Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/AjqGM3igFyUigvwUVgoiflPNfpE.roa
File: AjqGM3igFyUigvwUVgoiflPNfpE.roa (raw, json)
Hash identifier: iE26LRX2b2HMmBCU4Ov9/XgPuXWkPVRWuCTlAzCiero=
Subject key identifier: 02:3A:86:33:78:A0:17:25:22:82:FC:14:56:0A:22:7E:53:CD:7E:91
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01A09ECC4C5B634D15B52D131D8327E6318F
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/AjqGM3igFyUigvwUVgoiflPNfpE.roa
Signing time: Mon 14 Sep 2026 07:23:04 +0000
ROA not before: Mon 14 Sep 2026 07:23:04 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203027
IP address blocks: 2a10:ccc0:d1c0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Sep 2026 20:52:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9e:cc:4c:5b:63:4d:15:b5:2d:13:1d:83:27:e6:31:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Sep 14 07:23:04 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=023a863378a017252282fc14560a227e53cd7e91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:96:d3:6f:df:ae:49:f1:e8:68:b7:18:8f:d8:
eb:32:14:c6:e7:87:08:ed:34:43:4a:fb:ee:d7:e0:
c9:17:b3:66:5f:ea:15:c7:d0:dc:52:9e:9b:4f:43:
a3:7b:8c:6f:c8:c2:55:37:51:c0:95:6d:76:e7:ad:
b0:4f:f6:5c:65:97:53:8d:65:b1:05:80:1a:31:ba:
d9:3c:b9:66:02:0a:b8:6f:98:75:19:59:dc:f2:67:
de:9e:cf:d4:b8:e4:5f:d5:5e:55:1c:3d:65:30:24:
db:d9:b5:94:b1:8e:db:57:7d:48:ec:78:69:d6:bd:
a1:aa:8d:37:a9:d4:31:b6:13:c7:3f:c5:cf:9f:0a:
98:f3:d0:ae:25:8e:1d:8b:63:21:6c:55:14:77:a9:
7a:d2:17:40:93:ec:98:5a:c7:9d:7a:02:07:1e:30:
cf:ad:c0:2c:10:b0:74:52:59:7f:bb:bf:b5:53:18:
2b:37:b2:0f:f9:8b:bc:26:c0:f7:8b:ff:fc:b4:83:
49:a7:78:49:ba:ac:ff:62:b0:4f:12:5c:eb:d7:b4:
db:4e:cd:a2:64:38:44:f5:d4:ad:61:5b:c8:dc:02:
0a:92:87:97:82:3f:c9:c1:f6:9e:2c:14:50:db:f2:
c2:96:39:66:d5:b8:f7:20:c3:be:e0:f4:e5:f3:33:
6a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:3A:86:33:78:A0:17:25:22:82:FC:14:56:0A:22:7E:53:CD:7E:91
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/AjqGM3igFyUigvwUVgoiflPNfpE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:ccc0:d1c0::/44
Signature Algorithm: sha256WithRSAEncryption
93:2c:46:22:25:77:71:29:7b:30:00:87:13:7a:33:2d:72:4e:
78:c1:de:74:6b:55:21:c3:4f:ae:b3:21:18:9b:c7:1c:f8:09:
ea:a8:89:a4:85:b4:2b:5b:66:9d:56:f9:af:24:0c:c6:d4:b8:
bc:3a:b1:57:cc:93:9b:59:87:bc:c6:9a:ef:19:64:f9:be:70:
3f:4c:99:b6:96:a0:72:12:04:84:70:df:f1:bc:84:07:6e:3f:
d3:86:26:5c:d4:fb:70:c9:97:79:94:76:64:29:36:e1:9c:f2:
b4:02:cd:c3:77:0d:cc:00:35:63:47:2c:c5:32:0f:38:cf:3c:
21:f1:0a:fb:94:59:9a:05:63:68:d0:a6:3b:e9:60:d3:7e:97:
7d:b3:dc:59:24:c0:0b:b9:af:66:a8:f3:a4:ad:a0:b9:75:e1:
b2:95:96:55:49:eb:db:4c:b8:5b:74:43:d1:c2:1e:31:79:02:
a6:f0:0b:82:79:70:dd:87:c1:64:d9:fb:a2:fa:83:97:9c:41:
d1:a5:fc:10:29:27:b6:f8:92:fb:f8:5b:bd:09:66:25:8d:23:
0f:6d:6b:a3:38:3b:77:0c:90:10:ad:ff:5c:0e:41:23:6b:46:
92:b8:0b:d6:68:15:b1:30:f6:ab:a0:08:a8:59:22:43:ef:ff:
bc:b6:7d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 01:24:10 2026 by rpki-client