Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/RlZCmd_lUulaAgbY0p245eMz5bQ.roa
File: RlZCmd_lUulaAgbY0p245eMz5bQ.roa (raw, json)
Hash identifier: Asp4iixrCUKHyl0vCnpmfGKh1IvZE1mjW5imO8HVSsY=
Subject key identifier: 46:56:42:99:DF:E5:52:E9:5A:02:06:D8:D2:9D:B8:E5:E3:33:E5:B4
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01A06E9FCECC34E8E43493E5BF42939764DA
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/RlZCmd_lUulaAgbY0p245eMz5bQ.roa
Signing time: Fri 04 Sep 2026 22:52:41 +0000
ROA not before: Fri 04 Sep 2026 22:52:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202673
IP address blocks: 2a0e:97c0:4a0::/44 maxlen: 48
2a0e:97c0:c40::/44 maxlen: 48
2a0e:97c0:c43::/48 maxlen: 48
2a0e:97c0:c46::/48 maxlen: 48
2a0e:97c0:c47::/48 maxlen: 48
2a0e:97c0:c4a::/48 maxlen: 48
2a0e:97c0:c4b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:9f:ce:cc:34:e8:e4:34:93:e5:bf:42:93:97:64:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Sep 4 22:52:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=46564299dfe552e95a0206d8d29db8e5e333e5b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a6:22:d1:54:1d:10:3d:86:a9:d5:38:e8:bb:
76:5c:f6:d1:c0:10:e6:eb:38:e2:32:52:c0:b1:58:
04:b6:ba:29:16:34:2a:92:7e:0c:0a:50:a2:7a:34:
33:2a:c5:89:8d:1a:e5:9d:38:a5:8b:22:8b:fa:17:
27:e8:49:3d:87:f1:9e:6b:b3:2f:7f:c0:34:4a:8d:
82:d9:8b:bc:fa:dc:cf:f4:95:27:65:6e:7d:05:71:
10:a2:4c:81:e8:c6:32:ac:9d:d6:3f:33:0e:86:1e:
bd:7c:e5:78:2b:6f:b8:29:6f:9c:6e:a1:01:4f:0f:
bf:6c:7d:cf:ea:8d:0d:51:19:af:c3:1f:f3:db:d1:
9b:d5:5d:b0:73:df:cd:92:aa:9a:22:0c:4c:fe:bf:
88:0a:57:55:59:76:b1:16:b7:74:66:b2:b7:4a:6f:
f1:9e:cb:37:4e:ec:67:ec:ce:a4:70:b3:fb:cd:ad:
1f:9f:fe:0f:9a:c5:df:c7:2a:b9:c6:0f:96:dd:7d:
02:3d:7b:f4:ce:7d:02:2d:05:14:ea:16:97:85:b3:
5d:13:92:a9:d4:0c:d7:09:ba:80:dc:6e:4d:05:97:
6c:bd:eb:80:94:31:f9:fa:74:01:16:1b:69:f5:f9:
6a:dc:2b:bf:cc:56:fe:a6:dc:24:e0:dd:95:b2:54:
32:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:56:42:99:DF:E5:52:E9:5A:02:06:D8:D2:9D:B8:E5:E3:33:E5:B4
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/RlZCmd_lUulaAgbY0p245eMz5bQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:4a0::/44
2a0e:97c0:c40::/44
Signature Algorithm: sha256WithRSAEncryption
9b:8f:79:24:95:e6:00:32:a3:95:b0:92:79:7f:5f:a4:e4:bd:
45:5c:ef:c5:b0:98:46:fb:0b:9b:47:35:b3:a5:48:43:b0:8f:
eb:22:ba:9a:e8:4a:61:c7:b9:80:1a:7f:e2:89:68:bc:a8:f7:
1b:94:fb:36:02:ce:74:65:0c:0f:ed:ed:71:c1:7d:cd:f0:f5:
ab:cc:13:c3:86:6b:d8:b8:ee:d2:6b:13:2d:3c:d1:62:27:7e:
3f:51:51:92:20:60:e9:14:28:1d:b8:9c:9e:f2:e3:7a:af:cf:
ab:5e:63:71:05:f6:0b:a7:be:c0:71:de:77:02:08:be:35:f1:
81:23:d5:35:6f:3b:f2:04:13:c6:63:ed:57:a1:c9:ba:3d:5f:
49:c9:88:c2:2e:5d:7e:20:f9:f0:cf:ce:fe:70:69:12:aa:84:
e6:71:e5:40:26:ef:4b:11:69:a3:34:ed:5d:7a:6e:d1:2d:5c:
a1:b0:2a:2b:e4:33:5a:f9:fd:6f:6b:fb:7e:1c:73:76:ac:08:
67:d1:c3:cb:2f:03:10:69:52:85:89:5c:b4:45:f3:2f:9e:ff:
68:b3:15:60:ca:f0:33:98:6a:f3:91:99:ea:db:3f:a8:2a:75:
4d:8c:04:da:61:ce:7d:2c:1a:ae:40:6e:e1:f1:f7:82:19:53:
33:74:97:33
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAaBun87MNOjkNJPlv0KTl2TaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjYwOTA0MjI1MjQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NjU2NDI5OWRmZTU1MmU5NWEwMjA2ZDhkMjlkYjhlNWUzMzNlNWI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6Yi0VQdED2GqdU46Lt2XPbRwBDm
6zjiMlLAsVgEtropFjQqkn4MClCiejQzKsWJjRrlnTiliyKL+hcn6Ek9h/Gea7Mv
f8A0So2C2Yu8+tzP9JUnZW59BXEQokyB6MYyrJ3WPzMOhh69fOV4K2+4KW+cbqEB
Tw+/bH3P6o0NURmvwx/z29Gb1V2wc9/NkqqaIgxM/r+ICldVWXaxFrd0ZrK3Sm/x
nss3Tuxn7M6kcLP7za0fn/4PmsXfxyq5xg+W3X0CPXv0zn0CLQUU6haXhbNdE5Kp
1AzXCbqA3G5NBZdsveuAlDH5+nQBFhtp9flq3Cu/zFb+ptwk4N2VslQyQwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFEZWQpnf5VLpWgIG2NKduOXjM+W0MB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvUmxaQ21kX2xVdWxhQWdiWTBwMjQ1ZU16NWJRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcEKg6XwASg
AwcEKg6XwAxAMA0GCSqGSIb3DQEBCwUAA4IBAQCbj3kkleYAMqOVsJJ5f1+k5L1F
XO/FsJhG+wubRzWzpUhDsI/rIrqa6Ephx7mAGn/iiWi8qPcblPs2As50ZQwP7e1x
wX3N8PWrzBPDhmvYuO7SaxMtPNFiJ34/UVGSIGDpFCgduJye8uN6r8+rXmNxBfYL
p77Acd53Agi+NfGBI9U1bzvyBBPGY+1Xocm6PV9JyYjCLl1+IPnwz87+cGkSqoTm
ceVAJu9LEWmjNO1dem7RLVyhsCor5DNa+f1va/t+HHN2rAhn0cPLLwMQaVKFiVy0
RfMvnv9osxVgyvAzmGrzkZnq2z+oKnVNjATaYc59LBquQG7h8feCGVMzdJcz
-----END CERTIFICATE-----
Generated at Sat Sep 5 03:23:17 2026 by rpki-client