Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Ik180veh-xaD_9wqbM5N-tdBDvg.roa
File: Ik180veh-xaD_9wqbM5N-tdBDvg.roa (raw, json)
Hash identifier: ymh6/dQrfwLtelEI9JJa+DlyBnZ10j/LweVLR5BPwvU=
Subject key identifier: 22:4D:7C:D2:F7:A1:FB:16:83:FF:DC:2A:6C:CE:4D:FA:D7:41:0E:F8
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019CF756AAF526F1F07001CDDCDE68037CED
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Ik180veh-xaD_9wqbM5N-tdBDvg.roa
Signing time: Mon 16 Mar 2026 15:49:38 +0000
ROA not before: Mon 16 Mar 2026 15:49:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6079
IP address blocks: 2a0e:97c5:100::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Mar 2026 00:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f7:56:aa:f5:26:f1:f0:70:01:cd:dc:de:68:03:7c:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Mar 16 15:49:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=224d7cd2f7a1fb1683ffdc2a6cce4dfad7410ef8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:4c:b5:18:be:00:dc:99:c6:e6:db:c5:64:01:
21:77:13:b9:79:27:08:c7:09:70:6e:68:31:a9:fb:
1f:c1:e1:c5:c6:ca:20:09:d4:55:a4:23:8d:ab:52:
e7:05:6c:3c:e3:64:19:2e:b0:b8:8d:0a:39:6b:55:
53:fb:9e:76:32:d3:2a:e1:7d:6e:fe:25:14:2d:47:
d1:d9:a0:77:da:c2:d8:c4:62:45:9c:c9:0c:7f:40:
eb:33:a4:4a:a0:ab:0e:97:82:f4:f7:88:22:14:fd:
ed:bf:86:47:86:57:54:eb:c9:a8:0e:98:e3:1b:fc:
2f:66:38:ae:6e:04:69:18:c6:fe:ee:66:18:48:d9:
b5:5a:a4:a4:ef:c5:2d:8c:de:81:dc:3b:c7:2f:90:
65:f4:e8:b3:67:18:c8:0f:ab:8b:9b:48:49:af:28:
a8:1c:d5:0a:f2:f0:58:a3:20:42:b5:cb:84:20:f7:
a7:21:55:c2:94:fe:47:2a:b3:6c:54:a3:9b:be:d5:
9f:d1:dd:b1:2c:c0:a8:e1:09:62:77:35:03:82:af:
a3:49:c2:5a:2b:40:90:c6:a5:7e:7f:d0:89:10:73:
c8:bc:74:82:9a:6e:bc:c2:03:2f:a0:c1:e4:80:52:
20:28:3c:86:9a:cf:12:5e:1b:44:6a:d1:1f:64:63:
cd:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:4D:7C:D2:F7:A1:FB:16:83:FF:DC:2A:6C:CE:4D:FA:D7:41:0E:F8
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Ik180veh-xaD_9wqbM5N-tdBDvg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c5:100::/44
Signature Algorithm: sha256WithRSAEncryption
44:8e:8a:fa:82:8c:83:a4:de:1b:35:6c:59:fe:d5:cb:84:0d:
6d:b5:89:24:7d:7e:2e:23:36:3e:d3:5d:40:ef:f1:be:0b:c7:
4c:8c:b6:93:90:bd:b5:91:92:59:72:02:83:1e:bc:e2:41:13:
b8:91:55:3b:2d:a7:24:4d:d9:62:ea:b0:6f:7d:03:a6:1d:c1:
82:2f:30:46:54:36:d0:76:74:19:ef:5d:20:c9:5e:2e:96:d2:
84:d8:34:17:7f:ef:ce:e4:ec:d5:94:37:7c:aa:b9:8e:3c:7f:
75:d7:e9:7d:b2:6b:a4:40:a9:bb:0e:00:2c:e8:ef:00:d4:31:
7f:81:d1:e9:3f:75:b0:d3:a6:f7:6a:8c:6f:d1:95:29:4f:06:
3b:56:36:d3:24:57:ec:65:1b:1c:26:cd:ea:a2:91:07:dc:39:
01:f8:68:25:42:c6:67:29:6f:43:41:84:d4:da:58:ad:c9:e2:
fe:0f:8b:5a:a1:1d:0d:7b:a7:c9:31:fc:b3:fe:41:f6:06:27:
ff:67:de:0a:73:e5:cd:52:b5:10:71:79:6d:97:7f:a5:67:59:
e6:61:94:90:3d:40:cc:60:3e:8b:0a:f1:07:fa:9c:90:29:25:
ab:a3:08:a2:1a:78:94:29:b3:b8:c7:24:0e:ad:76:f3:79:75:
d3:03:e3:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 17 11:04:07 2026 by rpki-client