Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/RtRm4uEpQ5NDFZHkoFAf3ouBSvk.roa
File: RtRm4uEpQ5NDFZHkoFAf3ouBSvk.roa (raw, json)
Hash identifier: To94WnIWOBF6E6QgbMkwqclcbi6IfBI6NY1QAgQiBrY=
Subject key identifier: 46:D4:66:E2:E1:29:43:93:43:15:91:E4:A0:50:1F:DE:8B:81:4A:F9
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01A09A01DED7A203EF6684776D86CAEC1079
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/RtRm4uEpQ5NDFZHkoFAf3ouBSvk.roa
Signing time: Sun 13 Sep 2026 09:03:28 +0000
ROA not before: Sun 13 Sep 2026 09:03:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56758
IP address blocks: 2a0e:97c0:660::/44 maxlen: 48
2a0e:b107:17a0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Sep 2026 09:14:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9a:01:de:d7:a2:03:ef:66:84:77:6d:86:ca:ec:10:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Sep 13 09:03:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=46d466e2e1294393431591e4a0501fde8b814af9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:38:2b:e4:11:27:9b:83:ee:55:58:8a:81:38:
82:b7:88:d2:c4:c1:02:d5:d1:1b:da:25:68:f0:70:
a4:cb:0e:6a:d2:58:93:72:c0:46:d2:61:e5:4b:a7:
11:6e:c5:d9:f5:a7:6b:bb:a3:81:2c:8c:9c:b4:67:
f0:74:c0:99:83:a6:b4:e1:53:f3:35:e4:14:a5:11:
17:e1:a1:92:d7:11:0a:f3:5c:f4:bb:8f:92:a5:fd:
35:57:12:96:fb:b4:76:7e:22:39:be:a4:21:37:58:
a8:84:16:e7:80:7d:f8:16:cc:b2:23:01:42:70:18:
38:f2:52:d9:b9:29:86:3c:7d:f7:1b:a7:c7:13:7e:
c5:15:9b:51:e0:19:4a:f2:c0:ae:61:31:c8:06:f4:
fd:ca:f6:cc:12:2a:2c:42:64:b5:80:d4:27:ff:03:
4e:41:c0:ae:5f:b8:6f:83:8a:bb:70:14:5c:fa:78:
1a:82:4f:e6:79:34:5d:da:5b:fc:fe:9c:d0:58:17:
0c:4a:0b:14:94:a2:72:fa:7e:25:3f:6d:a8:9d:03:
ed:ae:6e:86:a0:3b:f5:9b:3e:df:4f:d0:a3:4c:3b:
d9:0a:2e:d6:59:e5:8b:58:60:f9:96:9a:b5:27:f7:
23:26:be:ec:e2:a0:43:d8:3c:2b:1d:74:78:88:c9:
ec:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:D4:66:E2:E1:29:43:93:43:15:91:E4:A0:50:1F:DE:8B:81:4A:F9
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/RtRm4uEpQ5NDFZHkoFAf3ouBSvk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:660::/44
2a0e:b107:17a0::/44
Signature Algorithm: sha256WithRSAEncryption
70:68:72:4c:9e:e4:92:ef:05:6a:ad:35:fe:99:ee:a8:5d:0e:
a1:a8:f0:0a:65:fd:50:31:85:04:b7:6e:35:29:de:9a:55:f9:
8c:75:d5:cb:9f:10:59:70:8f:77:8e:46:be:3e:f5:95:98:a0:
ab:01:b4:79:63:e1:86:54:05:76:c5:6b:35:6f:d7:9e:3d:1a:
ec:91:2c:b9:e6:6c:0a:c8:a0:b7:ed:eb:26:0a:2d:40:b7:59:
fe:b6:65:39:38:08:15:85:53:cb:01:a6:77:59:c6:22:20:4c:
77:a6:5c:51:c8:c4:23:3b:20:9b:96:b2:18:06:81:66:c3:06:
2a:6e:e6:c2:16:2b:fe:44:f8:3c:5a:23:b7:88:ad:00:b0:37:
32:57:36:8e:a1:4a:cc:ce:a6:d3:f5:53:2f:c1:e8:93:e1:d4:
0c:06:7e:4e:76:06:e0:62:01:32:96:1f:3b:74:41:10:5a:58:
2f:04:c4:db:9f:28:89:cd:11:ae:03:d8:e3:a3:3a:af:4c:1b:
6d:6a:d7:66:e6:45:95:9d:d0:f8:bd:e2:9a:93:4d:5a:3a:6f:
7f:5f:08:c0:81:bf:a0:8d:50:66:bb:a6:c4:9e:8a:6b:ca:5f:
21:d4:2e:28:ca:78:69:99:71:51:b3:cc:82:08:a1:8e:b3:1e:
e8:17:d2:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 20:29:51 2026 by rpki-client