Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/H42bxh5f3mJCSGABoCJe_ENshts.roa
File: H42bxh5f3mJCSGABoCJe_ENshts.roa (raw, json)
Hash identifier: 0VL6Ld8LusIBuHWrDWEAzWhMkqP5W4Fvb+RekZfw1OY=
Subject key identifier: 1F:8D:9B:C6:1E:5F:DE:62:42:48:60:01:A0:22:5E:FC:43:6C:86:DB
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019DA95090B6BE883D59CB8F895D247D1E66
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/H42bxh5f3mJCSGABoCJe_ENshts.roa
Signing time: Mon 20 Apr 2026 05:15:22 +0000
ROA not before: Mon 20 Apr 2026 05:15:22 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202256
IP address blocks: 2a06:de02:400::/38 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Apr 2026 13:21:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a9:50:90:b6:be:88:3d:59:cb:8f:89:5d:24:7d:1e:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Apr 20 05:15:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1f8d9bc61e5fde6242486001a0225efc436c86db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:92:b6:b1:ce:83:ba:08:cd:fa:de:58:e0:b7:
06:77:2a:bb:c5:4c:82:06:34:8a:ca:88:b5:c7:35:
a0:40:04:62:56:4e:70:48:65:33:43:52:bc:88:7a:
45:c9:19:ba:1f:48:7e:85:ea:74:24:c9:b0:4f:5b:
ec:6d:17:33:db:42:60:83:84:de:c8:9a:83:67:f9:
9c:36:41:96:26:f4:27:bb:a3:08:b3:08:b3:43:c4:
6b:af:e8:73:11:21:38:84:1c:00:06:62:9c:38:bc:
4e:38:79:32:7d:ad:cb:dd:2b:5e:5d:1e:54:fc:c3:
48:ba:3d:5d:f8:1e:b0:17:60:ac:0b:40:0d:2e:9d:
9e:c6:c7:6e:3e:ab:c9:8a:36:06:4e:11:4c:6d:37:
40:ab:25:78:cf:b3:a0:2f:7d:55:b3:03:50:e9:2d:
2e:ad:cd:2f:d6:7c:f9:d9:9b:af:98:9c:2f:7c:c7:
b0:60:b2:06:aa:a8:a4:71:07:a3:1a:7e:29:e6:c5:
4e:ed:a7:4d:d7:ba:75:49:17:16:a4:f1:f5:32:3c:
ba:00:c4:ce:64:eb:f4:9d:59:74:2f:41:00:74:90:
6e:b6:56:da:38:ed:65:4e:b3:6a:b2:83:9d:6f:74:
42:35:b8:02:cc:b5:62:ef:6c:f3:8a:36:8b:60:51:
a5:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:8D:9B:C6:1E:5F:DE:62:42:48:60:01:A0:22:5E:FC:43:6C:86:DB
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/H42bxh5f3mJCSGABoCJe_ENshts.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:de02:400::/38
Signature Algorithm: sha256WithRSAEncryption
27:4c:c6:e1:07:cf:b3:12:a8:7f:2c:0f:75:04:70:0e:4a:47:
28:70:9e:61:38:62:03:b5:56:9a:08:7d:4a:5a:b0:67:2b:cc:
53:5d:47:bc:87:3f:84:88:88:93:6c:3c:70:15:32:8e:2b:84:
87:8f:82:76:0d:09:17:4c:c6:e0:7a:8a:d2:7d:e5:a7:6e:5a:
63:57:08:65:10:cf:56:f6:a4:0d:ff:b3:23:74:7a:44:2b:92:
4e:f8:d2:5e:06:3e:49:30:0b:d3:fa:ab:ca:49:36:65:b0:bc:
af:28:f1:3a:fb:6a:aa:f0:29:d2:d1:bc:52:12:c9:f4:ec:dd:
eb:fd:14:95:d5:bc:ab:44:e6:ce:1e:4b:1f:54:62:71:fa:c5:
b6:c9:ac:ca:0e:9f:a5:10:d9:5d:17:73:90:54:c4:ca:bb:1b:
e4:60:c2:78:84:b3:89:ec:0f:f2:2e:e5:3d:77:78:40:87:d9:
75:d9:d4:4e:58:31:2f:13:cc:08:5b:ba:e2:19:f6:1d:4d:b5:
27:2f:dd:41:71:e3:a5:6a:63:ea:05:ee:d9:17:fe:af:55:82:
0c:b6:42:5f:94:ef:b2:ff:e9:84:02:38:9a:24:7c:0f:3a:f0:
b4:13:3a:79:83:7c:62:e4:14:8b:b9:1a:8b:ed:fd:a3:64:94:
09:b9:8b:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 20 19:44:29 2026 by rpki-client