Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/8Si1gExbZTJF3qXHFKz2OUxnQmo.roa
File: 8Si1gExbZTJF3qXHFKz2OUxnQmo.roa (raw, json)
Hash identifier: 3HtO9dUiO7DebM2j6XUqRUH4bDlCt6PLRdqkMK0pAp0=
Subject key identifier: F1:28:B5:80:4C:5B:65:32:45:DE:A5:C7:14:AC:F6:39:4C:67:42:6A
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019EF9EA36A1E5919E34FB20D9EBC4FC4565
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/8Si1gExbZTJF3qXHFKz2OUxnQmo.roa
Signing time: Wed 24 Jun 2026 13:55:36 +0000
ROA not before: Wed 24 Jun 2026 13:55:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213718
IP address blocks: 2a0e:97c0:5d0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 19:30:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f9:ea:36:a1:e5:91:9e:34:fb:20:d9:eb:c4:fc:45:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jun 24 13:55:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f128b5804c5b653245dea5c714acf6394c67426a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9e:f0:03:56:c2:99:50:41:8f:38:5a:fe:f3:
d5:65:65:a9:cf:13:5d:6e:00:2a:c3:d8:05:7f:81:
aa:98:c7:af:3c:41:1d:49:0d:c3:46:00:9d:5e:96:
1b:17:a5:69:5a:35:c3:86:27:e9:07:40:99:5e:93:
3b:23:99:05:6c:66:70:09:16:95:af:02:be:5a:d6:
9d:05:aa:e6:82:81:91:15:e0:cc:78:e6:62:81:fd:
2a:24:e3:b3:01:f0:83:cb:a0:2f:5a:e3:cc:b3:dd:
ef:fd:a1:ae:fb:e5:15:5b:fe:fb:38:fb:72:f3:87:
47:aa:b7:68:7c:46:5f:6a:b3:74:6b:a4:1d:dc:68:
e0:0a:df:cb:3f:08:46:40:b3:58:ef:f3:2c:53:1d:
eb:95:62:9f:91:a5:fa:29:a5:56:dd:a3:48:b9:69:
0d:64:eb:20:84:11:87:71:a2:59:3c:da:49:28:59:
c7:61:7a:ff:a8:5f:ae:65:12:73:30:44:b1:61:74:
94:f0:eb:2c:ab:06:36:4e:71:39:ac:84:8a:7a:be:
5c:de:1e:0c:33:fc:9e:5c:59:12:74:f9:0f:9f:ba:
11:a7:d8:28:cb:af:64:37:70:8e:32:fa:85:5c:b9:
2b:1d:28:df:13:15:cf:e9:89:70:c1:17:e1:f3:9e:
d8:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:28:B5:80:4C:5B:65:32:45:DE:A5:C7:14:AC:F6:39:4C:67:42:6A
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/8Si1gExbZTJF3qXHFKz2OUxnQmo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:5d0::/44
Signature Algorithm: sha256WithRSAEncryption
b8:d1:8c:8f:9d:6e:df:bd:05:9b:b8:bb:60:06:24:42:ba:c1:
ba:37:b5:69:ef:b8:65:66:f2:40:8d:ad:7f:63:aa:20:d2:f1:
b8:5f:a6:7b:d7:da:0a:27:76:4f:e6:06:d5:c6:d5:b2:49:df:
dd:ad:65:69:fc:44:ff:04:c9:f7:67:9b:8c:32:a0:b1:24:52:
57:86:22:71:44:c7:02:1b:45:fc:cf:30:2c:a0:a5:cd:7d:3c:
1a:bd:32:cb:a0:ae:c2:bd:04:43:d2:29:28:41:a1:d1:2d:a7:
ac:87:75:07:29:fe:b5:bf:24:e2:20:44:4c:ed:ca:99:ef:2f:
44:e1:58:b8:48:d3:00:40:d8:fa:b4:4c:83:f5:a9:38:fb:95:
18:84:f3:4a:1b:95:89:e2:c7:09:c1:36:c2:e8:bb:69:90:0b:
40:82:2e:67:8f:89:d8:a3:20:24:38:dc:b4:6c:75:d3:60:8b:
58:7a:fe:dd:0e:7f:84:2d:b8:e8:fc:5b:8a:ef:04:34:5a:8f:
a7:14:07:4b:17:6e:df:1b:49:f2:6d:75:72:32:81:f2:04:ab:
3d:ef:6f:8e:a8:6c:18:28:17:58:cc:88:46:7a:18:15:14:a9:
a3:37:7b:02:72:ed:95:2e:36:a2:05:f0:a0:cc:72:db:84:e7:
35:a9:78:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 05:26:26 2026 by rpki-client