Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/A00mnbbD-k11SeMJIMDI8FRnjyo.roa
File: A00mnbbD-k11SeMJIMDI8FRnjyo.roa (raw, json)
Hash identifier: bbSI6MlIb60mRTNQjBeXsIOmVb23EShJfRBDfWcSjQ0=
Subject key identifier: 03:4D:26:9D:B6:C3:FA:4D:75:49:E3:09:20:C0:C8:F0:54:67:8F:2A
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019D540CA350C02B68BF8E949BD0D4C339B8
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/A00mnbbD-k11SeMJIMDI8FRnjyo.roa
Signing time: Fri 03 Apr 2026 15:53:27 +0000
ROA not before: Fri 03 Apr 2026 15:53:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8075
IP address blocks: 2a0e:b107:27c7::/48 maxlen: 48
2a10:2f00:183::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 Apr 2026 16:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:54:0c:a3:50:c0:2b:68:bf:8e:94:9b:d0:d4:c3:39:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Apr 3 15:53:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=034d269db6c3fa4d7549e30920c0c8f054678f2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:28:c1:e2:2b:41:b2:75:8d:23:92:41:35:43:
d3:c9:96:93:e2:3b:1a:51:ca:bc:d5:28:c2:f2:86:
2c:59:22:df:b8:e1:23:7b:ff:e5:4c:de:60:d9:6e:
03:69:35:2c:75:81:9a:0b:c6:1a:b9:71:88:2d:13:
e4:6a:70:a8:91:e3:a9:8e:0a:b2:38:68:40:44:cc:
79:44:ec:cb:43:26:76:0d:ba:9f:0d:a5:97:0f:f6:
0f:64:aa:98:5b:1a:4a:10:2e:bd:87:4f:c1:2b:98:
64:23:67:3d:d1:49:e2:d4:de:e0:b8:2e:e3:8f:17:
fb:26:89:44:db:b8:f7:92:52:86:39:b6:d9:eb:05:
fe:8f:10:07:e0:47:52:c0:6b:81:82:15:14:b3:1a:
12:98:09:12:f5:3e:55:f7:ba:9d:e1:b8:9e:bd:21:
6e:cd:bb:93:64:3c:eb:b5:4c:59:99:2a:96:f0:18:
23:3e:b1:db:b9:91:47:9b:15:c0:60:19:59:62:84:
80:de:0d:93:b6:09:df:76:a7:e2:b1:2c:56:4f:79:
fe:39:5f:4c:a0:51:d1:62:2d:33:19:c7:31:de:d6:
4a:28:7b:00:34:06:0a:1a:d1:d5:b4:28:20:65:18:
36:b6:30:93:c6:9c:9d:3e:76:51:0a:06:54:e7:0e:
57:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:4D:26:9D:B6:C3:FA:4D:75:49:E3:09:20:C0:C8:F0:54:67:8F:2A
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/A00mnbbD-k11SeMJIMDI8FRnjyo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:27c7::/48
2a10:2f00:183::/48
Signature Algorithm: sha256WithRSAEncryption
8d:98:27:71:61:48:35:03:49:98:a0:9e:57:b2:d6:0a:9c:d8:
63:bb:bb:84:ee:02:af:e6:11:f7:3d:53:4f:91:23:97:cc:08:
2b:48:46:e3:94:fe:a2:66:2f:42:e4:ee:34:67:03:51:8e:35:
f0:1d:1a:05:e1:b4:b1:93:9a:d8:9e:ef:f1:07:0d:54:9e:91:
f8:76:93:c5:af:fc:69:9a:cf:03:a1:45:a7:2c:b4:ca:ee:9c:
5a:ff:54:b2:de:c7:8f:0f:c9:21:91:ec:a2:27:ad:72:63:20:
2f:71:7c:e5:12:06:62:79:a5:a5:ba:29:d8:ef:58:71:10:a3:
1c:bd:f8:49:f7:6b:63:35:38:2f:d6:e1:f5:4b:84:98:46:85:
3c:6d:e3:0f:1d:99:f9:41:b2:7f:0a:02:b1:6e:41:80:26:eb:
44:40:e7:2f:4f:90:ce:66:d1:af:57:d5:f7:3a:1d:56:5a:13:
01:8d:5c:f7:93:69:56:2a:bf:2b:ec:12:3b:c5:f4:8c:be:50:
df:6c:ac:da:8a:93:5e:78:58:4b:3c:ca:a7:0a:ea:2b:34:a0:
b3:8b:3e:17:ef:6b:52:0c:5d:88:09:b6:46:1c:6b:61:00:8a:
7e:d2:8c:b9:b3:6e:fc:8a:ba:82:b6:1c:cc:79:8d:22:aa:69:
63:83:00:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 01:10:27 2026 by rpki-client