Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/4kA5WNpbnWnZap3qX8Ouaz3LQtY.roa
File: 4kA5WNpbnWnZap3qX8Ouaz3LQtY.roa (raw, json)
Hash identifier: cew1iuHXoIYzT/R3f2xVKpzVfOHNwHmWgMlNsOqz8BE=
Subject key identifier: E2:40:39:58:DA:5B:9D:69:D9:6A:9D:EA:5F:C3:AE:6B:3D:CB:42:D6
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01A09A0587F0547AC06AFF4C2EF9EF94003C
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/4kA5WNpbnWnZap3qX8Ouaz3LQtY.roa
Signing time: Sun 13 Sep 2026 09:07:28 +0000
ROA not before: Sun 13 Sep 2026 09:07:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215828
IP address blocks: 2a0e:b107:27d0::/46 maxlen: 48
2a0e:b107:27d4::/46 maxlen: 48
2a0e:b107:27f4::/46 maxlen: 48
2a0e:b107:27f8::/46 maxlen: 48
2a0e:b107:27fc::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Sep 2026 09:14:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9a:05:87:f0:54:7a:c0:6a:ff:4c:2e:f9:ef:94:00:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Sep 13 09:07:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e2403958da5b9d69d96a9dea5fc3ae6b3dcb42d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:2e:8b:8d:46:61:8b:83:d4:e1:36:4d:06:95:
cf:da:a3:3a:d2:eb:37:a2:2c:fb:00:39:8a:d5:5e:
c2:57:51:9e:20:79:08:59:03:34:ee:3e:68:20:8f:
d1:d2:ca:dc:e1:74:78:33:ee:e2:3c:b4:b4:08:6b:
ec:38:3c:38:a4:c3:2d:c8:d0:0f:b1:7c:c0:e4:2c:
f9:57:b6:ac:2d:56:14:6a:bb:79:4f:59:86:c8:d0:
c8:80:6d:41:6d:37:b1:8e:71:48:b3:58:cc:e1:a5:
f4:d7:10:e6:41:84:16:d9:31:c3:b3:84:6d:72:75:
49:43:42:e2:94:dc:95:b5:64:ae:f9:fd:c8:11:28:
9c:a8:b9:92:07:9a:48:16:58:df:16:e8:ea:f3:a7:
77:4a:d2:72:c8:29:f5:74:2a:0d:a0:5e:bd:d1:91:
b6:31:e6:de:cb:51:71:22:fb:26:57:b6:c2:f0:41:
2a:45:6b:b4:3f:24:44:f3:71:fb:fa:9c:86:f3:15:
ae:75:7a:4d:f1:6f:80:d3:31:16:c0:d3:a7:50:a3:
bb:57:04:8a:1a:8d:29:f9:66:03:85:77:b1:60:c4:
f9:0a:68:93:e3:af:05:00:e4:b9:b7:d9:60:45:d1:
61:5d:ea:40:2b:67:40:4c:58:81:94:26:6d:fe:d7:
c5:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:40:39:58:DA:5B:9D:69:D9:6A:9D:EA:5F:C3:AE:6B:3D:CB:42:D6
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/4kA5WNpbnWnZap3qX8Ouaz3LQtY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:27d0::/45
2a0e:b107:27f4::-2a0e:b107:27ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
29:f4:64:aa:30:2b:cc:82:25:39:a5:75:ba:eb:21:44:48:9c:
08:33:1a:1e:b2:1f:d1:ed:02:eb:d7:c9:c7:a1:b3:99:d8:63:
a1:e5:55:42:e5:18:30:b8:d2:95:6e:da:9e:c9:cc:a4:cb:c1:
c2:a9:3d:e4:0b:18:f9:76:c1:a8:b2:88:74:c4:1e:fd:92:ae:
52:41:6e:6f:50:c8:24:19:a6:0f:40:3d:25:a5:3a:7b:41:b7:
44:62:6f:78:46:f2:1b:07:27:01:39:d2:e9:ae:4b:45:b5:d7:
73:a8:d8:38:dc:c7:6b:ae:3d:69:1e:4a:c9:c3:5c:f0:a9:c2:
29:2e:0f:89:16:9d:7d:ae:0d:bb:e8:35:e4:e7:fd:0d:0b:10:
d8:51:ac:9f:19:66:2c:6f:a5:f4:9f:96:81:1f:52:f5:90:a3:
4e:91:84:46:3a:6a:e8:77:97:67:0a:f7:9a:aa:f8:93:93:ce:
f8:fa:38:cf:15:10:b8:63:96:3a:e7:c0:3a:6e:2e:e7:96:bf:
23:5d:5b:f9:e5:22:e8:d8:09:2a:20:8f:c8:b6:13:7d:f0:5f:
4b:6d:63:c9:bc:38:dc:3e:64:99:45:50:34:4c:d4:d1:4c:5d:
a5:b5:25:71:88:e6:48:75:7a:a8:c4:00:31:1d:24:ec:ae:02:
d2:e5:fa:f1
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgISAaCaBYfwVHrAav9MLvnvlAA8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjYwOTEzMDkwNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMjQwMzk1OGRhNWI5ZDY5ZDk2YTlkZWE1ZmMzYWU2YjNkY2I0MmQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyC6LjUZhi4PU4TZNBpXP2qM60us3
oiz7ADmK1V7CV1GeIHkIWQM07j5oII/R0src4XR4M+7iPLS0CGvsODw4pMMtyNAP
sXzA5Cz5V7asLVYUart5T1mGyNDIgG1BbTexjnFIs1jM4aX01xDmQYQW2THDs4Rt
cnVJQ0LilNyVtWSu+f3IESicqLmSB5pIFljfFujq86d3StJyyCn1dCoNoF690ZG2
Mebey1FxIvsmV7bC8EEqRWu0PyRE83H7+pyG8xWudXpN8W+A0zEWwNOnUKO7VwSK
Go0p+WYDhXexYMT5CmiT468FAOS5t9lgRdFhXepAK2dATFiBlCZt/tfF8wIDAQAB
o4ICHzCCAhswHQYDVR0OBBYEFOJAOVjaW51p2Wqd6l/Drms9y0LWMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvNGtBNVdOcGJuV25aYXAzcVg4T3VhejNMUXRZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAAjAcAwcDKg6xByfQ
MBEDBwIqDrEHJ/QDBgMqDrEHIDANBgkqhkiG9w0BAQsFAAOCAQEAKfRkqjArzIIl
OaV1uushREicCDMaHrIf0e0C69fJx6GzmdhjoeVVQuUYMLjSlW7ansnMpMvBwqk9
5AsY+XbBqLKIdMQe/ZKuUkFub1DIJBmmD0A9JaU6e0G3RGJveEbyGwcnATnS6a5L
RbXXc6jYONzHa649aR5KycNc8KnCKS4PiRadfa4Nu+g15Of9DQsQ2FGsnxlmLG+l
9J+WgR9S9ZCjTpGERjpq6HeXZwr3mqr4k5PO+Po4zxUQuGOWOufAOm4u55a/I11b
+eUi6NgJKiCPyLYTffBfS21jybw43D5kmUVQNEzU0UxdpbUlcYjmSHV6qMQAMR0k
7K4C0uX68Q==
-----END CERTIFICATE-----
Generated at Sun Sep 13 20:31:03 2026 by rpki-client