Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1-HxVa9h9wxMABxrgnAfy_pVwLPQ.roa
File: 1-HxVa9h9wxMABxrgnAfy_pVwLPQ.roa (raw, json)
Hash identifier: tnzQowxag4auP6i1YKttA+pE1kG1jaIS7LtQEmM5pEk=
Subject key identifier: F8:7C:55:6B:D8:7D:C3:13:00:07:1A:E0:9C:07:F2:FE:95:70:2C:F4
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01A0BF4BC0FFE3D74676D079ADA28AC9F55A
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1-HxVa9h9wxMABxrgnAfy_pVwLPQ.roa
Signing time: Sun 20 Sep 2026 14:50:07 +0000
ROA not before: Sun 20 Sep 2026 14:50:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214344
IP address blocks: 2a10:ccc6:6661::/48 maxlen: 48
2a10:ccc6:6662::/48 maxlen: 48
2a10:ccc6:6663::/48 maxlen: 48
2a10:ccc6:666e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 07:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bf:4b:c0:ff:e3:d7:46:76:d0:79:ad:a2:8a:c9:f5:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Sep 20 14:50:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f87c556bd87dc31300071ae09c07f2fe95702cf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:bb:94:71:25:22:f5:d8:ab:2c:aa:3b:32:21:
e9:80:3b:23:42:ee:bd:8d:65:50:6c:0d:66:c6:b5:
bf:b4:85:22:38:da:66:96:ad:a9:86:b1:4d:63:12:
73:aa:48:96:7d:f4:7d:35:39:a3:a8:d8:d0:20:fc:
8c:83:39:40:25:4b:9f:68:f0:20:cd:3e:66:9a:12:
4f:d1:fc:4a:29:da:4b:f8:0b:c5:cf:94:09:99:f2:
98:1f:30:37:03:73:b4:e9:e8:aa:62:86:25:89:04:
41:f2:a8:10:19:a5:1f:2d:f8:e8:16:a8:08:1f:ca:
2a:ae:39:fe:cc:15:45:88:1f:9f:18:5d:20:a2:c4:
6d:c9:ed:91:53:fa:0a:eb:59:8a:70:94:82:ac:9a:
aa:c8:7f:ce:ca:4d:8b:20:a7:52:77:2c:e5:6a:b1:
13:57:ab:3b:94:d2:1d:d7:dc:4d:16:6e:9f:e0:e3:
eb:04:54:31:60:1e:2e:f4:1b:22:a0:a4:dc:8b:17:
b7:20:60:42:a7:74:0c:ec:8f:ac:6b:c6:50:48:97:
e8:ba:1d:16:61:c6:e6:6d:6d:70:ea:da:cc:cb:4d:
90:75:ce:82:20:12:4c:d2:9b:2f:ce:ac:fa:fc:31:
e2:81:d6:18:54:7b:a6:a9:68:e4:6c:d9:e9:20:73:
91:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:7C:55:6B:D8:7D:C3:13:00:07:1A:E0:9C:07:F2:FE:95:70:2C:F4
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1-HxVa9h9wxMABxrgnAfy_pVwLPQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:ccc6:6661::-2a10:ccc6:6663:ffff:ffff:ffff:ffff:ffff
2a10:ccc6:666e::/48
Signature Algorithm: sha256WithRSAEncryption
44:03:12:1f:32:f5:3b:60:89:11:09:ba:7d:7f:d3:bb:77:fa:
c2:35:db:17:45:35:7a:f1:9b:9a:09:de:25:22:0a:b5:7c:e6:
7e:02:10:da:b5:ae:43:e0:90:0d:87:8a:79:cd:47:14:4e:83:
4c:ac:dd:1e:08:37:14:e2:11:57:d7:f2:1d:d9:3c:ff:35:7d:
2a:05:e1:60:f4:0e:02:43:a5:fc:75:59:4a:db:32:31:c0:35:
ba:6a:28:53:b7:7b:1b:2a:85:c7:6e:b3:dc:d7:6e:3d:74:b6:
2f:ec:7f:91:30:2a:0e:75:14:22:97:ac:0a:f4:59:d8:3f:e0:
ee:3f:a4:3f:38:cc:ea:2b:f8:2a:09:47:37:37:aa:06:a1:18:
6d:46:02:ef:52:a7:48:06:55:c4:24:85:df:67:a7:0b:52:cd:
28:82:a6:86:5e:f7:84:66:cf:32:20:b6:b6:14:79:c3:42:35:
b0:18:85:16:85:ca:41:2f:6b:b5:6c:23:0d:9a:84:9f:33:a2:
bf:1b:b9:97:cc:9a:6e:56:1e:58:ac:8d:b6:bf:a0:70:94:ca:
e2:f4:ad:ce:bd:0d:47:62:f1:a2:8b:c2:d9:13:04:a7:71:f6:
f7:29:79:65:3a:1a:c5:fa:bd:97:6a:a4:90:50:ab:6a:6a:32:
43:3b:c4:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 12:58:23 2026 by rpki-client