Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ToKNZd2Fq_WlhtEK-NPtTyhHfUY.roa
File: ToKNZd2Fq_WlhtEK-NPtTyhHfUY.roa (raw, json)
Hash identifier: 3pl32sahm5ASCJ5Fiu5QpRmKxgYZCDrpdnv5lwXbT6M=
Subject key identifier: 4E:82:8D:65:DD:85:AB:F5:A5:86:D1:0A:F8:D3:ED:4F:28:47:7D:46
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019F2F53BE423F98075E6F580C852FA31364
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ToKNZd2Fq_WlhtEK-NPtTyhHfUY.roa
Signing time: Sat 04 Jul 2026 22:50:45 +0000
ROA not before: Sat 04 Jul 2026 22:50:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44024
IP address blocks: 2a06:de00:7000::/48 maxlen: 48
2a06:de00:7001::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 Jul 2026 22:50:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:2f:53:be:42:3f:98:07:5e:6f:58:0c:85:2f:a3:13:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jul 4 22:50:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4e828d65dd85abf5a586d10af8d3ed4f28477d46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:64:e9:94:4c:b9:f5:01:bc:8b:a9:cf:38:2c:
2c:81:9d:9c:46:8d:62:0f:e0:4f:ae:10:bb:22:5f:
90:d2:7d:cf:98:77:bb:26:10:27:0b:e8:55:86:49:
18:dd:7c:0f:42:d1:11:10:f6:85:ff:07:7e:7c:bc:
79:fa:7d:e7:d9:55:fa:0e:a1:6e:62:d5:5f:e2:29:
88:f9:cb:fb:14:ff:da:69:45:b8:07:1e:fc:7a:04:
de:9e:39:52:f7:08:a3:87:fb:2f:35:71:32:57:e1:
13:c5:cd:17:3a:15:c9:8b:7d:1b:a5:a4:18:ed:31:
ec:f1:24:c8:88:6a:1c:f6:ed:4d:08:0a:09:1c:ff:
f1:52:91:a0:f0:cd:d5:90:97:e8:6b:f1:16:f0:df:
ab:48:bd:03:99:85:87:b5:56:0c:58:e7:10:fb:4c:
c3:88:1d:e3:7e:bd:cb:3a:43:f0:3f:3a:0b:d5:ce:
d3:64:36:63:b6:5a:d4:e2:91:04:9f:35:bf:73:92:
e3:6b:9c:cc:37:49:d5:e1:c0:ad:41:7f:de:dc:9d:
46:52:d3:35:00:89:02:28:f1:09:ab:65:8c:53:37:
81:ce:dd:b6:4e:f0:58:59:55:79:de:4a:73:50:6b:
d2:1f:05:cd:f7:f5:2a:c1:12:fc:83:9b:e3:61:a6:
a4:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:82:8D:65:DD:85:AB:F5:A5:86:D1:0A:F8:D3:ED:4F:28:47:7D:46
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ToKNZd2Fq_WlhtEK-NPtTyhHfUY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:de00:7000::/47
Signature Algorithm: sha256WithRSAEncryption
ac:93:98:9c:32:8c:83:f7:2d:85:4d:22:b1:dc:28:5c:a6:c3:
09:c3:bb:1e:95:3d:1f:c5:f1:3e:c9:81:9f:9a:02:ce:a0:f3:
17:70:10:99:db:16:3e:07:39:bd:d3:69:43:47:35:e3:e0:65:
ea:ec:21:c8:9e:61:e3:ec:3d:b6:bc:3b:27:ed:16:95:a1:8f:
8f:cb:a2:2d:e7:09:45:3f:44:8b:ab:65:70:d9:00:81:65:5c:
d1:c4:03:9b:18:48:c0:a4:dc:b2:c4:65:c1:18:cc:4e:ab:18:
4e:6b:21:a9:9d:51:5b:69:b1:7c:21:b3:3b:b2:bd:cd:ca:14:
d5:90:a3:9f:bf:cc:32:e9:c2:b1:e9:92:84:ff:4b:ed:e2:45:
40:37:cc:01:fd:f1:fc:0d:c0:88:5f:89:82:57:0d:b1:bb:75:
96:9e:5f:05:a9:b6:d7:cc:b7:54:e5:6e:04:31:92:93:9a:f3:
9f:69:61:52:4d:d3:5b:2f:bb:1c:d2:2d:e0:ca:46:78:15:88:
f5:0d:f0:8f:c1:8f:db:d0:96:94:f5:7b:1d:27:b1:b6:cc:06:
e5:ab:18:08:2c:aa:a5:64:47:66:52:ce:09:69:0e:06:1d:80:
ac:27:7b:44:14:8f:25:e0:eb:3b:ca:81:95:62:1b:23:a0:b1:
02:31:66:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 03:32:40 2026 by rpki-client