Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/SozjJxfvsjkaeN3GYHNW1UPAOPc.roa
File: SozjJxfvsjkaeN3GYHNW1UPAOPc.roa (raw, json)
Hash identifier: bPjO7JvfI63kqFdxQE0jMFA84+8gJnesLYPHEC+FOoA=
Subject key identifier: 4A:8C:E3:27:17:EF:B2:39:1A:78:DD:C6:60:73:56:D5:43:C0:38:F7
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019E1EB9924118801D7BB40318479557D2CA
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/SozjJxfvsjkaeN3GYHNW1UPAOPc.roa
Signing time: Wed 13 May 2026 00:25:38 +0000
ROA not before: Wed 13 May 2026 00:25:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209552
IP address blocks: 2a06:de01:c0::/44 maxlen: 48
2a06:de01:c1::/48 maxlen: 48
2a06:de01:c2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:b9:92:41:18:80:1d:7b:b4:03:18:47:95:57:d2:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: May 13 00:25:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4a8ce32717efb2391a78ddc6607356d543c038f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:52:86:b4:f3:05:57:c6:5f:3e:30:de:06:3c:
31:a1:ad:e0:78:90:93:6a:ce:b5:04:52:6b:9a:24:
52:0c:af:f6:e4:71:e4:11:1d:01:94:9e:03:48:b7:
cd:ae:03:2b:43:d8:b9:36:0f:48:49:1c:29:24:49:
dd:11:f6:51:ca:d8:ad:e1:6a:3f:74:52:97:24:ef:
fc:1f:3e:36:16:2a:ac:5e:0f:01:98:04:af:2b:b2:
06:45:92:58:99:8a:2a:3a:9b:6d:54:21:d9:02:66:
99:e9:09:6b:b5:95:27:28:ce:28:f8:fd:5e:c9:57:
fa:2d:dc:3c:ad:41:85:3d:67:b7:96:ee:e6:d6:ce:
19:9a:d7:df:d0:7d:10:6e:c5:f2:d2:8c:17:ca:59:
b6:a2:ba:34:97:7a:dc:aa:38:26:80:d7:ad:6c:c5:
1e:11:87:b0:29:c8:b1:10:cf:fd:8c:08:18:37:e0:
95:af:fb:b3:6d:eb:9b:23:08:8f:35:20:ab:43:11:
08:fa:3b:65:9a:1b:3d:47:c6:c3:f1:c4:3b:93:60:
c4:3a:76:0a:54:8d:8d:ee:24:f1:d1:8e:e6:19:f9:
fa:32:53:c8:ef:52:e3:5b:52:88:04:8e:26:83:cf:
9e:92:78:1d:aa:0f:53:3a:79:4c:63:cb:97:f5:10:
60:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:8C:E3:27:17:EF:B2:39:1A:78:DD:C6:60:73:56:D5:43:C0:38:F7
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/SozjJxfvsjkaeN3GYHNW1UPAOPc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:de01:c0::/44
Signature Algorithm: sha256WithRSAEncryption
a2:9e:ea:a3:de:a8:fc:32:7a:36:09:70:93:5f:82:31:24:26:
b8:f3:6a:1f:a5:ae:5f:77:5e:59:63:24:b3:fe:45:71:c1:1b:
d8:7e:30:18:1a:39:92:56:44:3f:e6:81:b7:bd:69:be:fe:0b:
ff:3e:93:3d:2a:89:41:06:02:31:0a:96:8c:9d:d4:b5:91:d4:
1e:c2:c4:b7:4a:f8:7d:24:b1:9f:e9:ab:1f:8a:a5:11:a8:5f:
3f:cc:8f:e0:e3:9d:41:63:12:f3:4e:90:6e:cb:51:3e:a1:f8:
3b:d8:16:0b:a2:08:04:3a:9a:80:09:39:ca:97:ed:a3:31:ee:
3a:96:77:80:77:3d:aa:a8:ab:c0:fe:37:9a:71:d2:36:26:42:
21:6c:b9:e5:83:99:44:a3:58:19:f0:8d:a0:ec:00:b9:1d:f9:
35:99:8f:69:76:cc:88:00:d2:c6:c3:e7:c1:fe:df:e4:27:bb:
ec:11:9c:78:28:21:2e:67:ea:2e:7a:47:66:ad:81:86:68:0b:
10:64:13:a8:6a:79:32:04:45:f6:3e:de:42:69:eb:92:a8:d2:
fc:5c:85:05:8e:53:b9:b4:f1:be:29:e5:4e:c5:8c:08:59:0f:
8c:81:37:13:30:17:57:b3:96:06:5c:33:89:90:4d:d5:1f:ee:
74:84:d6:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 14 08:34:29 2026 by rpki-client