Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/0W7MOhim9ZoraZpiXW1Kif7efLs.roa
File: 0W7MOhim9ZoraZpiXW1Kif7efLs.roa (raw, json)
Hash identifier: MmDmzccEy+i/9bKg2IVWriLpI8fAC8kMn42UxhBDpug=
Subject key identifier: D1:6E:CC:3A:18:A6:F5:9A:2B:69:9A:62:5D:6D:4A:89:FE:DE:7C:BB
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01A0542C253D9A43902C858E9C452FEB61EA
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/0W7MOhim9ZoraZpiXW1Kif7efLs.roa
Signing time: Sun 30 Aug 2026 19:36:14 +0000
ROA not before: Sun 30 Aug 2026 19:36:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218843
IP address blocks: 2a06:de04:1600::/44 maxlen: 48
2a0e:97c6:1600::/44 maxlen: 48
2a10:ccc4:1600::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 31 Aug 2026 18:50:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:54:2c:25:3d:9a:43:90:2c:85:8e:9c:45:2f:eb:61:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Aug 30 19:36:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d16ecc3a18a6f59a2b699a625d6d4a89fede7cbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f5:a5:40:60:aa:53:2b:44:f9:72:29:8d:5a:
35:4f:7e:1f:3f:eb:65:82:a9:f3:13:6c:c6:98:64:
b4:c3:0d:df:2a:ab:d3:d9:84:28:6c:76:27:92:9c:
59:9b:e6:47:23:f0:65:75:43:e9:1b:55:b5:60:0e:
05:28:49:c0:87:29:7f:52:17:3a:be:73:fd:93:9c:
3b:c8:f6:89:aa:eb:23:d0:ff:12:46:56:37:e4:d1:
6b:f0:0b:0e:01:4e:a7:63:2b:5d:0e:de:d2:69:75:
c1:83:d0:9e:92:7b:24:31:06:ad:3e:67:31:8f:ad:
08:8d:b3:67:23:2d:09:7b:a0:25:42:d0:81:a2:ee:
4f:8f:d7:9f:a0:57:93:63:28:0f:42:cb:2f:b3:86:
b8:14:db:1d:72:87:21:5f:93:b1:aa:d2:8e:93:4e:
62:95:7f:94:a4:a4:b3:67:5a:9a:cb:b9:60:bf:22:
7b:18:77:ca:cc:51:dd:48:ef:99:46:f4:0c:97:9e:
0a:03:ce:ba:66:76:33:9d:fe:e7:44:9c:84:8b:13:
89:5c:33:42:08:69:ae:34:56:4b:d8:69:6f:bd:8d:
3f:e4:ee:11:22:dd:f7:d0:6d:05:03:e0:20:b6:41:
27:7c:10:0f:b5:ed:1c:f4:4d:d3:09:d1:54:d4:f0:
49:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:6E:CC:3A:18:A6:F5:9A:2B:69:9A:62:5D:6D:4A:89:FE:DE:7C:BB
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/0W7MOhim9ZoraZpiXW1Kif7efLs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:de04:1600::/44
2a0e:97c6:1600::/44
2a10:ccc4:1600::/44
Signature Algorithm: sha256WithRSAEncryption
8d:56:f3:13:86:96:9c:0f:f0:90:92:69:8f:1f:6c:47:06:b3:
ac:50:76:5b:63:97:be:f0:32:32:58:30:d7:33:9b:85:bb:79:
15:53:dd:30:2f:76:57:7c:ae:36:da:b8:f2:ac:ea:20:08:e0:
09:af:78:f4:dd:81:84:73:10:ef:3c:fa:b6:bc:bb:cb:3f:92:
cb:1d:e5:be:5b:17:f5:2d:88:11:38:00:40:11:78:00:46:24:
76:91:f2:7b:54:9f:f4:6f:26:a2:2f:8b:08:20:8e:04:72:03:
86:94:d8:9b:46:fe:f4:37:75:25:ac:f5:69:4f:62:27:51:52:
e7:2c:83:6c:ad:d6:01:40:03:5b:6d:67:bd:26:76:b6:28:12:
fb:68:22:44:85:8f:89:01:3f:42:64:7a:b9:ef:3f:67:95:4b:
28:24:2b:7f:e8:29:1a:3a:df:93:96:00:a3:46:d4:1a:2e:b4:
d3:e6:02:de:43:d1:80:2d:43:d4:03:a4:08:79:9c:40:a5:77:
d4:6e:3f:47:03:28:70:3e:49:f3:de:20:bc:01:7f:cb:d6:17:
77:5d:19:2b:be:5e:58:02:f8:b5:05:ec:17:22:dd:a5:35:d9:
e8:19:2b:65:65:4b:83:54:1d:32:fb:c7:f0:c9:5b:b3:e1:f1:
fe:d0:e8:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 02:49:02 2026 by rpki-client