Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1pthVKC6MFQXm4lKk9bUC2g10jI.roa
File: 1pthVKC6MFQXm4lKk9bUC2g10jI.roa (raw, json)
Hash identifier: OSeKzbJk9q9mvBAzYdVBXTNDqgiXPMABKnLX7ZyZxlo=
Subject key identifier: D6:9B:61:54:A0:BA:30:54:17:9B:89:4A:93:D6:D4:0B:68:35:D2:32
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01A0E3AB64E70869D28287EA143EFB36B015
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1pthVKC6MFQXm4lKk9bUC2g10jI.roa
Signing time: Sun 27 Sep 2026 16:20:55 +0000
ROA not before: Sun 27 Sep 2026 16:20:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197469
IP address blocks: 2a0e:97c0:b50::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 05:50:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e3:ab:64:e7:08:69:d2:82:87:ea:14:3e:fb:36:b0:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Sep 27 16:20:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d69b6154a0ba3054179b894a93d6d40b6835d232
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3c:f4:b2:04:27:1b:e3:fc:d1:76:73:1c:46:
89:b1:61:e5:94:ec:11:19:43:41:ee:f2:f6:cc:1d:
61:2e:6b:a9:d2:81:ab:ef:a1:b9:5d:62:4b:52:23:
16:37:51:90:38:14:ec:11:d3:37:42:2d:76:70:7e:
66:55:09:3c:f8:12:22:a8:66:d7:9b:7a:8e:70:c2:
77:4c:30:d3:4e:1f:57:27:8d:33:fe:52:b5:1d:b1:
f4:a2:55:c3:3a:a8:75:7a:68:aa:66:9f:81:e4:0b:
cd:92:02:bc:11:e8:45:18:b0:0c:7c:92:9a:30:8c:
60:9c:28:93:2e:7e:c5:c5:68:0f:19:b2:07:3e:d2:
f5:a2:3e:ea:b2:ce:ea:b3:05:5a:94:08:b5:e4:67:
b0:19:96:d1:68:09:f4:a6:62:a5:2d:91:95:a7:96:
8e:85:c1:8d:6e:84:dd:6f:f6:07:52:fb:b5:e8:5a:
a0:3f:ac:39:f2:f2:f0:46:d3:db:fe:cb:84:51:61:
1b:79:b7:69:df:9d:87:10:07:8f:55:6a:5c:cc:a1:
3d:82:13:6f:29:25:58:f3:53:67:e5:ef:26:fd:a0:
3d:8c:09:d6:8a:f9:49:82:60:c8:a4:cc:fc:08:88:
d6:97:a2:62:3c:c4:5c:20:03:a9:52:a1:d7:1f:da:
2a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:9B:61:54:A0:BA:30:54:17:9B:89:4A:93:D6:D4:0B:68:35:D2:32
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1pthVKC6MFQXm4lKk9bUC2g10jI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:b50::/44
Signature Algorithm: sha256WithRSAEncryption
b8:da:fa:77:df:11:c1:b7:95:cb:dc:a1:eb:48:7d:2f:3d:ba:
00:7b:f1:50:9f:92:f7:b7:d9:b8:86:21:d2:cf:ff:52:e2:42:
57:17:b2:20:8b:1c:57:c8:3e:ff:96:12:0c:1c:4a:e7:7a:70:
64:42:80:c9:f6:ac:8c:43:f8:d4:23:d3:bf:c0:a2:8b:73:89:
fc:05:dc:09:a1:0d:2c:87:47:c1:99:24:3e:19:3a:06:62:bc:
0c:d0:d8:d2:7e:d9:90:2d:f7:ce:33:c4:e4:54:d2:ed:79:13:
ee:eb:13:4f:4a:dd:a7:bc:f4:2e:ee:66:49:75:7d:88:61:27:
de:dc:98:e0:1d:bb:9c:53:39:74:f6:99:4f:f4:91:ee:f0:d0:
a1:d0:9c:e1:02:f6:04:20:a4:52:30:88:1a:06:6d:de:e5:46:
d3:e3:ba:78:9a:25:09:db:fe:48:a0:44:c4:f3:f2:a4:0a:a1:
5d:15:29:45:79:bf:4a:b1:02:29:b7:e7:9f:ee:fc:cf:bf:20:
d4:2d:b0:0b:b3:ba:81:c2:ca:f2:53:98:73:8e:f1:db:37:87:
f7:21:19:cc:7e:be:cd:5f:0b:73:67:3b:2b:35:3c:db:34:07:
7f:84:d5:8a:f4:bc:7c:87:e5:67:ed:54:5a:ec:59:8c:0d:5d:
a0:64:a6:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 11:09:24 2026 by rpki-client