Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/B41qAGKDEEvstRpcEulJg3jCEcY.roa
File: B41qAGKDEEvstRpcEulJg3jCEcY.roa (raw, json)
Hash identifier: 4nOFBI3nZCGIGcHwVOzCzEEUmmW26KvCEA8OHiZh4QM=
Subject key identifier: 07:8D:6A:00:62:83:10:4B:EC:B5:1A:5C:12:E9:49:83:78:C2:11:C6
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01A09ED400E01A03172EF4F74E39542519AA
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/B41qAGKDEEvstRpcEulJg3jCEcY.roa
Signing time: Mon 14 Sep 2026 07:31:29 +0000
ROA not before: Mon 14 Sep 2026 07:31:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210617
IP address blocks: 2a0e:97c0:5a0::/48 maxlen: 48
2a0e:97c0:5a1::/48 maxlen: 48
2a0e:97c0:5af::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Sep 2026 20:52:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9e:d4:00:e0:1a:03:17:2e:f4:f7:4e:39:54:25:19:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Sep 14 07:31:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=078d6a006283104becb51a5c12e9498378c211c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d9:3e:47:e0:0c:a6:de:f3:f1:d4:0c:da:6c:
bc:6d:fc:8c:a6:0c:a3:62:a0:8c:f4:b2:bb:cc:c6:
68:7e:00:b9:98:11:3f:c4:bd:30:b1:b9:e0:26:6f:
1f:7d:bb:d6:13:a6:33:2d:d1:58:74:b7:8f:36:2f:
a5:4d:52:e3:8c:e0:64:4c:71:7e:e8:8e:ba:2a:f9:
39:7e:12:52:0e:19:71:d4:bb:5b:9d:15:35:45:23:
a5:4b:09:5a:08:ba:40:e3:e2:39:74:4e:de:51:58:
16:fe:55:aa:74:53:fc:59:7a:6b:8c:06:5c:79:93:
8d:04:ab:d2:ec:17:1c:eb:8c:f5:5c:22:1f:8a:f7:
d2:7f:dc:f0:df:a0:a8:1a:b2:28:c1:45:84:a2:29:
c3:f4:6e:25:fe:79:84:45:34:07:15:0f:33:70:c9:
74:26:a1:ae:85:cc:22:fd:d6:bf:24:b1:85:ac:0f:
03:71:0d:b4:48:db:f3:7b:12:bb:b7:e8:e0:6d:47:
e6:34:02:85:f5:17:7b:4a:68:b5:67:f3:38:35:78:
15:52:55:ca:db:25:f4:8c:84:ce:c9:42:12:6c:54:
8a:5e:09:52:27:c8:e2:e2:b8:ce:dc:ee:67:ca:3f:
6f:7c:8c:51:93:d3:94:8b:9e:c6:b6:08:51:26:1f:
fa:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:8D:6A:00:62:83:10:4B:EC:B5:1A:5C:12:E9:49:83:78:C2:11:C6
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/B41qAGKDEEvstRpcEulJg3jCEcY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:5a0::/47
2a0e:97c0:5af::/48
Signature Algorithm: sha256WithRSAEncryption
64:60:65:00:f2:65:28:3f:a7:f3:0b:05:cc:fc:06:05:fc:d8:
84:2b:9d:43:b0:ee:cf:78:01:85:25:b8:e4:70:72:a8:23:e1:
b1:b2:d4:0a:1b:20:f3:0b:9c:57:e0:21:d7:89:c1:30:ba:b9:
da:62:ef:86:01:ec:88:07:64:5b:ed:a0:d1:a1:ed:c4:51:c4:
8a:a7:da:5c:65:8a:48:d4:2d:24:4d:7a:bc:1c:19:6c:41:3f:
23:c5:e6:bc:f2:08:1e:2d:78:d3:a4:2c:98:92:ec:e5:e0:4d:
80:53:45:54:25:05:e5:03:e6:ef:9d:8c:aa:1a:73:9e:1f:b5:
e8:3e:c8:3f:75:79:f3:9d:9e:f2:a1:90:4e:04:ee:d5:41:73:
f2:04:de:d0:15:06:d4:b8:4d:b2:cb:5e:07:80:80:cd:d8:56:
dd:f5:0b:4d:ba:93:5c:ac:f2:4e:c2:eb:78:ad:fd:34:6f:f5:
22:91:26:7f:43:67:45:5a:da:9a:5c:ab:27:b4:b4:91:57:85:
e2:7c:a3:86:00:a4:7b:2d:2b:e6:87:c2:8d:99:08:9a:50:d9:
74:90:f6:51:f5:62:77:79:41:92:82:4d:2b:9b:0b:91:b9:91:
01:88:ec:ab:7d:f5:9a:25:79:3c:6a:f8:4f:59:ce:b8:96:f9:
c5:c5:9b:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 01:23:17 2026 by rpki-client