Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Pm_TYxAp2JGAsMvsfRhx45TTqgg.roa
File: Pm_TYxAp2JGAsMvsfRhx45TTqgg.roa (raw, json)
Hash identifier: 1rbrp4zsHG9prc3vzatQgiKcjMMcBKC9IVzJIgrg4L0=
Subject key identifier: 3E:6F:D3:63:10:29:D8:91:80:B0:CB:EC:7D:18:71:E3:94:D3:AA:08
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019D3AA92FE2C01968969F5C29DBB3D76EE1
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Pm_TYxAp2JGAsMvsfRhx45TTqgg.roa
Signing time: Sun 29 Mar 2026 17:34:19 +0000
ROA not before: Sun 29 Mar 2026 17:34:19 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215011
IP address blocks: 2a06:de00:50::/48 maxlen: 48
2a06:de00:5b::/48 maxlen: 48
2a0e:97c0:8a0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 31 Mar 2026 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:a9:2f:e2:c0:19:68:96:9f:5c:29:db:b3:d7:6e:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Mar 29 17:34:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3e6fd3631029d89180b0cbec7d1871e394d3aa08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:4a:95:02:42:65:b1:4a:7d:ae:b0:72:30:a6:
92:96:82:71:66:50:4a:c8:74:6a:62:34:d3:7c:d6:
af:78:30:7d:23:66:ef:89:58:21:f1:36:3a:f3:d2:
f4:d9:4d:40:d9:cf:36:2c:a6:8d:e5:4f:a7:7f:65:
e3:51:98:32:da:fa:e6:d6:c8:0c:01:c4:de:b3:03:
cb:87:a6:a4:81:ad:cd:3d:b4:be:fb:00:55:2b:b6:
7f:f8:71:c8:10:d9:99:45:bb:6d:e4:da:68:e9:24:
b7:0d:4a:57:a0:f3:a0:09:1e:ce:16:91:e4:4a:e9:
35:d8:c4:70:02:83:30:af:f6:be:af:5b:dc:23:11:
82:65:35:e6:91:e5:3a:97:40:59:f1:ff:c8:4e:9b:
f4:58:e8:61:54:94:68:47:5e:0a:04:3c:32:d0:8a:
12:89:e4:10:ae:98:5d:0a:54:23:f2:d7:77:e9:e3:
a3:1e:3a:42:df:e6:16:25:fe:a6:41:78:47:64:06:
7b:be:dc:1a:81:7d:d4:4e:b7:51:a1:bb:7e:63:5a:
08:ab:03:3c:58:17:a4:92:74:ae:ea:d4:2b:19:63:
31:48:55:ae:ef:e2:d7:77:39:8a:63:17:a8:e3:e8:
cf:f7:ba:f3:3b:f6:15:87:39:94:cb:d9:8a:0b:86:
f1:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:6F:D3:63:10:29:D8:91:80:B0:CB:EC:7D:18:71:E3:94:D3:AA:08
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Pm_TYxAp2JGAsMvsfRhx45TTqgg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:de00:50::/48
2a06:de00:5b::/48
2a0e:97c0:8a0::/44
Signature Algorithm: sha256WithRSAEncryption
26:6c:0d:11:2e:54:0a:f9:73:45:76:54:9b:cb:f6:2f:e1:94:
91:73:b7:95:53:fd:25:99:d0:fd:8b:e8:69:4d:61:62:24:42:
71:3f:ed:5b:0b:f9:42:94:23:03:dc:4b:53:5b:cb:58:48:cd:
67:aa:63:63:ff:5a:74:82:0f:82:ec:15:27:0d:13:72:64:1f:
bb:57:7d:52:be:10:77:ee:a3:38:d2:ea:d1:7b:0e:27:b2:d8:
dd:67:be:14:d2:29:5d:23:09:12:7c:1f:8c:25:e4:f2:12:c9:
75:e3:6a:c4:86:b1:8a:99:2b:26:2b:0e:c1:7c:40:e3:f4:b6:
08:ed:ab:9e:cf:b5:b4:78:48:c4:80:6e:fe:1c:3b:5b:96:19:
c8:5a:4c:63:2a:4f:b5:dc:53:df:2e:44:40:e6:02:c4:5c:27:
e0:16:13:63:cd:fb:04:23:61:62:8d:34:94:fb:a6:24:04:58:
52:87:d0:5e:ee:e5:ab:b6:b4:13:63:52:8a:32:f2:de:90:d4:
e1:0f:80:a0:79:9b:26:00:13:43:74:55:8d:74:bf:9a:08:64:
ee:2d:62:6a:74:fc:3e:ae:35:b0:58:6a:7f:a9:ad:26:16:b4:
8e:6b:c5:42:75:3c:ec:fd:68:a5:9b:96:20:4f:8c:fb:cf:21:
97:59:eb:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 30 14:37:02 2026 by rpki-client