Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/V2tSvpoIBfKNCcXGVIp82722HRQ.roa
File: V2tSvpoIBfKNCcXGVIp82722HRQ.roa (raw, json)
Hash identifier: w3cxXWkv/FIsx3a+gmh5oe2V6chgc9l6AoQES/z+oB4=
Subject key identifier: 57:6B:52:BE:9A:08:05:F2:8D:09:C5:C6:54:8A:7C:DB:BD:B6:1D:14
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01A13B9312C881936ECB4A7FF01D18F97381
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/V2tSvpoIBfKNCcXGVIp82722HRQ.roa
Signing time: Wed 14 Oct 2026 18:00:56 +0000
ROA not before: Wed 14 Oct 2026 18:00:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59245
IP address blocks: 185.102.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3b:93:12:c8:81:93:6e:cb:4a:7f:f0:1d:18:f9:73:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Oct 14 18:00:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=576b52be9a0805f28d09c5c6548a7cdbbdb61d14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:57:e6:a5:76:b9:b5:bf:2a:5a:66:6d:30:cd:
71:e0:0f:91:f5:f0:d2:3c:5f:99:cf:74:d7:1d:f6:
4f:01:65:ad:44:e2:5c:07:d5:25:87:a9:3c:39:b2:
77:61:f4:56:86:b1:d0:c8:f9:d1:07:16:8e:63:42:
16:45:da:43:e1:99:9e:28:68:33:99:3e:ff:56:06:
05:34:7f:00:32:f1:12:b1:19:7f:5a:d9:35:d9:60:
2e:bb:07:ef:ff:4d:ea:05:7a:9e:87:b3:9b:d6:52:
40:4b:b4:63:ef:b2:9b:a4:3f:cc:4b:81:46:49:62:
f2:6f:ec:f4:b0:f3:75:34:fb:8d:92:75:a5:74:75:
f3:91:e5:10:a7:e8:a6:20:de:54:56:31:b6:0c:80:
41:53:8c:84:b3:c2:63:5c:64:8a:63:9d:11:79:79:
3c:16:78:3b:ad:ec:7d:47:8d:ba:1c:52:8c:36:4b:
94:65:52:3b:f5:80:95:8d:fa:0e:5c:8b:94:86:ef:
a6:7f:4a:0d:99:8c:ea:ac:56:c0:15:c7:48:3e:6e:
ef:62:93:b2:79:2f:7b:17:05:e5:f2:b1:6c:f7:28:
21:4c:68:05:6e:77:37:b8:c8:07:80:64:5f:41:6e:
2b:59:47:ca:7b:f9:9c:1e:7d:7f:61:76:4b:69:fa:
dd:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:6B:52:BE:9A:08:05:F2:8D:09:C5:C6:54:8A:7C:DB:BD:B6:1D:14
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/V2tSvpoIBfKNCcXGVIp82722HRQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.102.84.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:69:35:a8:f6:f1:4e:72:bb:23:1b:f2:1d:5d:19:8e:5d:60:
ca:cd:97:05:78:a9:1b:1a:58:80:33:1c:d5:7e:2d:cc:66:6a:
91:01:fb:5c:3e:d3:3e:48:da:dd:32:1a:2c:89:bd:79:28:ef:
0e:c0:2b:3b:fc:68:31:fb:03:a7:7b:c3:d4:dd:3f:dd:5d:76:
ce:2a:85:61:aa:92:bc:49:38:24:93:4a:ea:9d:e8:b5:6a:3d:
b1:ec:55:9f:65:35:fc:2c:2d:a3:11:66:d2:eb:08:de:69:98:
81:e4:b2:dc:22:67:43:f7:72:89:74:85:ad:b4:03:76:07:9c:
e2:52:27:ef:e1:59:13:ed:d3:5e:e4:cc:df:9d:49:0d:d6:6f:
2d:c0:65:bb:c9:f0:ec:41:21:38:ef:60:ba:52:ca:90:67:ce:
e2:0a:fb:f7:01:aa:bb:a5:b9:2e:3c:82:ba:ca:79:bf:22:40:
dd:57:e0:f5:21:4d:88:e4:88:cd:0e:51:22:50:f5:4e:ad:be:
45:52:c1:4b:17:d8:e2:2d:da:f2:fb:fa:07:32:4c:9b:a1:6e:
af:08:5a:ff:4c:a2:f4:35:f4:80:4e:e3:b7:a9:d2:f9:76:a8:
35:a6:e6:95:2d:9c:69:0a:96:ed:fa:02:57:ab:dd:3b:13:cc:
15:d3:7b:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 20:50:11 2026 by rpki-client