Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/DTdD_Obz5zuCI8D_85SHmhlJoyc.roa
File: DTdD_Obz5zuCI8D_85SHmhlJoyc.roa (raw, json)
Hash identifier: Alt5xmiqLfocEpxE2O+NOw7epipmjOygk64CBIWBldA=
Subject key identifier: 0D:37:43:FC:E6:F3:E7:3B:82:23:C0:FF:F3:94:87:9A:19:49:A3:27
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01A09EDB3E91A9B55F46D3B6F760C8EAF350
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/DTdD_Obz5zuCI8D_85SHmhlJoyc.roa
Signing time: Mon 14 Sep 2026 07:39:23 +0000
ROA not before: Mon 14 Sep 2026 07:39:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212184
IP address blocks: 2a0e:b107:20b0::/48 maxlen: 48
2a0e:b107:20b1::/48 maxlen: 48
2a0e:b107:20b2::/48 maxlen: 48
2a0e:b107:20b3::/48 maxlen: 48
2a0e:b107:20b7::/48 maxlen: 48
2a0e:b107:20ba::/48 maxlen: 48
2a0e:b107:20bd::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Sep 2026 14:37:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9e:db:3e:91:a9:b5:5f:46:d3:b6:f7:60:c8:ea:f3:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Sep 14 07:39:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0d3743fce6f3e73b8223c0fff394879a1949a327
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:ea:ed:1a:f5:1c:7b:96:60:04:8a:0e:6a:fe:
52:2e:2e:bb:6e:2b:ac:cb:d3:17:69:21:fc:ee:f2:
bb:b6:89:ee:03:5e:ac:78:13:37:8e:de:f6:ff:0f:
69:1b:17:e7:db:56:fc:49:6b:d2:fb:6a:04:ce:f7:
b0:f8:78:57:c0:88:a0:d3:54:68:73:9a:17:dc:f7:
53:88:c3:60:5c:ea:df:eb:6a:04:13:af:f8:25:61:
ef:fe:32:de:31:8c:85:9b:96:a5:a1:f6:89:11:d8:
aa:28:8e:ee:d4:a3:b1:e2:0a:ae:ff:ad:54:b9:f4:
2a:19:e4:74:4e:d6:07:d6:3f:dc:ad:1d:b0:12:f5:
58:8d:56:0f:11:e3:8e:a5:26:0b:0f:bc:76:59:21:
2f:5f:3b:61:76:50:f3:d9:20:29:b1:ab:02:a9:66:
cb:3a:38:45:e0:a3:4f:7c:54:cc:14:86:58:e3:9e:
9c:c3:5f:e1:54:84:91:48:44:e9:64:15:75:cf:97:
be:81:65:2e:1b:03:ed:cf:4f:92:b2:96:2d:81:d7:
e0:c1:68:3b:5c:25:9e:23:9a:ed:97:b2:3a:27:e8:
a3:f6:58:d5:a8:15:8e:ee:b1:f4:54:10:9f:d9:bf:
a8:d8:64:b3:6d:89:91:e7:94:3d:25:53:ee:19:b2:
55:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:37:43:FC:E6:F3:E7:3B:82:23:C0:FF:F3:94:87:9A:19:49:A3:27
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/DTdD_Obz5zuCI8D_85SHmhlJoyc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:20b0::/46
2a0e:b107:20b7::/48
2a0e:b107:20ba::/48
2a0e:b107:20bd::/48
Signature Algorithm: sha256WithRSAEncryption
7a:16:5c:93:bf:77:eb:2d:91:39:f7:c7:a7:e5:a6:e2:b7:c0:
c9:b4:55:35:2a:6d:2d:8f:d3:6c:08:eb:11:a1:75:75:15:85:
4e:fc:2a:03:6b:56:67:6c:14:30:07:57:2b:1e:7c:a5:34:d4:
ed:e4:6f:4e:7c:6a:8c:a1:83:08:fc:db:60:af:b2:40:7b:4b:
61:38:75:56:6b:df:a6:a6:80:12:8f:90:82:44:95:2a:1a:4e:
7b:2a:ed:90:d7:02:6b:eb:62:51:f7:43:b2:7d:f0:b6:72:1e:
55:d0:25:b7:c1:18:27:47:6c:ca:18:7e:c8:2e:0f:e6:6d:c4:
d2:d1:6a:91:57:b0:5b:25:3b:43:66:81:99:62:2d:7e:fe:03:
73:05:a2:0c:b1:06:f3:2f:21:1f:4b:f9:82:16:3c:6b:5c:cf:
a6:57:c7:bb:51:20:7f:8c:9f:72:c7:8f:94:de:79:e5:be:06:
9b:cb:52:01:e8:19:77:13:62:3c:d1:94:65:fb:13:b2:a6:5e:
46:6e:a1:7a:a1:42:9d:bd:4d:5a:8a:0b:97:99:e3:fa:e9:f6:
bf:32:c4:aa:b9:83:e2:26:91:3e:39:40:9f:dc:c1:54:aa:ba:
60:c5:ea:67:89:6c:7f:bf:3c:32:23:6c:80:14:8b:6a:9a:bb:
1a:62:66:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 01:23:15 2026 by rpki-client