Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/6WKP0UQc45K1d33GYfFHU6RxREo.roa
File: 6WKP0UQc45K1d33GYfFHU6RxREo.roa (raw, json)
Hash identifier: zmRcJhsJk7Z9Qkl3SBu6U2TnREPcvHqAlTkBCCF/T+4=
Subject key identifier: E9:62:8F:D1:44:1C:E3:92:B5:77:7D:C6:61:F1:47:53:A4:71:44:4A
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01A09ED3FFAB3905AE848ACA86F805511E70
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/6WKP0UQc45K1d33GYfFHU6RxREo.roa
Signing time: Mon 14 Sep 2026 07:31:28 +0000
ROA not before: Mon 14 Sep 2026 07:31:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209556
IP address blocks: 2a10:ccc0:c0c2::/48 maxlen: 48
2a10:ccc0:c0c3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Sep 2026 14:37:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9e:d3:ff:ab:39:05:ae:84:8a:ca:86:f8:05:51:1e:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Sep 14 07:31:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e9628fd1441ce392b5777dc661f14753a471444a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:2f:46:86:0a:40:11:9b:52:b7:c0:cd:50:47:
1a:ae:09:fe:58:8a:bb:75:da:97:31:ca:8a:30:c1:
be:db:33:b1:59:5a:b6:43:39:bc:5e:ee:8a:af:c7:
20:0c:29:09:46:68:92:38:85:86:9a:c1:70:4a:6b:
c3:4f:4b:06:aa:fb:3b:29:bd:98:64:23:fa:5d:9b:
af:b6:29:3a:81:a5:2e:83:34:ed:5f:60:1c:8a:cd:
af:6a:bf:5c:f2:72:de:5e:99:a3:b3:f2:e1:91:cd:
d8:fb:1c:bb:fe:b8:9b:8b:f1:dc:50:57:8a:46:cb:
ff:c4:83:2c:7c:b7:18:a6:2b:6a:48:30:d2:e4:47:
91:f8:12:c0:4e:68:ea:7f:24:65:a1:b2:cf:ea:2a:
99:80:03:ae:96:47:65:33:65:22:51:69:48:e2:4c:
58:c8:52:79:d4:e7:cc:53:31:dd:91:ac:f7:95:77:
d8:f7:fd:81:5f:e1:63:ba:aa:29:b5:04:8f:0d:20:
b0:0f:c8:2c:67:60:3b:04:64:9e:86:e0:4b:48:14:
72:d3:17:05:78:7e:aa:89:9c:3c:ea:ca:13:ce:c3:
2e:43:1d:51:76:57:33:32:e1:a0:47:ca:43:dd:4c:
e2:b8:a1:3d:1a:48:40:7b:90:7c:a7:bb:c4:0a:e0:
dc:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:62:8F:D1:44:1C:E3:92:B5:77:7D:C6:61:F1:47:53:A4:71:44:4A
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/6WKP0UQc45K1d33GYfFHU6RxREo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:ccc0:c0c2::/47
Signature Algorithm: sha256WithRSAEncryption
a1:a1:ac:74:35:18:0c:fa:1e:0d:64:b9:d8:e4:52:bd:d3:43:
26:d2:b2:6b:07:b2:bc:ca:2f:ac:8c:1c:dd:b7:a2:a0:8f:fe:
ca:38:74:78:67:b0:de:89:ff:6b:78:63:d1:7b:20:3c:99:af:
b8:66:30:1c:70:26:17:2a:c0:b5:2c:c9:cd:bc:ee:f4:38:1d:
ad:a6:65:7f:46:c5:6c:ca:da:47:a0:b6:2b:0b:bd:24:28:9e:
f7:fe:60:13:22:d0:e5:2c:6b:54:94:1b:89:c3:eb:a2:ed:71:
9d:ac:ba:b3:7d:f0:7d:d7:26:25:72:4c:42:5c:85:99:8a:d5:
e3:a1:79:fb:6c:07:03:7f:63:6d:05:62:09:60:b7:19:d8:72:
c3:20:6e:da:60:77:6d:a5:5f:8c:dd:f0:5c:1f:6f:00:85:e3:
de:e4:c7:2b:71:4a:83:4c:d6:b0:dc:50:84:bc:40:b3:0a:0a:
cb:d8:36:95:ce:2f:ed:08:9e:0d:81:be:fb:91:20:6f:8f:73:
b3:07:d6:28:01:56:f9:23:11:e2:a6:62:cd:58:f3:6e:18:70:
e8:5b:19:17:ff:e1:fd:d1:1e:b6:b0:dd:81:9d:6a:5a:cb:30:
3b:b4:d4:84:a5:44:9d:d6:15:91:56:ec:4d:a8:8d:e9:e6:05:
40:b4:58:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 01:23:06 2026 by rpki-client