Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/H_fWVb72LzlbAhnKQWEmvWCglxQ.roa
File: H_fWVb72LzlbAhnKQWEmvWCglxQ.roa (raw, json)
Hash identifier: 2PNFgigrXVI577Ydi8fXGFGTNsFLOu9CJDzhLZ/CEwY=
Subject key identifier: 1F:F7:D6:55:BE:F6:2F:39:5B:02:19:CA:41:61:26:BD:60:A0:97:14
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01A09ECE888238D2DCC3F80B8A43A695B07E
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/H_fWVb72LzlbAhnKQWEmvWCglxQ.roa
Signing time: Mon 14 Sep 2026 07:25:30 +0000
ROA not before: Mon 14 Sep 2026 07:25:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208699
IP address blocks: 2a0e:97c0:730::/48 maxlen: 48
2a0e:97c0:731::/48 maxlen: 48
2a0e:97c0:738::/45 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Sep 2026 20:52:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9e:ce:88:82:38:d2:dc:c3:f8:0b:8a:43:a6:95:b0:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Sep 14 07:25:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1ff7d655bef62f395b0219ca416126bd60a09714
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:18:bf:3c:ba:72:05:03:78:57:d8:fd:d1:80:
c7:c6:42:2f:c3:9f:cd:4f:d5:f0:51:28:0c:05:08:
53:ee:7d:c2:2d:8b:35:e2:e2:4d:61:0e:d0:87:a0:
d3:ab:4c:c0:05:b5:09:bb:1d:93:95:ed:d1:1e:13:
b9:6e:09:1e:62:08:66:4b:4f:42:c8:21:30:ab:04:
1f:94:58:c3:89:d6:54:97:e8:83:61:01:27:d5:2e:
fc:99:68:10:0e:a7:fd:29:16:8c:ed:0e:d5:7c:11:
43:d8:58:f7:6e:dc:e0:cc:30:59:1b:d0:f0:ca:a0:
66:92:c8:0c:75:0f:19:7f:16:21:5d:37:7c:b9:ce:
e9:bc:29:cb:ee:c3:ee:94:14:3c:b6:7d:34:44:3e:
61:e1:b1:39:02:c7:f3:d9:4d:93:b8:76:d9:e3:67:
60:32:47:29:a2:81:63:28:cb:48:89:70:80:89:30:
77:0b:99:25:3e:9f:f5:4b:a6:e9:be:43:a6:d3:e7:
70:b4:fc:ce:cd:52:8b:ff:75:7c:29:8c:02:d9:23:
1d:d8:39:55:2f:f2:59:b6:31:15:63:da:c4:53:ab:
6d:8e:dd:91:cf:f6:33:20:c3:6f:3c:a4:ad:1b:4b:
2b:2d:35:78:7a:a8:b2:d7:7f:80:5a:5a:09:0f:c5:
24:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:F7:D6:55:BE:F6:2F:39:5B:02:19:CA:41:61:26:BD:60:A0:97:14
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/H_fWVb72LzlbAhnKQWEmvWCglxQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:730::/47
2a0e:97c0:738::/45
Signature Algorithm: sha256WithRSAEncryption
6e:7d:09:d2:80:11:27:a9:8c:74:78:3c:9e:fc:3b:79:52:a9:
fe:2b:c6:af:e0:75:b7:4f:19:c1:75:ff:1c:41:63:b6:2e:7f:
a0:34:ac:12:ca:c8:93:40:eb:92:80:66:17:a6:1c:ec:d9:2a:
a1:71:8e:e4:ee:40:96:9d:06:c4:df:46:52:52:91:21:b9:c1:
c3:82:93:ad:48:32:1c:4d:01:59:58:67:b0:81:99:91:1f:55:
ed:55:da:8a:f0:0f:b7:bd:cb:a2:9d:fe:3e:1a:5d:92:f2:6c:
75:84:3e:41:bd:20:aa:e2:9b:a8:25:78:3c:d6:9f:f4:bd:49:
e2:2d:0f:84:c2:64:85:a8:f8:90:6f:4c:39:48:6e:66:1d:69:
18:e2:6b:47:5b:73:cc:20:fb:7a:32:a3:07:71:51:53:78:d2:
26:97:c8:71:90:4d:e5:bc:f5:80:56:89:01:dd:fd:22:c5:d4:
6e:b7:de:62:d9:cd:20:ed:05:5a:94:b6:f8:65:e7:a6:8d:c2:
1f:00:f5:48:6a:a5:40:b6:76:fc:45:73:01:d7:9f:34:e8:cb:
98:ef:be:35:78:17:c3:51:6a:89:de:c0:5d:c9:c4:a8:e5:80:
34:a9:bd:5e:b1:99:4b:49:18:f5:4e:6f:2e:b8:dc:d7:2e:84:
af:19:9a:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 01:23:50 2026 by rpki-client