Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/A73vHlJiTLJrXkHr79nfjjihJoA.roa
File: A73vHlJiTLJrXkHr79nfjjihJoA.roa (raw, json)
Hash identifier: cLG7eQ05gz/9cIPpFmKnMgrUM3le/z+pCPyG/DwgL1Q=
Subject key identifier: 03:BD:EF:1E:52:62:4C:B2:6B:5E:41:EB:EF:D9:DF:8E:38:A1:26:80
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01A09EDB40701CCE9955BC34774ED20DC629
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/A73vHlJiTLJrXkHr79nfjjihJoA.roa
Signing time: Mon 14 Sep 2026 07:39:24 +0000
ROA not before: Mon 14 Sep 2026 07:39:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212995
IP address blocks: 2a10:2f00:13e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Sep 2026 20:52:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9e:db:40:70:1c:ce:99:55:bc:34:77:4e:d2:0d:c6:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Sep 14 07:39:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=03bdef1e52624cb26b5e41ebefd9df8e38a12680
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:3a:d2:0d:20:8d:e3:25:9a:e1:71:3d:75:69:
fb:d7:f2:ea:0a:07:9e:38:28:70:e5:43:76:13:2a:
01:07:88:59:1b:53:3f:f0:50:64:43:d7:cb:c5:ba:
84:d9:d0:af:ec:f4:b1:5a:b7:a9:53:d5:a3:ff:bc:
6f:41:d2:d6:d5:ec:3c:79:37:79:d7:81:fd:79:34:
fb:08:06:79:ea:ca:97:9b:7f:06:ad:4b:d5:34:d1:
b6:d6:e2:00:23:83:b1:60:1b:58:b9:33:bf:84:48:
52:49:e6:92:2e:df:1d:8a:c8:65:47:f0:41:42:b5:
59:15:79:e8:06:30:9e:a0:cd:8d:07:32:01:d3:e3:
f0:53:79:3a:eb:f1:ee:4a:9b:7e:be:e1:d0:7d:4a:
ba:64:68:a8:b2:a9:d7:17:9f:90:73:24:41:a3:e7:
92:60:b7:af:86:96:76:a7:b7:82:b3:f8:77:c7:83:
22:c1:c9:94:38:43:19:30:7a:f6:61:b4:ca:fb:06:
ee:53:e1:4a:be:53:3f:9f:97:61:31:a9:90:00:49:
29:48:d8:35:ec:d3:4f:10:d1:bf:29:52:9a:65:43:
89:f8:b2:9b:c4:9d:cb:75:d6:8a:8d:80:49:83:e4:
42:ed:33:2f:8d:c4:29:fe:4a:e2:5f:be:1e:14:44:
e0:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:BD:EF:1E:52:62:4C:B2:6B:5E:41:EB:EF:D9:DF:8E:38:A1:26:80
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/A73vHlJiTLJrXkHr79nfjjihJoA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:2f00:13e::/48
Signature Algorithm: sha256WithRSAEncryption
77:f4:2c:c4:4f:82:54:08:cb:ae:ab:3c:54:95:50:bf:bd:5e:
51:62:0a:81:93:70:88:75:db:62:c4:80:1f:79:bd:ad:c1:a9:
7a:e3:4d:9c:ff:01:12:14:b4:de:d8:85:5c:49:05:b3:7f:0a:
75:c9:47:bd:96:a2:50:bf:e5:e7:61:a4:13:5d:1b:bc:95:73:
dd:88:ab:3e:26:9b:da:2b:a6:4d:9c:b4:fc:90:e4:0c:c6:66:
4f:54:df:c8:e7:a5:78:81:d1:9d:0c:d1:d6:c3:bb:f5:73:38:
5e:a3:39:31:8a:aa:26:9e:0c:72:3a:d1:0c:bb:6b:90:38:39:
83:3d:39:69:f7:5c:ce:50:25:e2:88:cb:db:cb:37:98:0a:73:
de:a0:52:5e:f2:e9:ff:8f:f8:11:e0:67:5a:21:fd:ab:a0:4a:
47:0a:52:e0:63:c8:64:5e:1a:c7:6b:4d:ed:5a:c4:2c:26:93:
f0:d7:67:81:0c:00:21:f8:e0:16:bd:ad:98:3c:67:e6:17:a5:
37:b3:bd:0b:cc:6d:4a:63:6f:e5:67:56:e2:f6:1a:40:3e:45:
06:0d:d8:9a:5e:37:3e:33:55:ec:f3:89:4b:d2:57:3d:42:f4:
e3:c8:72:bb:a1:f0:a0:ca:78:65:87:de:8e:6c:61:34:3d:9e:
da:6a:4f:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 01:24:26 2026 by rpki-client