Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1jIkApfFBi7HgsKFXvxIrNphT2M.roa
File: 1jIkApfFBi7HgsKFXvxIrNphT2M.roa (raw, json)
Hash identifier: cg+DxPsXKaB2ve9Xewh7aSL8aBq/ATEVtYswr73eq2w=
Subject key identifier: D6:32:24:02:97:C5:06:2E:C7:82:C2:85:5E:FC:48:AC:DA:61:4F:63
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01A09A0BF9706837C592BD671BFB103C2D4E
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1jIkApfFBi7HgsKFXvxIrNphT2M.roa
Signing time: Sun 13 Sep 2026 09:14:30 +0000
ROA not before: Sun 13 Sep 2026 09:14:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197071
IP address blocks: 2a0e:97c0:3e4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Sep 2026 12:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9a:0b:f9:70:68:37:c5:92:bd:67:1b:fb:10:3c:2d:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Sep 13 09:14:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d632240297c5062ec782c2855efc48acda614f63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f9:59:ad:f6:e9:b7:34:f0:00:c2:57:3d:1f:
02:b4:eb:4e:06:57:40:63:7e:48:35:ab:37:97:52:
2a:66:c8:54:a3:64:55:fb:58:df:6a:d9:f7:14:3a:
23:6d:a9:10:13:d0:b5:1e:fb:b1:b3:a6:31:41:d6:
5b:6e:cc:d6:5d:cb:ab:c4:e4:ee:1b:22:f9:53:38:
00:d1:c2:d5:a7:df:15:d3:29:a8:8d:d8:c3:d1:0f:
ed:e2:31:24:8a:8e:c0:c5:1f:c6:37:e2:93:78:2a:
fe:66:09:8e:29:15:b2:66:c2:93:33:dd:7c:90:db:
dd:ed:3f:db:83:1d:2e:0f:be:76:c8:4c:97:fb:e0:
3f:0c:58:20:01:cb:85:0a:1f:83:2b:52:d9:4b:78:
fa:4b:51:6e:f6:1b:98:e5:0d:b6:7a:f9:9d:2e:b1:
e6:f6:2b:59:0e:c1:e8:a2:47:d5:78:dd:44:25:bf:
ea:3a:83:f5:c6:8a:63:81:a7:05:fb:02:86:80:1f:
8a:35:23:10:ef:d9:48:af:b9:9c:84:91:d0:3a:88:
d9:e6:59:be:2e:60:11:e7:fd:c4:f1:36:ce:17:53:
2f:18:df:f8:95:ec:a5:4b:6d:fe:b1:81:cd:a9:75:
5b:91:13:54:1e:73:45:f6:54:8f:f3:51:6d:da:96:
41:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:32:24:02:97:C5:06:2E:C7:82:C2:85:5E:FC:48:AC:DA:61:4F:63
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1jIkApfFBi7HgsKFXvxIrNphT2M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:3e4::/48
Signature Algorithm: sha256WithRSAEncryption
c6:8d:bf:6d:a8:59:cc:80:d7:cc:31:e8:f1:e0:c2:40:2f:db:
f0:98:14:eb:2f:78:3c:f8:b8:28:81:4c:0f:62:96:e7:35:ad:
1b:e0:ec:2a:fa:d0:a9:07:9f:ad:9c:75:a9:3f:6a:70:a8:aa:
3b:34:16:4c:db:33:e5:a2:2a:30:52:51:19:fd:55:37:8c:26:
be:47:08:dd:cb:3e:a8:21:e4:47:fc:e7:46:65:16:1f:41:2b:
4c:3f:3a:49:47:b1:84:a8:e7:6a:82:38:4a:f5:e4:48:f1:a0:
89:8a:84:47:21:a6:a0:98:ab:5d:c3:05:5e:67:1e:13:2d:d3:
8d:4a:b7:90:7e:94:69:a5:51:ef:e1:9c:28:c3:e5:78:1b:66:
2e:c9:88:0b:d0:b5:2b:67:77:75:3f:23:de:44:eb:c1:74:f2:
91:a9:4f:bc:45:62:d9:3d:9d:ab:1d:ba:46:b5:31:87:fd:59:
65:3d:3d:72:a1:79:ce:9a:f3:66:db:b6:f6:07:e2:a0:da:96:
56:e3:c8:96:0f:15:88:48:5a:f8:ed:ed:ef:1c:7c:3b:20:9e:
61:38:4c:b1:d1:99:6c:2d:02:c6:e2:d6:b1:29:b1:47:5f:60:
d1:45:65:f6:23:3f:7f:76:30:01:34:2a:d7:1b:57:96:2e:f1:
70:8e:b7:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 20:28:58 2026 by rpki-client