Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/CKX-FX-IyA-6gwHwzQ13jw8qedc.roa
File: CKX-FX-IyA-6gwHwzQ13jw8qedc.roa (raw, json)
Hash identifier: TyFpTULLtCJdBNfgcKx5oDJKMi1tgfOJiHtOB1rUKts=
Subject key identifier: 08:A5:FE:15:7F:88:C8:0F:BA:83:01:F0:CD:0D:77:8F:0F:2A:79:D7
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01A09A0BFBFE20F628BCC6D30BB3CDCE5337
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/CKX-FX-IyA-6gwHwzQ13jw8qedc.roa
Signing time: Sun 13 Sep 2026 09:14:31 +0000
ROA not before: Sun 13 Sep 2026 09:14:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198747
IP address blocks: 2a0e:97c0:38f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Sep 2026 12:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9a:0b:fb:fe:20:f6:28:bc:c6:d3:0b:b3:cd:ce:53:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Sep 13 09:14:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=08a5fe157f88c80fba8301f0cd0d778f0f2a79d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:62:53:de:d7:09:aa:8a:2f:7a:c7:52:9b:50:
aa:82:d5:e1:0c:57:45:96:81:4f:72:e7:e6:27:78:
03:16:cf:c2:fa:30:5c:6a:88:82:8e:04:86:ba:ae:
ee:cf:d7:a1:30:b7:b7:e5:ac:fc:ad:52:4c:a9:82:
61:a2:c1:73:20:bc:94:71:00:b8:46:a9:f7:47:96:
e6:a8:3c:56:87:43:9f:27:63:3e:26:50:36:10:fb:
d4:22:a4:1a:ce:19:76:86:d7:4c:70:db:90:67:a6:
15:31:70:d6:96:76:94:fc:ab:93:b9:ce:d6:88:3a:
05:79:1f:7b:41:5e:d1:1a:d3:79:19:56:86:a4:82:
55:cb:65:88:df:d1:cc:3d:fa:f0:31:3d:20:8f:35:
e0:ee:eb:81:cf:d9:06:d9:23:59:7b:9c:a4:b8:51:
5e:11:c6:42:d2:65:4e:eb:8d:54:39:ed:60:52:cc:
c7:f4:c6:26:7f:e0:3e:bf:50:43:d0:72:1d:33:4f:
fc:59:c3:42:75:a0:2c:0e:25:27:82:a0:99:6e:6e:
88:1e:d3:27:95:06:98:c1:82:bb:0c:ed:fa:0a:ad:
21:4e:67:6d:fe:15:96:8b:79:a9:94:02:38:51:28:
88:b0:5d:7b:a5:d7:ac:35:c3:07:c1:df:a5:d3:9b:
da:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:A5:FE:15:7F:88:C8:0F:BA:83:01:F0:CD:0D:77:8F:0F:2A:79:D7
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/CKX-FX-IyA-6gwHwzQ13jw8qedc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:38f::/48
Signature Algorithm: sha256WithRSAEncryption
af:5d:77:bb:8c:a5:19:d3:77:22:ec:b4:30:81:8a:a0:5b:4e:
ad:a0:b2:a6:c1:7c:4f:73:a0:ee:7e:c6:c2:d8:99:fc:4f:eb:
7b:0e:98:8b:b7:42:8c:81:7f:bb:96:81:9b:41:46:1f:18:48:
8c:74:d2:89:a7:37:3c:3d:45:1d:31:82:57:14:da:f1:ff:65:
ac:89:1c:ee:c8:20:1e:9a:da:8a:e6:b3:ed:12:e6:17:7c:9a:
bd:2d:a2:d2:3d:86:8a:c7:45:3d:e0:f2:43:88:fe:96:14:bb:
67:35:14:ff:e7:a9:08:97:57:95:c6:d2:8e:db:e2:e0:f9:31:
51:63:f0:af:ab:2e:97:2f:8a:10:c2:61:62:2e:15:45:30:08:
74:8d:98:df:1b:d1:30:60:c2:e5:06:5f:5e:47:db:74:05:d1:
2c:51:a2:81:02:de:e0:c9:9e:bb:e5:57:43:2e:1b:43:a8:86:
d9:2f:49:5f:9d:f6:fe:55:56:f1:f6:e5:26:bc:72:2c:d7:bd:
a9:4a:e5:40:14:11:db:16:d7:8a:4c:e8:67:13:fa:cb:20:24:
8a:c4:a4:07:1d:10:dc:de:19:a6:e0:32:df:dd:1b:f0:b9:b4:
a7:12:3f:6b:a1:d9:31:9a:60:c2:fd:87:60:7b:8f:0a:11:2f:
c5:bc:da:36
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAaCaC/v+IPYovMbTC7PNzlM3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjYwOTEzMDkxNDMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwOGE1ZmUxNTdmODhjODBmYmE4MzAxZjBjZDBkNzc4ZjBmMmE3OWQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1WJT3tcJqoovesdSm1CqgtXhDFdF
loFPcufmJ3gDFs/C+jBcaoiCjgSGuq7uz9ehMLe35az8rVJMqYJhosFzILyUcQC4
Rqn3R5bmqDxWh0OfJ2M+JlA2EPvUIqQazhl2htdMcNuQZ6YVMXDWlnaU/KuTuc7W
iDoFeR97QV7RGtN5GVaGpIJVy2WI39HMPfrwMT0gjzXg7uuBz9kG2SNZe5ykuFFe
EcZC0mVO641UOe1gUszH9MYmf+A+v1BD0HIdM0/8WcNCdaAsDiUngqCZbm6IHtMn
lQaYwYK7DO36Cq0hTmdt/hWWi3mplAI4USiIsF17pdesNcMHwd+l05varQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFAil/hV/iMgPuoMB8M0Nd48PKnnXMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvQ0tYLUZYLUl5QS02Z3dId3pRMTNqdzhxZWRjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6XwAOP
MA0GCSqGSIb3DQEBCwUAA4IBAQCvXXe7jKUZ03ci7LQwgYqgW06toLKmwXxPc6Du
fsbC2Jn8T+t7DpiLt0KMgX+7loGbQUYfGEiMdNKJpzc8PUUdMYJXFNrx/2WsiRzu
yCAemtqK5rPtEuYXfJq9LaLSPYaKx0U94PJDiP6WFLtnNRT/56kIl1eVxtKO2+Lg
+TFRY/Cvqy6XL4oQwmFiLhVFMAh0jZjfG9EwYMLlBl9eR9t0BdEsUaKBAt7gyZ67
5VdDLhtDqIbZL0lfnfb+VVbx9uUmvHIs172pSuVAFBHbFteKTOhnE/rLICSKxKQH
HRDc3hmm4DLf3RvwubSnEj9rodkxmmDC/Ydge48KES/FvNo2
-----END CERTIFICATE-----
Generated at Sun Sep 13 20:31:29 2026 by rpki-client