Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/V0MdDJ62IqJEFVjIxy9rLQLC-Pg.roa
File: V0MdDJ62IqJEFVjIxy9rLQLC-Pg.roa (raw, json)
Hash identifier: sUCAtGFB6jnP5J2bqaWQQ+NV+uT8EcsuOUE64zZlT2U=
Subject key identifier: 57:43:1D:0C:9E:B6:22:A2:44:15:58:C8:C7:2F:6B:2D:02:C2:F8:F8
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019EC5F513C7B23DC9B0B31C06763E557C9A
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/V0MdDJ62IqJEFVjIxy9rLQLC-Pg.roa
Signing time: Sun 14 Jun 2026 11:47:13 +0000
ROA not before: Sun 14 Jun 2026 11:47:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212895
IP address blocks: 2a0e:97c0:d00::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Jun 2026 18:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c5:f5:13:c7:b2:3d:c9:b0:b3:1c:06:76:3e:55:7c:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jun 14 11:47:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=57431d0c9eb622a2441558c8c72f6b2d02c2f8f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ca:4e:c5:53:94:b2:2f:4c:65:ce:56:d0:38:
23:f5:76:fd:53:bc:02:d2:74:68:3c:6e:45:41:76:
b7:b9:28:00:ad:65:5e:c5:20:ac:b5:1c:32:d3:2f:
f3:b2:61:0d:a8:80:69:a1:50:60:5e:8a:22:ca:9b:
fc:c3:bb:60:f3:1e:0b:14:4e:d3:ec:4e:cb:e2:e9:
ab:df:21:53:01:6a:d2:5a:ad:53:da:ca:eb:43:02:
c2:91:24:c4:4f:a4:12:04:c6:dd:ba:70:8d:4e:7c:
2e:4b:cf:15:29:0a:b6:6c:60:ca:3e:be:b6:93:b2:
7d:41:13:21:fd:de:e3:f4:aa:7b:ae:51:09:30:67:
95:ec:4d:6b:92:2a:6d:a2:1e:de:13:71:f7:90:26:
5d:5c:e0:1f:32:2a:73:c6:a5:58:af:7b:22:c6:fa:
c5:67:69:29:50:88:cb:18:ef:19:4e:9a:c9:58:ee:
51:d4:19:76:54:c3:75:ca:4e:7c:7c:8e:6d:1b:c6:
fa:20:60:4c:3b:89:00:98:3a:1d:d6:05:f2:7c:f8:
46:bc:09:6c:d3:d1:1e:fc:2b:57:ae:7f:74:25:c1:
c2:6c:d9:95:b7:c5:be:28:cd:95:dc:65:7b:14:95:
42:61:1e:a3:f5:95:b2:52:11:41:90:45:f2:b4:e2:
ae:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:43:1D:0C:9E:B6:22:A2:44:15:58:C8:C7:2F:6B:2D:02:C2:F8:F8
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/V0MdDJ62IqJEFVjIxy9rLQLC-Pg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:d00::/44
Signature Algorithm: sha256WithRSAEncryption
9c:2c:fc:eb:a5:d6:3b:81:e9:72:9e:88:62:3e:d5:82:fd:8c:
e9:d7:7e:fb:e4:d3:a2:81:4c:73:09:5a:0f:f6:4a:2a:d8:df:
15:dc:4f:97:c2:97:38:b8:df:f0:df:07:ed:14:43:d5:94:89:
67:c5:35:cf:0a:86:7f:88:7e:80:0f:94:cf:5c:33:16:ef:0f:
41:c1:bb:c6:53:29:8c:e0:e0:3c:d2:f0:04:fd:90:54:53:70:
48:3c:75:f4:a4:99:6f:05:eb:c5:fc:05:83:ad:8f:bf:0e:1d:
f9:e4:b7:ef:8a:b2:40:3e:c1:50:b3:ca:d9:5c:12:2a:96:d9:
d8:1b:45:80:53:64:86:10:55:45:56:f8:2b:59:9c:4d:e5:65:
b0:28:89:82:3f:9f:07:67:61:af:c3:51:2b:11:8e:e3:74:9f:
81:08:80:2d:6f:3f:64:35:f3:c7:12:f9:05:c8:1c:1d:35:55:
d6:14:16:80:18:3f:e2:5e:fe:97:1a:96:2d:60:c1:6e:5b:e4:
55:93:61:3b:2d:49:bd:98:83:15:da:a4:3b:f9:5f:ce:33:45:
df:ee:a5:c3:58:e9:1e:9c:ee:7c:1e:05:af:80:21:4c:41:06:
cb:97:4e:62:10:d8:c3:c6:83:b7:e9:e9:61:0b:aa:bf:df:ba:
38:2b:15:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 15 01:14:15 2026 by rpki-client