Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/00DiBQ2JVTK7WVQDA-e4oyBN7JY.roa
File: 00DiBQ2JVTK7WVQDA-e4oyBN7JY.roa (raw, json)
Hash identifier: DQ37eNQF0SBsKHTc1fi7yU9d4Kf2VHLSC5KLacJi+1o=
Subject key identifier: D3:40:E2:05:0D:89:55:32:BB:59:54:03:03:E7:B8:A3:20:4D:EC:96
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019EF629D62250238CE5DB971A2007A88EC0
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/00DiBQ2JVTK7WVQDA-e4oyBN7JY.roa
Signing time: Tue 23 Jun 2026 20:26:37 +0000
ROA not before: Tue 23 Jun 2026 20:26:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197371
IP address blocks: 2a0e:97c0:c90::/44 maxlen: 48
2a0e:97c0:c98::/48 maxlen: 48
2a0e:97c0:c99::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 24 Jun 2026 20:26:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f6:29:d6:22:50:23:8c:e5:db:97:1a:20:07:a8:8e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jun 23 20:26:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d340e2050d895532bb59540303e7b8a3204dec96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:51:06:3f:38:92:6a:6c:d0:01:03:cb:d3:7f:
b0:f2:95:87:85:cf:2c:5c:8d:78:22:4c:35:f3:2c:
b1:d8:f1:8c:98:f1:b1:b3:33:f7:26:31:9a:2e:a3:
89:01:61:b3:21:31:f5:dd:a5:92:f6:84:8c:31:d3:
84:2b:b4:6a:25:bc:2f:37:87:c0:51:41:85:74:2d:
7c:b8:50:e0:6a:dd:95:d8:d2:fd:0f:3a:c7:54:61:
20:40:6a:3b:39:6c:be:3a:34:7a:21:ff:13:23:32:
ca:ae:6e:4b:9f:0b:68:d0:79:e3:da:01:04:4f:ef:
65:b6:45:47:1b:c3:35:ba:9e:eb:57:3a:2c:ca:ba:
c5:36:c8:48:07:a2:d5:12:6b:4f:95:b0:4d:88:59:
3b:68:7a:21:59:94:c2:da:99:87:d0:4c:18:0f:31:
c2:91:53:c6:1e:b8:8a:9a:17:b3:3c:4b:3d:09:95:
97:47:ca:c6:e1:5f:19:5f:2f:e9:35:99:1a:d9:04:
41:eb:de:7e:0c:00:61:c6:08:77:0b:3d:9d:ad:32:
96:cb:2a:c5:60:2a:e9:19:9d:f8:b3:6a:d1:5f:52:
ff:81:c9:a0:38:5e:f3:4d:d3:50:06:11:50:28:45:
8c:3e:a3:c5:4d:15:a9:68:82:6c:56:1f:0b:fd:79:
f2:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:40:E2:05:0D:89:55:32:BB:59:54:03:03:E7:B8:A3:20:4D:EC:96
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/00DiBQ2JVTK7WVQDA-e4oyBN7JY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:c90::/44
Signature Algorithm: sha256WithRSAEncryption
5b:0a:c9:87:3d:9e:26:0e:b8:a4:54:68:52:3c:c9:b5:70:f9:
63:d5:5b:e7:cc:09:9d:4c:9e:87:f6:f9:1e:b3:f0:c0:23:21:
99:4a:91:03:95:a2:1f:ff:fe:90:48:f5:6d:7e:be:d1:30:90:
19:42:5e:38:68:12:21:73:23:e0:d4:c1:48:7a:df:6e:20:a6:
f5:dc:7c:1c:b4:a1:48:a9:5a:8f:8b:4d:bb:40:45:5d:98:16:
77:db:ea:d8:0f:df:df:74:c6:2d:c9:c6:2f:e5:07:2c:d4:4a:
89:c8:6b:48:b2:6e:67:f4:7b:27:ff:8e:ec:be:f5:0a:30:30:
5d:ad:e1:92:ab:eb:9d:9c:b7:86:fe:3e:83:49:6e:a6:5a:8b:
54:72:34:c2:8f:d6:9d:9a:ce:76:15:4c:f2:5e:d7:ca:4f:cf:
7d:37:86:78:90:c0:ee:cd:59:b7:04:1c:4f:e5:d8:5b:03:a3:
65:89:2c:dd:40:b7:3c:c5:0b:b6:d6:f1:cf:53:3d:e2:5b:f4:
97:5d:c6:a5:ed:e9:3d:5b:78:e4:d4:2c:56:fb:5a:66:99:b8:
0b:da:a0:0f:df:55:25:0b:34:a8:95:69:cf:ad:11:43:1c:84:
07:6f:f2:78:f9:ca:ec:56:ed:ac:4b:e0:35:4b:e9:74:b2:ac:
74:81:7a:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 04:27:40 2026 by rpki-client