Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/1Z43FOrRzdkUGpYEud2ip6Pwv5E.roa
File: 1Z43FOrRzdkUGpYEud2ip6Pwv5E.roa (raw, json)
Hash identifier: L08oGxslp8T2hAWOpGYApMb6lBjo0S/ahWmEw9Zup7M=
Subject key identifier: D5:9E:37:14:EA:D1:CD:D9:14:1A:96:04:B9:DD:A2:A7:A3:F0:BF:91
Certificate issuer: /CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f
Certificate serial: 019C476D411326DE8164F884746A5891C0C4
Authority key identifier: 7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/1Z43FOrRzdkUGpYEud2ip6Pwv5E.roa
Signing time: Tue 10 Feb 2026 12:01:08 +0000
ROA not before: Tue 10 Feb 2026 12:01:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213861
IP address blocks: 2a11:2c40::/29 maxlen: 29
2a12:2cc6::/32 maxlen: 32
2a12:3bc0::/32 maxlen: 32
2a12:3bc1::/32 maxlen: 32
2a14:9703::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.mft
rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:47:6d:41:13:26:de:81:64:f8:84:74:6a:58:91:c0:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f
Validity
Not Before: Feb 10 12:01:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d59e3714ead1cdd9141a9604b9dda2a7a3f0bf91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:1c:e8:3d:25:a2:53:31:9f:01:3c:42:6a:2e:
f4:0b:3b:ee:49:ef:80:9f:e9:9d:52:b6:5d:74:ca:
01:7b:5c:f6:9f:58:0f:29:ae:0f:51:de:24:1c:0d:
8d:16:8e:a9:6b:d5:6b:32:a4:3f:66:c3:01:c1:86:
c0:51:df:12:5c:76:f1:4e:35:07:2d:8e:7a:12:9d:
0d:14:19:bd:41:4c:a2:95:eb:58:26:91:04:44:61:
06:44:7a:67:ac:0d:3c:23:f1:42:02:79:12:1d:b8:
0d:4e:03:9d:63:45:af:6e:74:a1:ae:25:f9:9e:a0:
d1:5b:ff:43:21:d2:ea:52:9d:17:63:90:17:ff:98:
cd:cd:52:40:ae:5e:dd:03:3b:fd:de:47:2e:6d:de:
86:43:7a:a8:86:ff:5c:f6:90:b6:9b:3b:c3:36:d6:
6e:c8:aa:b5:0d:64:62:3a:a2:e4:5d:af:ea:63:d9:
8f:93:f6:96:a2:71:f3:58:ff:5a:f1:b5:e0:60:ab:
6f:99:ab:42:68:c4:7f:37:e9:33:2b:9b:9f:05:cf:
a2:52:40:cd:d3:aa:62:71:0a:9b:cf:05:f7:f8:71:
d0:68:3d:fb:6d:f3:ba:f6:01:61:ad:cb:37:5f:1e:
eb:a3:7d:a4:4a:27:50:a8:29:23:8e:f2:16:35:b0:
9d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:9E:37:14:EA:D1:CD:D9:14:1A:96:04:B9:DD:A2:A7:A3:F0:BF:91
X509v3 Authority Key Identifier:
keyid:7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/1Z43FOrRzdkUGpYEud2ip6Pwv5E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:2c40::/29
2a12:2cc6::/32
2a12:3bc0::/31
2a14:9703::/32
Signature Algorithm: sha256WithRSAEncryption
72:a3:bd:3a:18:eb:de:7b:06:4c:4f:08:03:10:a1:cb:db:ed:
3b:86:6b:03:6c:af:d8:b5:44:7d:86:bf:d2:a4:b9:a0:8f:cd:
4b:ce:ad:d9:47:e6:95:b1:c2:8f:b7:fc:69:c6:e1:62:70:c7:
df:8f:c2:3f:2e:0f:42:30:dd:0e:90:bb:49:d9:b8:98:6e:fc:
ba:86:f8:a1:3d:6b:ed:2c:a5:60:b9:47:8f:d1:d5:31:08:ec:
e0:8d:bd:70:31:0d:1d:6e:fa:58:0b:f8:33:35:98:81:f2:23:
26:f0:cb:fc:3b:46:1d:a5:c2:06:c5:da:04:ec:9a:0a:1f:af:
d6:34:7b:1e:97:03:76:84:42:4f:ca:8d:ec:1d:b8:08:fe:d3:
4b:a7:77:8c:50:c9:f7:a4:07:ed:32:9e:51:07:cb:0f:41:e5:
75:dd:ca:43:16:50:2a:f6:74:84:04:ba:da:17:46:ab:ba:5d:
b9:4a:d6:ef:b0:41:88:65:d8:fa:b3:a8:3f:36:31:18:86:de:
ee:72:5b:d5:a3:db:dc:c0:9b:40:8e:b9:e1:2f:83:d6:64:c1:
42:c6:ff:e3:61:e5:15:59:2e:49:bd:be:97:02:88:4f:8c:54:
62:f4:1a:0b:25:2d:36:ea:8c:10:80:bc:b0:14:95:fb:3a:55:
d2:b7:d8:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:58:51 2026 by rpki-client