Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/JhEoE3BMV7MAWEaqky8_vNw4xHI.roa
File: JhEoE3BMV7MAWEaqky8_vNw4xHI.roa (raw, json)
Hash identifier: 3bMM4gLcGkCsbqUwgoJjzjMn072TT/GY4bx9jRPhfcE=
Subject key identifier: 26:11:28:13:70:4C:57:B3:00:58:46:AA:93:2F:3F:BC:DC:38:C4:72
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01A09ECE8587A32985C333526ABEC98A2928
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/JhEoE3BMV7MAWEaqky8_vNw4xHI.roa
Signing time: Mon 14 Sep 2026 07:25:29 +0000
ROA not before: Mon 14 Sep 2026 07:25:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205977
IP address blocks: 2a0e:b107:760::/44 maxlen: 48
2a10:2f00:120::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Sep 2026 20:52:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9e:ce:85:87:a3:29:85:c3:33:52:6a:be:c9:8a:29:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Sep 14 07:25:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=26112813704c57b3005846aa932f3fbcdc38c472
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:3f:f6:79:99:4d:97:50:93:de:f7:92:56:f5:
9e:ed:5b:93:b4:5c:23:54:e9:a1:d5:e9:17:c7:5c:
37:50:90:40:cb:c6:4a:b8:e4:62:5f:72:5e:54:98:
5c:83:5a:0f:b8:9a:11:d8:4d:0c:f9:90:5a:bb:4c:
49:24:0f:5b:46:34:df:63:fb:96:89:e7:d7:04:f5:
d2:40:f0:c6:70:8e:34:01:dd:66:fa:c6:ec:4e:6c:
a1:d9:80:a5:7c:6f:db:e4:64:de:92:b5:55:99:99:
47:a3:33:8b:a4:44:c1:d7:6e:f3:bc:e2:54:86:a4:
e2:6b:a8:3b:a5:7e:44:d4:5f:14:22:cc:1a:2c:f6:
b5:28:20:22:ac:05:58:d7:e4:cd:8c:87:ce:2b:bb:
62:22:86:41:c5:cd:1b:d3:ce:4a:b2:c1:3b:de:91:
a5:f5:41:20:1a:a2:0c:d4:40:a8:8e:ad:b6:60:2f:
69:f6:ad:9d:51:f7:98:9d:0a:5a:85:be:6b:fd:41:
e9:3b:aa:1c:44:62:d4:1c:36:b4:4f:fe:30:54:58:
c8:5d:15:f2:0b:fc:fa:56:c2:c2:03:bf:24:94:e6:
69:6b:87:7a:fd:9c:a2:f2:64:b7:37:24:aa:62:c0:
fc:d3:5b:5c:d5:3b:2d:3f:db:60:43:f0:8a:6c:02:
72:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:11:28:13:70:4C:57:B3:00:58:46:AA:93:2F:3F:BC:DC:38:C4:72
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/JhEoE3BMV7MAWEaqky8_vNw4xHI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:760::/44
2a10:2f00:120::/48
Signature Algorithm: sha256WithRSAEncryption
83:c9:79:13:43:33:8d:1a:66:38:e7:44:12:14:7d:79:a3:14:
dc:9c:fc:73:dc:95:79:56:00:be:67:7d:4b:fa:0e:f4:3f:5a:
3d:3f:6c:1c:1c:48:40:64:5a:ed:9d:7b:0b:12:ae:08:34:e6:
6d:b2:b1:02:57:7d:14:d7:78:fd:e6:62:4e:61:65:cd:96:b1:
76:92:1c:3e:65:ba:9c:24:fb:6b:d1:e6:03:ad:d4:08:59:49:
67:76:21:d4:76:57:80:56:c3:9f:3c:12:4e:d5:83:43:b3:24:
b4:05:30:f4:e7:95:c6:66:c8:8e:8e:62:9e:75:3a:4f:d1:87:
db:89:66:1a:6f:dd:c5:9f:23:41:a9:cc:46:85:35:e9:5a:74:
2f:3b:34:a4:6c:15:80:22:60:2f:42:1e:fc:e4:f8:7d:df:39:
e8:fe:45:19:3f:6b:02:f9:dc:02:9a:5c:4c:46:c3:f8:70:fc:
96:d6:7e:6a:cb:e6:66:01:57:a8:88:dc:e3:b7:68:f6:b6:ef:
6d:70:6c:42:e7:8c:4b:90:2c:cd:79:e3:0a:94:7f:d9:b2:3d:
d9:6b:74:b1:cb:56:1c:c7:af:b7:1d:ea:67:45:f7:4a:79:96:
91:f9:2c:5f:42:8f:05:f9:05:19:f2:08:db:50:fe:8f:4a:1c:
cb:b7:cb:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 01:24:31 2026 by rpki-client