:3f:
4b:bb:18:b0:10:a7:0e:d1:b7:28:bb:eb:41:26:f3:71:50:b9:
86:bd:12:9b:99:53:d8:81:fa:d6:8c:5e:cf:f6:91:2f:a3:e6:
ac:81:d8:d1:d7:f4:94:a7:9d:4f:e8:0d:73:93:72:18:54:f1:
a3:15:ec:0c:48:48:3c:f1:0a:a0:8e:98:42:2a:31:90:87:b3:
35:36:89:32:7a:4c:ab:d9:6b:4e:0f:38:66:07:0a:94:df:49:
19:5c:1c:73:bb:d5:75:0d:b9:1b:2c:3b:49:b5:7c:c3:51:33:
05:e2:9d:44:85:10:03:b8:14:59:f0:5e:1c:f5:12:3f:25:2d:
79:d4:5d:c0:d3:d5:66:00:dd:c3:d6:6a:38:f1:8a:dd:38:ba:
98:6e:7b:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:45:45 2026 by rpki-client