Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/AMYDVC-J4J7s_DLKJ7X8wF3bGaU.roa
File: AMYDVC-J4J7s_DLKJ7X8wF3bGaU.roa (raw, json)
Hash identifier: JEpmMgQHw88OUEAv/eBHtagnDRRmNwlfRbspDgET12s=
Subject key identifier: 00:C6:03:54:2F:89:E0:9E:EC:FC:32:CA:27:B5:FC:C0:5D:DB:19:A5
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01A09EDB3FF7319C5EE91120B039386EB628
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/AMYDVC-J4J7s_DLKJ7X8wF3bGaU.roa
Signing time: Mon 14 Sep 2026 07:39:23 +0000
ROA not before: Mon 14 Sep 2026 07:39:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212793
IP address blocks: 2a10:2f00:147::/48 maxlen: 48
2a10:2f01:2d0::/44 maxlen: 48
2a10:2f01:2d1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Sep 2026 20:52:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9e:db:3f:f7:31:9c:5e:e9:11:20:b0:39:38:6e:b6:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Sep 14 07:39:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=00c603542f89e09eecfc32ca27b5fcc05ddb19a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:5b:c1:d4:4f:1e:ad:3a:f4:69:82:8e:e4:2a:
92:8a:8c:a1:11:39:a9:ca:6f:3d:ee:65:1e:c0:66:
0e:67:3c:48:96:fc:dd:3e:b6:69:28:98:cc:5e:ff:
9d:0e:c0:05:d8:76:e4:cf:a2:b7:f2:73:35:68:54:
c9:52:7b:28:8f:19:54:af:dc:2b:b4:88:84:18:fc:
d2:bf:87:c6:ee:5f:f5:ac:3e:9e:a8:3f:64:c3:ed:
0b:e2:0d:b6:20:d3:2d:7b:8c:11:63:a9:9f:00:77:
ed:3d:37:fb:f2:54:8d:e3:4b:e3:42:c7:0b:90:60:
48:4c:55:aa:4f:e1:51:77:31:59:80:f9:36:c5:73:
ac:b9:59:d1:61:a6:79:ea:c7:52:36:0f:78:a7:42:
6c:3e:c7:0a:28:83:81:cf:23:0c:8a:90:de:c0:15:
ac:fe:d9:f4:70:f8:8a:ed:24:cf:6f:6b:6f:58:ef:
69:45:a5:5d:73:9b:42:91:0b:8e:e2:3d:6e:0d:82:
b6:44:e1:80:61:41:99:81:94:d1:fb:e8:c3:7e:3a:
5a:32:e1:8b:54:37:56:fc:95:cf:3e:a8:2a:15:e9:
e0:e6:76:db:af:e6:02:61:b3:80:e7:42:0a:22:a5:
a2:2e:21:75:5a:1b:e3:74:ca:b1:24:c2:33:7f:a4:
72:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:C6:03:54:2F:89:E0:9E:EC:FC:32:CA:27:B5:FC:C0:5D:DB:19:A5
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/AMYDVC-J4J7s_DLKJ7X8wF3bGaU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:2f00:147::/48
2a10:2f01:2d0::/44
Signature Algorithm: sha256WithRSAEncryption
89:d7:e9:6e:9c:84:ce:79:a7:36:3e:7a:82:23:05:be:f9:8c:
21:8e:3c:09:9d:5d:d3:56:7f:45:aa:f0:fa:77:32:e9:c4:d9:
91:8d:5c:d3:39:91:14:29:09:e2:cf:c6:ff:1d:b3:02:6e:58:
d2:88:36:67:f7:23:83:8d:2b:ef:80:94:b2:8b:df:57:04:3c:
1f:50:7f:88:20:b0:64:5f:ca:74:85:30:2c:fd:c5:8a:bc:dc:
ae:8c:48:24:f0:a8:7d:10:04:59:96:46:65:25:d0:31:5d:47:
79:45:fd:3b:60:96:6b:a9:ea:3e:ea:7c:37:01:10:3b:20:05:
12:08:90:96:fb:9d:51:08:64:41:43:89:4c:b6:c4:a2:b3:80:
4a:8c:1b:cc:ee:71:3b:3e:f5:6e:82:81:15:f3:e3:3c:32:18:
1d:50:c8:b6:da:65:8f:ef:63:82:d5:03:ee:1b:9d:7a:25:cb:
89:54:83:09:d1:43:61:d7:40:78:f5:61:86:44:1f:70:2a:c2:
d7:32:4c:c7:81:c8:a7:2f:7c:e3:77:5f:76:af:db:0d:dd:19:
85:5c:71:08:4b:48:e0:77:cb:16:c2:95:1e:be:dc:e9:7c:e1:
f4:4d:ea:e5:81:8f:0e:62:5c:84:45:7c:3a:16:9e:99:29:34:
29:b4:b6:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 01:22:58 2026 by rpki-client