Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/0H1X1NJcLEhEqHhvIQv628LhVsg.roa
File: 0H1X1NJcLEhEqHhvIQv628LhVsg.roa (raw, json)
Hash identifier: ec70JIomxM1vh5B7gLM2rpeEiuIvf6VnMrrGkpQZRhg=
Subject key identifier: D0:7D:57:D4:D2:5C:2C:48:44:A8:78:6F:21:0B:FA:DB:C2:E1:56:C8
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01A01074EB2DA7CACC5F4C35722EF8A48778
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/0H1X1NJcLEhEqHhvIQv628LhVsg.roa
Signing time: Mon 17 Aug 2026 16:01:32 +0000
ROA not before: Mon 17 Aug 2026 16:01:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200950
IP address blocks: 2a10:ccc0:100::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Aug 2026 14:17:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:10:74:eb:2d:a7:ca:cc:5f:4c:35:72:2e:f8:a4:87:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Aug 17 16:01:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d07d57d4d25c2c4844a8786f210bfadbc2e156c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4d:dd:8b:2f:de:f3:c8:6a:32:21:88:93:5e:
af:04:8f:b7:c7:25:9d:37:2f:91:96:97:35:d5:2d:
a0:72:17:26:7b:0e:7c:44:b4:80:ea:f0:a7:37:fd:
f8:b6:6a:cb:30:59:2a:1e:45:fc:09:52:8d:c1:34:
3e:58:b2:55:2c:e2:10:12:34:eb:25:b2:3c:d6:4f:
5b:fa:7e:9d:3b:d4:9d:cd:71:c7:ab:59:a6:5d:b1:
3d:a0:58:c9:45:c2:cf:3f:73:24:c3:ac:47:fc:fd:
87:88:2a:9c:c9:2d:40:ba:a0:f8:2b:4e:cd:81:db:
89:aa:24:e3:a4:d2:12:c7:0a:16:06:8f:21:64:d0:
43:f1:05:0b:5b:1b:60:79:a9:e2:ac:6e:ca:cf:6b:
5c:48:93:8d:2c:9b:a0:be:fc:4f:df:9b:ab:47:7f:
a7:a1:c9:df:81:cc:74:08:1e:fe:4c:8d:f4:47:f6:
4d:c9:f7:72:8d:32:90:bb:5b:09:9b:a4:c3:ac:c3:
fa:d1:4c:df:90:8e:2d:36:26:8f:a2:1d:ae:a1:01:
8d:85:47:6d:a5:dd:60:d3:b5:c7:e4:58:0c:fd:7d:
0e:34:d7:51:d9:9f:3b:91:c2:33:80:ee:d6:ec:97:
5d:1a:7e:83:7b:b1:bf:fe:f6:b6:b8:84:3e:7a:73:
ad:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:7D:57:D4:D2:5C:2C:48:44:A8:78:6F:21:0B:FA:DB:C2:E1:56:C8
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/0H1X1NJcLEhEqHhvIQv628LhVsg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:ccc0:100::/44
Signature Algorithm: sha256WithRSAEncryption
72:3e:42:f8:3f:85:5e:84:01:f2:38:34:d3:07:3b:64:ee:55:
05:a1:3f:d2:83:dc:f1:6b:07:0b:15:a0:b1:21:67:55:b3:10:
5c:0e:ae:2a:0b:e9:cf:c6:0c:f2:0e:b4:b5:32:80:a8:56:a4:
c9:23:77:ff:09:91:61:0a:26:1d:dd:c4:4e:9b:55:29:89:59:
43:bd:2d:b8:d3:a3:a0:a3:46:1a:aa:36:37:16:fc:d3:a6:4b:
70:0d:ad:a7:9b:8a:7d:fb:46:76:14:3e:d0:5e:0f:76:9a:5b:
af:f5:15:74:20:d8:fe:86:0d:6c:c4:d0:3a:8e:c9:35:57:d7:
dd:6b:42:fd:40:b9:0b:38:5d:1b:04:26:ea:94:91:33:10:45:
00:8e:89:77:e4:f0:c4:1c:38:81:4a:d0:67:34:f5:05:75:47:
b8:71:19:5f:84:cb:eb:05:91:84:b2:45:0a:ce:ab:69:69:b7:
3e:bc:86:ce:f5:e7:6c:9e:43:00:93:90:02:eb:5a:f2:f6:33:
ef:e6:03:de:e0:bb:d7:95:77:61:f1:49:f2:88:f0:91:92:2d:
e2:c2:81:94:da:5d:63:62:2f:ac:a7:0b:3b:2f:d5:48:a6:33:
99:8a:d3:6a:a2:74:69:51:c7:16:d0:71:2b:68:52:25:a7:26:
41:a1:4d:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 17 19:31:56 2026 by rpki-client