Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/I8FksnjhD-MhCkui0txQLWn1Vv0.roa
File: I8FksnjhD-MhCkui0txQLWn1Vv0.roa (raw, json)
Hash identifier: s6GfFBpl79+CII2iCDGeZT5PBjF+fIzo6/xw4gZ/G7M=
Subject key identifier: 23:C1:64:B2:78:E1:0F:E3:21:0A:4B:A2:D2:DC:50:2D:69:F5:56:FD
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019EAE961BD66588254EC44406C57A110DDA
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/I8FksnjhD-MhCkui0txQLWn1Vv0.roa
Signing time: Tue 09 Jun 2026 22:52:13 +0000
ROA not before: Tue 09 Jun 2026 22:52:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214953
IP address blocks: 2a10:2f01:403::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ae:96:1b:d6:65:88:25:4e:c4:44:06:c5:7a:11:0d:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jun 9 22:52:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=23c164b278e10fe3210a4ba2d2dc502d69f556fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:50:f4:2c:55:0d:d0:e0:cd:ed:98:19:5c:28:
42:45:40:ec:a4:0d:40:a1:b1:c0:d8:5b:cc:3e:88:
ba:5f:4c:a6:da:ff:b5:83:cf:6e:45:61:e6:8a:26:
3d:47:d8:50:71:a6:ab:ec:91:4f:71:27:27:6a:6c:
a3:6d:b3:2a:4e:f0:0d:8c:63:d9:a6:12:c3:97:92:
af:95:43:3f:8a:3e:1b:63:28:fa:d9:c4:a9:54:19:
72:45:93:d4:c5:4c:a0:75:a0:c7:68:75:75:d8:44:
6e:3d:aa:52:e4:35:95:99:de:e3:96:12:0c:bc:c8:
42:8b:c8:f0:f1:3c:d6:d7:db:b3:f5:ba:57:2a:66:
71:78:bb:6f:e6:b3:35:71:50:6f:2d:31:2c:60:9b:
0c:af:a2:c9:8b:55:a7:bf:7f:85:8e:67:32:7c:3d:
aa:5e:23:a7:eb:1b:61:9a:59:b3:b9:69:e5:22:d4:
9b:b0:cc:03:f3:e9:bd:76:ac:77:0b:12:1c:cf:88:
0f:00:e5:33:71:eb:82:37:3f:19:b4:fa:b4:bb:13:
3c:7d:5a:2e:7f:04:0e:9c:a5:8e:a3:a5:88:a2:e1:
e6:5d:f4:d3:72:8a:a9:99:33:da:f1:48:d1:c2:08:
45:4a:7d:39:a7:5d:b5:10:9c:a6:c7:84:f7:f2:06:
f5:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:C1:64:B2:78:E1:0F:E3:21:0A:4B:A2:D2:DC:50:2D:69:F5:56:FD
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/I8FksnjhD-MhCkui0txQLWn1Vv0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:2f01:403::/48
Signature Algorithm: sha256WithRSAEncryption
2c:7b:40:1a:73:24:05:7c:4d:7d:e0:c2:84:0f:3b:5d:65:d0:
df:2c:95:d0:8f:6e:10:5e:43:a7:20:a7:2d:0a:4b:cc:9d:b2:
44:cb:96:85:1b:7e:67:9f:da:2b:03:ee:9f:ae:ce:4c:cb:31:
3c:d5:02:1a:e8:31:de:8b:62:1d:a9:ec:de:5d:42:41:ac:d8:
ea:17:9a:00:3e:8c:2e:d8:ca:90:62:65:ab:ea:5c:14:7a:86:
26:18:dc:6e:79:d9:e0:b3:93:b2:a3:b0:94:fa:36:e1:bb:51:
08:5d:c2:c6:6f:07:5a:28:86:8a:c8:44:0e:c5:05:4a:61:1a:
80:e6:5a:1a:5b:b7:bc:78:1f:16:12:0b:ba:91:3b:74:84:ef:
22:6c:b1:06:26:93:51:8f:81:0a:59:c1:8b:aa:d2:37:64:b5:
13:b2:eb:23:c1:fb:84:a2:de:cf:e3:fb:97:1e:e5:9c:ad:af:
41:25:9a:02:12:43:e0:07:fc:96:18:c5:1a:d8:5a:c5:96:3b:
da:79:c2:37:aa:3e:89:22:a8:68:e0:e2:93:70:b3:9f:b0:aa:
d6:90:88:88:72:43:90:a9:e8:82:1d:06:74:dc:db:02:8d:34:
86:73:42:c7:ea:c3:48:a5:86:63:ad:ad:f0:6e:22:5d:d7:13:
9d:9b:25:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:38:27 2026 by rpki-client