Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/9zPYet_XP8f5f3PpnT_V8MW3Lhg.roa
File: 9zPYet_XP8f5f3PpnT_V8MW3Lhg.roa (raw, json)
Hash identifier: kSdkikUQ5E0GLJeTaPHPHh5s4dw8vFEoYl+/2+D7dIQ=
Subject key identifier: F7:33:D8:7A:DF:D7:3F:C7:F9:7F:73:E9:9D:3F:D5:F0:C5:B7:2E:18
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01A09ED40126D194EF674F16A4ED5F4FB2F7
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/9zPYet_XP8f5f3PpnT_V8MW3Lhg.roa
Signing time: Mon 14 Sep 2026 07:31:29 +0000
ROA not before: Mon 14 Sep 2026 07:31:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210825
IP address blocks: 2a10:ccc0:1330::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Sep 2026 14:37:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9e:d4:01:26:d1:94:ef:67:4f:16:a4:ed:5f:4f:b2:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Sep 14 07:31:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f733d87adfd73fc7f97f73e99d3fd5f0c5b72e18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:a9:f3:58:5d:b5:f8:70:3a:c2:73:82:5c:db:
1a:b8:89:a2:b6:10:58:3b:87:9d:fd:3a:f8:1f:7d:
29:dc:d0:73:4c:85:2d:ed:68:a0:98:e1:38:39:01:
88:48:95:5d:7c:48:8e:e6:c7:a7:47:ad:6c:4b:07:
94:cf:f7:0d:33:97:34:35:20:6c:2d:3b:60:6a:33:
3a:aa:05:12:25:92:d1:43:3d:98:d5:7b:db:31:11:
92:83:78:d3:72:8b:90:dd:a2:b1:c8:3c:46:52:c6:
c4:d2:3c:ba:76:54:e4:6e:e7:c1:5d:9f:e7:70:fe:
c6:8c:69:5e:c2:37:4d:02:80:a3:63:e4:01:48:18:
ad:17:d8:04:31:76:1e:75:b2:ad:30:06:d6:50:51:
d1:8c:af:fc:aa:0c:e5:23:06:ce:bc:c0:52:6e:f8:
e7:3d:e1:68:97:d0:53:37:a2:64:43:e2:e1:36:bf:
c9:62:9d:aa:3a:2c:29:12:41:8d:b2:29:76:8d:ec:
50:e1:f2:a4:4b:ef:e1:3a:cb:66:32:b2:81:59:c3:
4c:8e:36:c7:e7:cc:1f:19:4e:09:77:25:bf:f2:06:
73:36:f1:0e:35:2b:bd:2c:8a:4f:ff:ff:98:b2:67:
2e:66:84:7b:43:45:1f:0a:e5:4e:c0:cf:ed:1f:30:
8c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:33:D8:7A:DF:D7:3F:C7:F9:7F:73:E9:9D:3F:D5:F0:C5:B7:2E:18
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/9zPYet_XP8f5f3PpnT_V8MW3Lhg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:ccc0:1330::/44
Signature Algorithm: sha256WithRSAEncryption
b2:cd:34:a2:64:40:76:88:e8:c7:0b:1a:b9:98:41:d7:7f:50:
90:1c:a7:aa:57:65:c5:02:dd:04:4e:9d:0d:73:21:ef:02:d3:
ed:dc:65:27:3b:be:17:7e:b1:04:83:5e:34:81:0b:4d:ed:a0:
0d:fb:c3:70:08:3e:96:a9:82:34:cd:57:93:a0:e6:01:34:07:
a7:c1:04:d7:1c:2b:50:cc:f5:2b:70:39:1d:f4:6f:3b:fd:c1:
30:86:b7:f0:98:ee:46:af:e3:33:5e:0e:b6:18:b3:e2:bc:2b:
ff:b5:d6:9b:03:61:7a:da:f4:4c:b9:f4:fa:1b:89:49:41:99:
14:62:e2:13:0c:8f:7c:63:b1:ed:57:e9:90:d2:3a:b4:9e:a4:
88:6f:97:f8:a1:61:31:45:8e:14:b5:b2:62:a5:a3:51:9d:84:
b0:b0:03:4a:a3:1e:7b:f8:9f:1c:88:bf:0f:1f:79:48:d2:23:
7f:38:92:e8:6d:48:70:e0:d3:6f:d4:b9:87:6c:f7:1e:c2:44:
88:f8:6d:e4:33:2c:3a:8d:6c:b8:a2:c3:25:c0:82:20:41:b9:
cb:90:b7:fe:66:df:47:b7:60:63:75:7d:ae:15:be:a5:7a:3d:
3e:f4:b4:57:c5:b2:f9:4f:6d:60:91:e4:fd:d6:75:60:48:3c:
63:5d:79:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 01:22:59 2026 by rpki-client