Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/TRaYZUTvW4wj_p2yagoJyztuOPI.roa
File: TRaYZUTvW4wj_p2yagoJyztuOPI.roa (raw, json)
Hash identifier: tGevrMiayinmQJkBE6Ag6WYHriX7T6sl16t6eODX4NE=
Subject key identifier: 4D:16:98:65:44:EF:5B:8C:23:FE:9D:B2:6A:0A:09:CB:3B:6E:38:F2
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01A09ECC4CE3218A1A014A7AB9AA670CD6F1
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/TRaYZUTvW4wj_p2yagoJyztuOPI.roa
Signing time: Mon 14 Sep 2026 07:23:04 +0000
ROA not before: Mon 14 Sep 2026 07:23:04 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204750
IP address blocks: 2a0e:97c0:3d0::/44 maxlen: 48
2a0e:97c0:3d2::/48 maxlen: 48
2a0e:97c0:3d5::/48 maxlen: 48
2a0e:97c0:3d6::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Sep 2026 20:52:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9e:cc:4c:e3:21:8a:1a:01:4a:7a:b9:aa:67:0c:d6:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Sep 14 07:23:04 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4d16986544ef5b8c23fe9db26a0a09cb3b6e38f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ab:f5:d0:5f:68:0f:1f:27:f3:b8:48:34:9a:
94:8c:1f:50:77:f2:83:c1:e2:95:e4:14:d7:ca:0f:
83:0f:76:57:4c:6a:c2:f8:2e:14:a7:d7:0a:43:57:
07:3c:51:69:b2:16:91:3b:cc:a4:c5:4a:3c:8a:5b:
b4:18:44:d7:87:be:1c:8e:44:10:7b:e1:06:ee:d5:
32:a5:a9:5c:8a:1f:f4:c9:11:00:bb:d7:74:7f:48:
7f:d8:1c:93:d0:01:7e:f4:a6:53:7d:fb:ab:d8:c0:
b8:2c:7a:b0:5e:d4:a2:1f:fd:51:12:da:3b:be:27:
16:90:c4:45:40:01:69:2a:f1:0b:60:f8:5a:1b:2b:
de:1d:57:e5:64:d8:e8:8e:65:73:a3:a1:b7:ab:af:
ff:03:ec:ff:72:67:61:16:70:ef:5f:73:ae:0e:5d:
e6:b9:db:08:ee:f7:78:4f:43:c9:c0:af:ca:91:3a:
69:a4:4f:06:2b:77:06:87:13:90:ff:9f:53:9a:36:
bf:2a:a6:6d:a9:bb:60:63:ed:ea:ad:f1:0c:ff:96:
da:e3:62:36:62:3d:a5:a9:11:df:99:2e:6b:1a:cd:
f5:01:30:ff:aa:36:a5:31:03:c4:d7:2a:ea:94:69:
fb:9c:f4:81:ee:8f:25:2b:a5:0f:33:c6:4c:2a:36:
02:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:16:98:65:44:EF:5B:8C:23:FE:9D:B2:6A:0A:09:CB:3B:6E:38:F2
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/TRaYZUTvW4wj_p2yagoJyztuOPI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:3d0::/44
Signature Algorithm: sha256WithRSAEncryption
a5:a5:e3:65:ef:6d:72:33:90:29:d0:79:f9:36:a0:53:0c:09:
60:87:55:f3:f9:bf:f9:9f:08:d1:4a:6e:c9:61:af:18:3f:31:
6e:7b:fa:1b:08:39:54:dd:cc:3d:47:2f:14:0f:50:5b:88:2e:
cb:6f:4a:73:8c:03:a8:c8:13:8b:18:5e:e7:1f:a5:02:62:58:
a3:64:bd:c4:8d:90:df:3d:1d:6e:a5:03:82:50:d3:26:aa:7d:
02:0d:33:55:bc:ac:a3:fa:a5:27:c8:9d:02:d3:26:bc:42:b4:
46:23:52:06:bd:8f:22:29:7c:41:e6:b8:b9:44:9e:bb:6d:18:
e6:fa:6f:35:ca:a1:7a:61:db:ed:24:a5:7c:fd:fe:cc:33:e1:
2a:ab:26:fa:68:b2:b2:99:f0:5e:c4:d5:53:b3:79:2a:e8:29:
b1:24:e1:b5:7a:db:13:84:8a:43:3f:d1:23:48:2d:d4:19:db:
aa:35:4b:4e:57:75:1d:30:20:39:fb:cf:cb:32:5d:1a:28:41:
52:a9:2d:59:08:92:2f:32:f7:32:92:0c:63:97:cc:72:a1:b6:
72:e5:e3:34:ab:da:7b:f2:bf:a5:21:9c:a1:05:f0:be:b4:17:
80:04:74:c8:f1:67:14:b5:3b:63:42:42:20:20:db:bb:c7:ec:
03:06:f3:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 01:23:40 2026 by rpki-client