Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/TM5k3yBh47zUmuX5gukz980SCL0.roa
File: TM5k3yBh47zUmuX5gukz980SCL0.roa (raw, json)
Hash identifier: ALleoUHH+u5Inotjz37ttTDbeURaI3ZsFqrYWvXo8BM=
Subject key identifier: 4C:CE:64:DF:20:61:E3:BC:D4:9A:E5:F9:82:E9:33:F7:CD:12:08:BD
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01A09EDB3CFC3C27ACE3500884E0655BF896
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/TM5k3yBh47zUmuX5gukz980SCL0.roa
Signing time: Mon 14 Sep 2026 07:39:23 +0000
ROA not before: Mon 14 Sep 2026 07:39:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212120
IP address blocks: 2a0e:b107:eb0::/48 maxlen: 48
2a0e:b107:eb1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Sep 2026 20:52:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9e:db:3c:fc:3c:27:ac:e3:50:08:84:e0:65:5b:f8:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Sep 14 07:39:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4cce64df2061e3bcd49ae5f982e933f7cd1208bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b4:68:7d:cb:17:08:d2:68:a0:fb:52:62:b6:
7e:57:75:76:7f:aa:90:f2:4d:af:b6:c4:3c:cc:5d:
d0:fa:9a:27:be:7f:59:20:77:b8:88:ce:fa:9a:9e:
3d:9f:12:e5:ff:ba:67:7d:07:02:22:62:32:e8:68:
90:8e:7d:f3:35:cf:3c:13:8d:3b:dd:51:bc:15:96:
8d:3f:c2:14:fc:fb:6a:e5:09:34:86:a9:61:b2:ca:
61:eb:cc:64:b3:d9:a6:72:cc:c6:68:61:71:94:b8:
bb:46:5c:c2:6d:8e:b8:9c:c9:21:4b:6b:af:60:52:
01:b4:8c:62:88:48:73:ec:a6:2d:99:45:9d:ae:89:
17:05:79:fa:ad:0c:61:5f:8f:80:3d:c1:fb:3e:fa:
d2:1f:98:79:3e:7d:c0:79:b2:2d:c5:c2:a9:07:fd:
2d:12:f4:4a:e4:a1:41:8c:d4:50:c9:92:7c:db:ec:
69:b6:45:da:16:3c:a2:66:ac:34:aa:73:8b:6d:d3:
97:14:75:f6:e0:16:98:35:cd:49:68:d7:57:da:fc:
2d:f0:91:06:c4:0e:b8:d9:5f:0d:39:73:fd:f4:0c:
e4:0d:c1:34:02:ed:92:9c:cd:cb:ba:03:67:3d:25:
ef:25:4a:dc:58:52:9d:81:11:9c:94:a7:e2:0e:34:
40:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:CE:64:DF:20:61:E3:BC:D4:9A:E5:F9:82:E9:33:F7:CD:12:08:BD
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/TM5k3yBh47zUmuX5gukz980SCL0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:eb0::/47
Signature Algorithm: sha256WithRSAEncryption
85:3f:40:b2:bd:a8:dd:09:00:fb:a0:0e:4b:54:46:eb:f1:7d:
4f:05:ad:66:63:33:fd:60:e4:b5:4a:90:aa:9b:fa:b2:8e:0d:
c1:88:43:6a:e4:dd:cc:0c:c6:3f:45:86:d8:2d:f6:16:87:c7:
71:de:95:86:a4:0d:d2:45:ff:47:ce:ad:b4:6a:aa:ff:46:41:
9c:02:6b:1c:f6:c8:28:a4:2e:55:c4:46:87:83:48:0a:98:14:
9d:22:ff:06:f7:d6:b2:d9:e6:68:1c:1b:5c:bb:dc:0f:b3:99:
e7:ea:30:e9:a5:d4:32:f2:e2:88:e7:1d:6b:fd:e0:48:5c:31:
65:6f:54:e0:2e:40:57:4d:de:fa:00:23:da:21:68:c3:3a:98:
f8:6e:16:28:f5:8d:39:c3:5b:8d:41:e8:5f:99:00:b9:8f:56:
15:ac:09:74:85:00:c9:3a:32:23:98:49:dc:54:0f:46:34:68:
71:0f:02:13:2a:9d:d9:19:2e:8b:81:17:90:ac:8b:b4:8a:03:
9b:ba:b0:2f:c9:bb:52:7f:2a:5e:53:47:02:02:83:9f:fc:28:
0d:8e:b9:22:9b:a8:96:0c:77:9a:b8:9e:d1:7a:f0:a0:19:ef:
cf:54:61:01:d6:7f:55:ed:90:e1:2c:89:2f:30:f9:63:f2:72:
17:9c:34:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 01:24:02 2026 by rpki-client