Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/NmW6o9GlqQEGPohwkuRbNyShWKQ.roa
File: NmW6o9GlqQEGPohwkuRbNyShWKQ.roa (raw, json)
Hash identifier: Q3QFZkWXds0W/j2jR2Hc3wn962vdy5uZy6VsYRjgMBA=
Subject key identifier: 36:65:BA:A3:D1:A5:A9:01:06:3E:88:70:92:E4:5B:37:24:A1:58:A4
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019E803B47C9BF26B8C26383E83B1638D2B5
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/NmW6o9GlqQEGPohwkuRbNyShWKQ.roa
Signing time: Sun 31 May 2026 22:50:29 +0000
ROA not before: Sun 31 May 2026 22:50:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197477
IP address blocks: 2a06:de01:70::/44 maxlen: 48
2a10:ccc0:150::/44 maxlen: 48
2a10:ccc2:10::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 01 Jun 2026 22:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:80:3b:47:c9:bf:26:b8:c2:63:83:e8:3b:16:38:d2:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: May 31 22:50:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3665baa3d1a5a901063e887092e45b3724a158a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:2e:17:64:c3:06:5e:94:93:3d:60:8a:16:33:
d5:2c:44:f0:91:ca:08:16:f0:2b:4e:fd:b0:ca:4a:
ca:1b:7d:2f:7b:28:0c:1f:b7:00:dc:19:0a:37:39:
59:94:bb:55:fc:a7:f4:66:d9:d8:37:ba:20:5f:41:
a9:9b:8f:f0:5f:2b:a6:39:6d:44:77:0a:75:27:48:
56:04:b5:15:b8:d4:05:25:1f:31:f1:99:bb:36:01:
03:1b:b7:82:05:dc:7b:7d:48:66:32:bc:bb:21:fe:
fa:c8:08:fc:20:a5:41:e5:a7:de:27:c7:66:9f:db:
b6:0e:ae:17:54:9f:8c:01:43:89:9f:9a:a8:9d:b6:
44:ed:70:be:3a:a7:b1:58:32:d0:10:fe:08:72:11:
cd:70:01:d1:0f:84:26:ad:dd:c7:14:89:44:6c:a8:
94:51:f4:83:e9:4a:e6:ee:d7:25:40:18:42:47:2b:
95:59:cd:8c:86:f7:04:4c:ad:d5:90:85:b6:49:d0:
3c:d2:ad:dc:b0:6d:94:04:90:13:56:8f:5b:64:12:
f2:57:cb:fe:06:ab:2c:79:53:09:91:ca:e8:af:76:
20:a4:ed:ef:53:c1:cc:86:65:ea:0f:b4:8b:27:ac:
6b:a1:60:bd:63:07:6d:ba:ea:63:d9:5a:59:43:2c:
f2:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:65:BA:A3:D1:A5:A9:01:06:3E:88:70:92:E4:5B:37:24:A1:58:A4
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/NmW6o9GlqQEGPohwkuRbNyShWKQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:de01:70::/44
2a10:ccc0:150::/44
2a10:ccc2:10::/44
Signature Algorithm: sha256WithRSAEncryption
8d:17:0b:74:e3:24:69:4b:73:be:3e:8e:91:97:66:2c:07:f2:
64:38:28:40:61:ed:44:c0:cd:7a:d2:1b:91:da:94:6e:cb:fd:
98:10:bc:a1:bb:72:1f:a3:4e:9b:bf:c3:58:a7:2e:1b:a5:f5:
3e:e0:b2:bf:a2:a2:2b:14:8b:56:ce:67:b4:42:8e:89:c0:37:
a4:e3:9e:92:35:45:82:45:f5:25:37:3e:a2:5e:93:30:e7:e8:
ae:2a:91:dd:d5:b8:db:58:cf:ac:a3:b0:01:39:5a:21:60:7e:
01:53:2c:38:8a:f3:2c:9b:fd:30:87:34:b1:d6:6f:2f:ea:3e:
21:73:e6:48:7c:1b:f1:44:37:ab:94:0e:ed:cc:a8:20:5d:8a:
0d:b7:e8:29:4f:76:af:d6:b7:6b:c5:fa:f1:50:c7:44:3f:74:
2a:3d:5a:8a:32:ea:de:0f:4d:d9:3e:9f:79:a3:09:45:d7:f7:
db:8a:12:34:a8:84:0a:9f:ff:33:6d:21:a7:69:3b:2e:9f:63:
79:70:a9:80:ab:3f:27:3a:21:23:3d:fc:f1:56:94:89:cf:20:
43:66:91:6f:b0:a0:ef:29:6b:c8:7a:55:65:b8:06:33:1d:41:
3c:a6:96:53:19:dd:10:36:ff:2e:b4:97:76:26:39:25:01:b4:
57:81:ce:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 1 08:09:28 2026 by rpki-client