Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/25eJntxNJJBJMXnniiTlPovVxjM.roa
File: 25eJntxNJJBJMXnniiTlPovVxjM.roa (raw, json)
Hash identifier: qTDQ2IFUqycCH3buVH3+5dbvjIk95ZGnCMj9H10If0Y=
Subject key identifier: DB:97:89:9E:DC:4D:24:90:49:31:79:E7:8A:24:E5:3E:8B:D5:C6:33
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01A09A01DE903B51C0050AB016A766406988
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/25eJntxNJJBJMXnniiTlPovVxjM.roa
Signing time: Sun 13 Sep 2026 09:03:28 +0000
ROA not before: Sun 13 Sep 2026 09:03:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51939
IP address blocks: 2a0e:97c0:5c0::/44 maxlen: 48
2a0e:97c0:5c1::/48 maxlen: 48
2a0e:97c0:5c2::/48 maxlen: 48
2a0e:97c0:5c3::/48 maxlen: 48
2a0e:97c0:5c4::/48 maxlen: 48
2a0e:97c0:5c6::/48 maxlen: 48
2a0e:97c0:5ca::/48 maxlen: 48
2a0e:97c0:5cc::/48 maxlen: 48
2a0e:97c0:5ce::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Sep 2026 12:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9a:01:de:90:3b:51:c0:05:0a:b0:16:a7:66:40:69:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Sep 13 09:03:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=db97899edc4d2490493179e78a24e53e8bd5c633
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:67:98:1e:3f:d6:45:17:a5:df:b0:e7:cd:d5:
6e:77:a2:67:75:3f:4b:89:df:1b:2d:9c:d5:2c:ce:
58:0d:8e:9e:52:cb:e7:70:60:e3:5f:7e:f7:6b:a4:
81:ef:1c:d0:a8:9e:1e:7d:4a:f1:dd:07:9d:c5:a3:
ee:44:72:35:be:98:25:8d:e3:9f:fa:16:22:41:80:
b2:1a:da:9b:52:b7:b7:9c:60:3c:59:72:b2:1d:7a:
1e:46:61:b1:26:56:b2:86:68:da:bf:80:e7:85:32:
f3:e2:6e:2b:ed:28:da:b5:b9:72:d8:76:f5:8a:c4:
6b:77:35:87:61:ae:60:d4:ee:9a:36:ff:12:9a:9e:
34:8d:bf:69:da:43:f6:8a:d7:83:0e:4e:00:43:a4:
2c:53:d4:cc:31:c0:7a:78:b8:a1:6a:a1:db:3c:55:
2e:8d:d9:94:c6:55:9f:dc:8a:12:db:1d:29:1c:07:
5b:1a:bf:43:01:43:c3:04:de:78:c9:55:64:c8:d8:
ab:6e:5c:ff:7a:ac:b0:53:5d:6e:2a:d7:58:36:99:
c7:37:c9:1e:d0:81:22:f4:fa:3c:ac:be:05:10:66:
3e:fe:e1:bf:e7:4c:f8:42:1c:40:e9:e0:28:cb:1f:
2d:87:fb:f3:01:ac:e1:61:ba:3f:d6:35:8d:c7:d0:
11:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:97:89:9E:DC:4D:24:90:49:31:79:E7:8A:24:E5:3E:8B:D5:C6:33
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/25eJntxNJJBJMXnniiTlPovVxjM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:5c0::/44
Signature Algorithm: sha256WithRSAEncryption
81:32:95:1e:97:64:31:e5:ff:c2:c0:2b:e9:9a:86:75:ab:7e:
b6:69:64:83:85:6a:5d:3e:cc:74:3a:ab:c3:98:0b:4e:05:23:
a1:32:39:ce:4b:b9:78:c4:44:77:aa:fd:5d:06:ea:4a:10:43:
02:34:aa:2a:35:6f:ed:6e:f3:a2:5d:f1:36:e4:d2:c6:2a:7b:
1d:37:14:03:bb:6b:3c:b6:76:a4:c4:58:e3:5c:fb:97:d8:f7:
68:2b:96:01:81:d9:c3:e2:8f:1d:8f:f7:9a:7b:5b:2f:a0:ff:
c2:02:c7:ac:dc:54:31:16:98:f3:40:f6:b6:50:de:be:ba:1a:
25:9d:30:ac:c6:e4:23:11:3a:ef:dd:1f:4b:77:87:a7:b5:87:
3a:0d:ec:07:c2:2b:15:0f:03:e2:46:82:87:91:ef:e8:dc:c7:
4c:f8:a4:d6:55:4d:3b:fd:09:8d:e7:a2:64:ed:97:dd:f8:67:
a5:a0:05:74:9a:4c:15:11:61:26:50:e7:be:9a:a7:0e:93:91:
e4:7b:e0:45:75:04:45:16:44:01:09:3b:db:fa:18:1a:bf:13:
14:2b:57:ed:3d:45:bf:0b:fd:51:d2:10:a0:53:e1:ca:db:3d:
a9:c6:f4:54:e1:96:06:03:2e:f8:52:ef:10:d2:3c:84:7b:5a:
29:b5:a3:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 20:31:00 2026 by rpki-client