Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1-gqnhWzPh0rDxVUPuiaO9MOZNMw.roa
File: 1-gqnhWzPh0rDxVUPuiaO9MOZNMw.roa (raw, json)
Hash identifier: 1nH5yDsufbxUSaNvatF6Uwpkq6YOcOYoGgLxV7XMgY8=
Subject key identifier: FA:0A:A7:85:6C:CF:87:4A:C3:C5:55:0F:BA:26:8E:F4:C3:99:34:CC
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01A09EDB40EB6443FB3E43ADE2554F70B44E
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1-gqnhWzPh0rDxVUPuiaO9MOZNMw.roa
Signing time: Mon 14 Sep 2026 07:39:24 +0000
ROA not before: Mon 14 Sep 2026 07:39:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215828
IP address blocks: 2a0e:b107:27d0::/46 maxlen: 48
2a0e:b107:27f4::/46 maxlen: 48
2a0e:b107:27f8::/46 maxlen: 48
2a0e:b107:27fc::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Sep 2026 20:52:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9e:db:40:eb:64:43:fb:3e:43:ad:e2:55:4f:70:b4:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Sep 14 07:39:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fa0aa7856ccf874ac3c5550fba268ef4c39934cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b1:31:57:fd:7f:08:f0:21:4a:6c:e2:54:4d:
2d:c2:f4:53:c6:95:4d:eb:7a:47:31:bb:85:35:8b:
67:2d:5a:84:a5:74:cc:9b:0d:7c:e9:f2:47:a8:c4:
90:0f:8a:3f:14:67:07:d9:de:03:e3:f6:ad:de:88:
9c:ed:bb:fd:39:4b:ff:69:ef:38:2f:56:32:e7:8d:
71:87:06:d0:c9:1b:70:2c:6e:ac:30:c9:b3:02:5d:
83:e9:60:09:7f:11:da:0e:b1:c9:26:14:fb:f1:6d:
0d:2b:82:1d:31:b1:f5:02:f1:88:9c:de:7b:dd:01:
71:32:a4:cd:65:26:21:e0:1d:fe:d6:94:59:28:05:
1d:f4:07:76:27:ef:5f:f9:7c:fa:1c:6f:00:97:24:
5d:99:38:b0:c3:dc:3b:2e:37:a6:c8:9d:cb:59:e3:
66:21:de:56:2b:52:99:1f:c9:84:40:7d:33:2f:4a:
4b:97:be:ce:d1:57:c9:11:65:6a:e5:5d:88:64:9b:
42:b4:43:ef:6a:ea:c0:b7:07:32:ff:4b:6c:fe:2d:
3a:a0:10:d7:5b:b4:07:b2:1c:e2:93:20:7f:8f:93:
99:58:4c:fa:0e:1f:bf:ad:89:6f:bb:85:7e:a7:2d:
08:36:10:c8:a2:d2:a5:ff:f6:26:4f:fa:ab:37:72:
56:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:0A:A7:85:6C:CF:87:4A:C3:C5:55:0F:BA:26:8E:F4:C3:99:34:CC
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1-gqnhWzPh0rDxVUPuiaO9MOZNMw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:27d0::/46
2a0e:b107:27f4::-2a0e:b107:27ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
2c:62:51:53:f0:7c:6c:8e:04:84:99:e8:8b:4b:f4:fb:3b:be:
27:40:c9:33:85:f0:76:ea:c0:15:8a:0a:50:99:3a:dc:d2:c8:
b7:84:b5:12:73:dc:1f:51:97:2c:b4:cf:ae:43:a8:f9:23:a0:
f6:6c:c2:79:fe:e9:33:f4:45:87:1a:6b:f0:47:3e:52:c5:55:
6a:7e:f2:e2:15:6f:05:7b:ee:68:4a:47:ca:4c:4c:26:45:ee:
7d:6b:50:ba:c4:70:60:b4:85:2d:c9:2a:3e:1b:e2:33:a7:07:
6e:8c:2c:9f:1d:94:34:36:39:51:b2:34:60:7c:10:4c:6c:bc:
65:14:1d:ea:d8:26:73:3f:fe:d1:49:cb:78:82:44:95:97:05:
67:87:56:36:1d:b8:fb:fc:a4:38:01:4d:ac:58:53:aa:cd:be:
77:b0:ae:92:8e:d2:25:c5:60:91:4b:e7:bd:f6:c6:15:eb:a4:
90:0d:e6:30:b7:ef:9c:56:48:99:ec:56:f8:c3:63:cf:84:4e:
7c:71:01:38:2d:0f:eb:0f:af:d7:e0:03:d1:b7:41:5b:75:3e:
a6:ea:29:55:94:e0:b4:85:a8:a0:13:8e:e3:e8:94:4b:b0:85:
3f:62:2b:c7:37:28:db:d1:73:4a:b2:a1:3a:f9:ec:f2:97:cb:
fc:5b:c6:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 01:58:29 2026 by rpki-client