Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/OQHB9VzrpqPgVQWq-hpPZKICs9g.roa
File: OQHB9VzrpqPgVQWq-hpPZKICs9g.roa (raw, json)
Hash identifier: ZlK+CRxL2E+fhjqsqhF0/XilPSYi6E6sY28aKTTsfT0=
Subject key identifier: 39:01:C1:F5:5C:EB:A6:A3:E0:55:05:AA:FA:1A:4F:64:A2:02:B3:D8
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01A09ECC4B4F73631BD48B71A70704DD5216
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/OQHB9VzrpqPgVQWq-hpPZKICs9g.roa
Signing time: Mon 14 Sep 2026 07:23:03 +0000
ROA not before: Mon 14 Sep 2026 07:23:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201950
IP address blocks: 2a06:de04:40::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Sep 2026 20:52:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9e:cc:4b:4f:73:63:1b:d4:8b:71:a7:07:04:dd:52:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Sep 14 07:23:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3901c1f55ceba6a3e05505aafa1a4f64a202b3d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:68:0f:e1:ab:cb:8d:6c:ea:3c:93:03:b8:0f:
62:47:2b:d3:be:c1:89:3f:7c:5e:23:be:66:a1:7a:
d5:03:bd:cf:38:e2:aa:bc:07:36:8f:19:0c:6c:8f:
7f:81:f8:f4:08:2e:37:c8:90:56:ae:c6:ac:10:f8:
e1:02:1c:79:d6:74:b6:a0:d0:0b:cc:8f:bc:12:68:
7c:63:8d:c3:53:9c:06:76:73:06:f9:b0:60:16:c2:
b5:0c:36:7e:84:4d:4f:83:d0:85:07:a0:83:00:c1:
f1:92:e6:e7:12:21:72:20:81:5b:80:b6:2c:57:19:
bb:1a:5b:ee:dc:e7:36:5f:01:19:fc:83:1a:43:33:
40:5c:81:c5:fb:7a:bc:f9:fc:15:c4:96:14:4b:42:
f1:6e:25:6f:21:c0:c5:2f:26:4c:88:33:ff:87:c3:
91:15:17:0a:fc:d9:c3:d1:be:d0:56:7e:ec:89:82:
64:14:a9:7a:53:2b:19:9d:3a:74:b4:90:71:9c:db:
85:f0:41:b0:4a:ed:80:2d:47:77:bd:8f:f9:73:b6:
54:9c:8b:cb:5e:d3:c7:41:8d:34:d5:61:f6:1c:db:
bc:71:8e:60:e2:46:70:58:6e:5c:7c:3e:a0:c0:f3:
a9:ca:32:a1:b4:c8:03:2b:0b:84:c8:65:aa:05:a4:
e6:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:01:C1:F5:5C:EB:A6:A3:E0:55:05:AA:FA:1A:4F:64:A2:02:B3:D8
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/OQHB9VzrpqPgVQWq-hpPZKICs9g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:de04:40::/44
Signature Algorithm: sha256WithRSAEncryption
68:5a:ae:5e:0c:f8:7f:36:90:03:4c:8a:ed:26:c3:a3:ac:e0:
34:aa:cd:96:25:c4:e8:81:26:f7:ba:16:db:e3:4b:d5:6e:b0:
de:a7:e6:e6:a8:57:8f:f9:11:8a:8a:57:27:51:f2:8f:79:a9:
a8:e8:99:7a:77:e6:99:c8:b4:b3:18:ac:38:12:ce:bb:0e:27:
70:9f:18:4a:23:9e:bd:d1:02:84:8a:1b:62:ba:cd:a6:b6:6e:
cd:e3:b9:e8:d1:db:12:35:9f:3d:31:94:bf:b9:c4:98:76:c8:
31:f9:c9:f6:2b:a2:52:09:db:a4:9a:54:34:9a:4c:66:cc:67:
88:4d:36:1a:74:75:83:d8:1b:b3:ca:76:53:d2:b1:5a:66:0a:
80:02:6f:08:04:6f:ce:36:8c:de:81:a7:85:c1:d8:0e:fe:7c:
60:4c:cc:f6:f3:54:3f:cd:7f:63:4d:6a:35:dd:98:0f:07:50:
ef:7e:c0:52:73:ea:10:f0:37:e7:fb:6a:02:85:20:43:87:a6:
97:22:b4:2d:fd:88:16:57:09:38:7d:73:3a:a9:16:a9:14:f7:
f7:e7:6c:25:66:ac:e1:bd:a2:49:d4:cf:cb:f7:20:d4:c9:17:
3d:7e:80:75:80:b7:0b:6d:40:08:a5:b9:af:0c:a4:0f:b8:25:
ea:49:93:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 01:24:29 2026 by rpki-client