Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/2tb43Rm6rFIw6Q-F6yMT9DNOlfQ.roa
File: 2tb43Rm6rFIw6Q-F6yMT9DNOlfQ.roa (raw, json)
Hash identifier: AXVvk0MzfZQF/+Jey6ATUAttEZZ0bKa4aoftPm7VwrI=
Subject key identifier: DA:D6:F8:DD:19:BA:AC:52:30:E9:0F:85:EB:23:13:F4:33:4E:95:F4
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019EB87FF0E2EC74F9F59A5B4714BFDFBA12
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/2tb43Rm6rFIw6Q-F6yMT9DNOlfQ.roa
Signing time: Thu 11 Jun 2026 21:04:12 +0000
ROA not before: Thu 11 Jun 2026 21:04:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219453
IP address blocks: 2a0e:97c0:d00::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 06:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:7f:f0:e2:ec:74:f9:f5:9a:5b:47:14:bf:df:ba:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jun 11 21:04:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dad6f8dd19baac5230e90f85eb2313f4334e95f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c5:d4:bc:98:b1:1c:6a:5d:88:1d:c5:62:cc:
bb:c9:d1:59:3b:2f:b8:b0:98:5f:f4:00:63:b1:e1:
61:f1:e3:81:58:84:17:a8:27:a9:c0:56:1b:02:b0:
e7:1a:66:c6:b1:32:f7:de:cc:33:bc:c6:b3:1b:65:
4c:62:79:f1:28:20:20:82:c8:c9:e2:4c:57:3d:2f:
2b:50:02:6f:07:e8:62:82:df:83:44:b7:82:83:1d:
e9:23:81:e3:ef:1b:e7:06:7f:a0:bf:c0:d0:25:f4:
fd:a3:a1:1b:a6:8c:af:ff:1c:bc:a1:1b:cb:c4:bd:
c0:1e:33:9f:c5:57:57:bf:37:b4:13:fe:48:85:c6:
e9:b3:5e:2a:12:2b:65:9c:07:84:71:43:ed:8b:44:
1c:60:0f:7a:ba:33:65:51:8c:86:8a:4a:10:d1:20:
19:1e:c1:c1:12:b4:6d:6f:40:ed:24:e2:98:a2:8e:
90:93:8e:d2:d6:fa:ef:ae:69:22:08:3d:71:cb:a0:
59:70:77:81:ac:51:f1:1f:3a:77:75:15:ec:a9:2d:
41:99:33:5c:ee:b7:62:93:f9:35:20:60:a3:32:29:
0c:2c:72:00:41:ce:f6:1d:a9:13:fa:37:da:46:4f:
e5:f8:f3:e3:81:03:30:27:0a:20:62:d7:00:61:05:
d4:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:D6:F8:DD:19:BA:AC:52:30:E9:0F:85:EB:23:13:F4:33:4E:95:F4
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/2tb43Rm6rFIw6Q-F6yMT9DNOlfQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:d00::/44
Signature Algorithm: sha256WithRSAEncryption
97:89:8e:62:ae:3f:c8:fd:a2:b5:66:4c:13:0b:72:b7:df:f6:
d5:cb:a5:df:bb:18:a2:dd:18:35:f9:c3:b3:82:03:b8:37:b1:
78:28:d9:2b:68:8c:71:20:e2:02:c1:99:5c:0a:10:34:6b:e1:
c4:48:4c:ca:c1:e2:d2:0c:56:49:dd:98:35:d4:08:64:77:db:
e3:f8:e4:8e:51:a7:48:fd:fd:19:aa:9e:74:67:50:76:60:79:
c8:51:b4:52:20:3a:8f:84:5b:cb:fa:1d:5a:6f:bc:44:1b:14:
d2:f5:69:a1:e5:8a:7d:01:f3:c6:96:12:34:bb:a6:40:1b:f1:
7d:7a:ad:97:ce:c3:c8:4b:36:2b:85:a4:4d:a0:47:72:8c:73:
b0:e2:7c:14:2c:ae:40:dc:b9:de:ca:13:b1:ae:f2:a8:a1:36:
e4:2f:0c:c5:46:08:b0:bb:e7:f3:be:6b:dd:e3:77:59:f4:a8:
1a:5c:ea:f2:9b:7f:9b:58:26:80:6b:55:0c:c1:0c:42:00:ef:
19:07:b8:f2:7f:73:61:ac:aa:a7:d8:bd:b5:45:2f:31:6e:f1:
9c:fe:3d:d8:de:97:28:ca:62:31:51:f3:dc:a4:25:6b:3a:68:
2c:f2:4a:4c:13:6e:5f:ac:cf:a2:ba:5a:4e:bb:6f:80:49:ad:
b1:66:a3:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 09:50:09 2026 by rpki-client