Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/268ckMPXfHdKJ2jIN7JHzV2MqPc.roa
File: 268ckMPXfHdKJ2jIN7JHzV2MqPc.roa (raw, json)
Hash identifier: 6idWozpfIog/t51mzjk7yTS/iebk8VAtpFhRZWxv6lI=
Subject key identifier: DB:AF:1C:90:C3:D7:7C:77:4A:27:68:C8:37:B2:47:CD:5D:8C:A8:F7
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01A09A0BFB051F8415EAA3885DA9B656A320
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/268ckMPXfHdKJ2jIN7JHzV2MqPc.roa
Signing time: Sun 13 Sep 2026 09:14:31 +0000
ROA not before: Sun 13 Sep 2026 09:14:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198055
IP address blocks: 2a0e:b107:28a9::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Sep 2026 09:14:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9a:0b:fb:05:1f:84:15:ea:a3:88:5d:a9:b6:56:a3:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Sep 13 09:14:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dbaf1c90c3d77c774a2768c837b247cd5d8ca8f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:13:3c:49:9b:ba:6f:8a:82:c2:77:4e:90:93:
a5:e7:f0:48:8f:1a:94:34:74:5f:53:82:56:f9:50:
8d:93:eb:a0:56:3b:c2:b8:ef:69:4c:ca:5f:63:cd:
11:3a:27:00:c3:ef:b9:85:0c:7a:09:2f:7a:34:b5:
14:c1:2f:c4:f4:36:a6:04:b3:24:fd:98:18:95:8c:
19:63:f9:d8:34:6e:ba:39:8d:38:f4:51:bf:3e:bf:
3d:b9:09:c9:8a:73:87:e0:f1:ca:22:7b:54:08:85:
77:50:1a:af:42:15:cd:cd:fc:ad:94:13:c8:b8:6b:
2d:11:f5:f6:fb:a5:69:a4:f5:af:90:68:cd:70:3f:
89:5b:bb:90:ae:14:b6:0a:79:b1:70:60:9a:e4:59:
15:05:8b:60:31:5a:40:b1:fd:63:73:7a:0f:05:6d:
ba:8c:ed:0b:31:9a:2c:61:42:70:3f:60:85:e5:67:
1a:2f:9f:44:3d:59:07:6e:90:71:60:ba:92:0f:a3:
c9:2f:5e:3b:cc:be:b3:dd:c1:16:8c:00:87:d8:90:
c7:55:9b:1c:d8:4c:e6:ba:af:0b:56:85:57:68:19:
62:f9:24:1c:72:75:79:97:46:53:c8:3c:4a:21:95:
d1:68:7b:4b:02:ca:48:e6:4f:ea:87:f7:99:f8:61:
11:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:AF:1C:90:C3:D7:7C:77:4A:27:68:C8:37:B2:47:CD:5D:8C:A8:F7
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/268ckMPXfHdKJ2jIN7JHzV2MqPc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:28a9::/48
Signature Algorithm: sha256WithRSAEncryption
58:72:69:c0:5a:b2:31:39:5a:f3:dd:99:4d:fa:3b:7b:3b:0a:
ca:2c:f0:83:ef:29:42:f7:97:b4:83:6b:7d:0e:b3:d4:de:c0:
72:0a:7a:16:3e:e2:3c:52:ee:11:94:3c:2b:b8:5b:d4:73:ab:
6b:42:9e:2d:23:15:3a:85:da:86:d7:26:be:67:82:81:25:02:
72:2b:60:32:e0:81:6f:13:d1:b0:9c:c2:37:b4:b7:90:84:6e:
b6:48:46:7c:75:84:c1:48:75:54:66:a1:a3:61:b2:ee:f7:4d:
1e:9d:b9:e5:1c:03:59:54:9e:63:85:66:9f:77:d8:7a:b9:c3:
b3:6b:f6:7d:4b:80:f4:03:5f:15:db:50:79:b2:ae:d1:97:cf:
34:6a:30:51:f1:9e:58:08:bc:e5:38:14:35:d9:12:99:d0:18:
f8:50:98:ef:4c:97:ab:ec:4a:a1:ea:cf:33:1e:54:7d:f6:d3:
f5:de:8c:3f:71:e4:66:37:bf:4b:1f:08:45:67:6d:b3:ee:5b:
c6:97:92:e1:17:f4:bd:99:1a:47:eb:5d:14:dc:2e:04:24:8b:
ce:9e:ed:81:da:40:31:67:ff:f3:80:3e:d3:23:bf:11:de:64:
1c:bc:83:e8:57:dd:f8:7f:1b:f9:66:6d:4a:f1:d3:3c:04:c8:
9f:f4:0d:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 20:29:40 2026 by rpki-client