Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/I9pKsuxs4WMUvdM_eLgycCHqaeM.roa
File: I9pKsuxs4WMUvdM_eLgycCHqaeM.roa (raw, json)
Hash identifier: s/mvUumnvdkRfgGqKJqzwDHkmMVwzPBI25bu2jiR2io=
Subject key identifier: 23:DA:4A:B2:EC:6C:E1:63:14:BD:D3:3F:78:B8:32:70:21:EA:69:E3
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019FF82DB70E4BC6B8DD6B475BF27A303983
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/I9pKsuxs4WMUvdM_eLgycCHqaeM.roa
Signing time: Wed 12 Aug 2026 22:52:53 +0000
ROA not before: Wed 12 Aug 2026 22:52:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211729
IP address blocks: 2a10:ccc0:d00::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 22:52:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f8:2d:b7:0e:4b:c6:b8:dd:6b:47:5b:f2:7a:30:39:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Aug 12 22:52:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=23da4ab2ec6ce16314bdd33f78b8327021ea69e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:69:04:38:a5:e2:e3:36:2d:00:46:15:e5:59:
c4:40:f5:4b:48:76:3e:aa:84:11:a2:96:f1:18:69:
27:b6:f7:77:8e:a6:9e:c1:1d:6f:9e:dc:9c:82:92:
59:ca:8b:38:c0:a2:df:95:1f:02:86:8f:ba:e7:36:
5c:5b:34:54:b3:86:df:63:21:21:3d:2e:b5:6e:52:
bc:4d:c1:c0:17:c2:03:9b:0a:a7:80:45:0f:67:8d:
6f:a0:22:8c:93:dd:8d:8c:eb:cc:49:54:6d:d8:0c:
a2:db:c4:9a:bf:35:84:15:03:ff:8b:21:66:8d:8f:
6d:da:e1:34:21:7f:6a:82:d1:34:28:94:45:72:2e:
e0:6e:eb:92:33:cf:76:53:45:7f:70:ae:23:3e:1c:
89:29:46:ca:a8:ca:9e:97:30:b7:56:61:d6:bd:8a:
06:85:de:59:08:43:1d:b5:5f:d0:ed:b0:4e:eb:d5:
13:83:49:f6:e2:60:a6:80:a9:5c:1d:c2:de:6d:c2:
4c:04:2e:88:9a:bf:84:93:ee:c5:3b:a8:b6:c1:aa:
26:b4:bd:ae:62:a7:67:c0:15:f6:df:f7:80:ac:3d:
4b:20:5b:dd:ad:b7:de:df:b6:10:a6:4e:73:50:45:
07:5d:f8:10:a8:b5:27:7f:bf:ab:2c:f8:22:bc:d1:
36:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:DA:4A:B2:EC:6C:E1:63:14:BD:D3:3F:78:B8:32:70:21:EA:69:E3
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/I9pKsuxs4WMUvdM_eLgycCHqaeM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:ccc0:d00::/44
Signature Algorithm: sha256WithRSAEncryption
39:89:66:0f:44:39:5e:8c:38:3a:3f:65:ee:e5:97:7e:44:8b:
bf:52:ed:55:7c:d2:66:47:d9:f3:d9:f7:20:01:bc:1e:ea:70:
96:76:71:30:5b:c4:f4:51:d4:bc:20:4c:3e:8c:29:72:4f:0f:
4f:8c:4e:c1:c9:eb:03:6d:9e:63:b3:7e:5b:a3:07:08:f9:b5:
c2:cc:fe:5d:6c:db:2f:7f:bb:48:a0:e8:e4:44:41:4c:48:89:
8e:d0:f2:46:46:cc:61:d7:70:ed:d5:70:97:04:99:a6:e1:2d:
2f:af:bc:15:ce:28:2e:24:84:68:6a:1e:e4:dc:59:1b:9c:12:
58:a4:10:5c:d8:12:cd:ba:13:1e:93:4f:bf:0e:f1:5c:59:98:
99:3a:10:82:a4:20:6d:9d:26:e4:c3:e5:f8:a6:1d:4f:e2:38:
03:c7:17:75:f8:1b:7e:39:ff:cd:92:e4:92:00:ba:6d:00:80:
6d:16:21:05:f7:24:ae:af:61:77:14:75:9a:18:b5:fb:df:d9:
dd:cb:97:f3:b6:5e:6c:f2:8c:be:5b:f7:38:65:49:13:fa:a2:
1c:f7:9b:aa:2d:a1:76:c4:18:5c:c5:d1:28:7b:d5:7d:80:00:
ec:8d:dd:33:0c:c7:ca:a0:9d:6a:7e:7c:31:b2:11:71:c9:a2:
eb:d9:69:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 02:44:20 2026 by rpki-client