Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/5TDL0YhCbNs8E54b5mMSAN8wZ64.roa
File: 5TDL0YhCbNs8E54b5mMSAN8wZ64.roa (raw, json)
Hash identifier: 2DB4mMy2rHLyDDsILixXA3udSxvklb9oEcIGuD+oMRk=
Subject key identifier: E5:30:CB:D1:88:42:6C:DB:3C:13:9E:1B:E6:63:12:00:DF:30:67:AE
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01A09ECE87B9B22F135B13B123CED4233531
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/5TDL0YhCbNs8E54b5mMSAN8wZ64.roa
Signing time: Mon 14 Sep 2026 07:25:30 +0000
ROA not before: Mon 14 Sep 2026 07:25:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208679
IP address blocks: 2a0e:b107:178c::/48 maxlen: 48
2a0e:b107:178e::/48 maxlen: 48
2a0e:b107:178f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Sep 2026 20:52:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9e:ce:87:b9:b2:2f:13:5b:13:b1:23:ce:d4:23:35:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Sep 14 07:25:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e530cbd188426cdb3c139e1be6631200df3067ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ce:34:b8:4d:d6:fb:b3:7f:ab:ef:ef:5d:26:
14:86:4c:5d:26:d0:07:70:18:8c:9a:ef:f4:c1:4e:
5c:c0:17:e7:43:bc:d2:c9:ef:19:70:c4:88:20:54:
33:5b:f1:ea:37:62:ed:68:f5:61:57:b0:de:a6:0f:
c1:04:58:0e:28:64:2f:cf:48:ce:62:ee:91:3e:d5:
10:c6:da:d8:3d:ab:2a:87:39:7f:48:73:a8:2b:ce:
79:26:f8:d3:b3:e6:b7:87:f2:95:28:35:92:6a:3a:
4c:03:a7:46:40:d4:13:b5:ad:56:29:ed:cf:6a:4d:
3c:8a:21:30:78:c4:75:21:08:5f:54:d2:d0:8e:3c:
9e:e1:c8:c2:bf:6d:92:94:b1:e8:58:60:60:15:23:
a7:36:c4:51:a7:4d:61:99:ea:db:13:93:84:60:7c:
89:73:0c:38:a8:53:f4:91:7d:88:a8:75:92:ab:bf:
c2:31:ee:c3:8c:5c:82:c6:3a:1d:7e:11:69:7c:3c:
62:bf:25:67:5b:0c:01:e4:6a:49:b9:85:82:6f:20:
3d:11:d5:b5:7b:99:12:4d:55:59:06:37:1d:fb:b4:
7a:46:ad:9a:e1:69:78:b6:da:ba:d8:13:b6:83:cc:
d1:f7:e4:a1:58:0f:0d:75:bb:bf:69:bb:00:8f:c7:
a4:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:30:CB:D1:88:42:6C:DB:3C:13:9E:1B:E6:63:12:00:DF:30:67:AE
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/5TDL0YhCbNs8E54b5mMSAN8wZ64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:178c::/48
2a0e:b107:178e::/47
Signature Algorithm: sha256WithRSAEncryption
13:f5:6e:97:62:cf:a5:ff:ba:ea:61:27:5c:95:f7:77:39:2e:
14:26:05:04:66:71:38:6d:45:19:7d:e2:d3:1f:c4:7a:0f:e4:
31:7f:96:ee:33:4c:79:23:bf:eb:eb:63:35:a5:6e:f7:43:58:
7c:01:cf:5c:29:ae:5b:d0:4c:e8:92:80:29:b8:ae:00:0b:d6:
e7:75:7b:25:ed:3c:cc:96:82:c2:57:f3:e9:6f:1e:f0:4c:c3:
7b:7d:88:77:a2:73:35:79:55:ab:66:e8:50:df:fc:e5:1f:1b:
cf:ab:e8:2f:78:0f:e6:ef:9b:96:17:99:0d:b4:fb:4a:ee:be:
ab:85:ab:8b:40:a5:67:34:c0:cf:30:4d:98:17:f1:1e:38:9d:
1e:47:b8:cf:50:7d:d2:ce:8e:5e:98:c0:97:5d:7f:76:b6:3b:
10:5b:ab:6f:3f:01:e8:d0:9d:a8:7c:36:63:f8:29:30:e5:e4:
22:d5:46:76:42:e5:71:4e:31:9a:f9:56:ad:7c:94:0d:3c:99:
d9:7f:92:6f:ca:b5:53:3e:ac:b1:c5:3e:57:ea:85:11:c0:87:
97:8b:6e:fa:23:36:a4:e1:c5:54:0f:ef:b6:c1:3d:3f:dd:7c:
53:c6:94:46:2f:4f:41:8a:ba:8a:c8:35:0b:e4:b9:73:a3:d8:
3b:43:c3:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 01:23:38 2026 by rpki-client