Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/WACkArTUwzhzN2UDIHQPQ3yN2tc.roa
File: WACkArTUwzhzN2UDIHQPQ3yN2tc.roa (raw, json)
Hash identifier: VbHFPDAsavnZhj3xPWgHPuPiA5cQCSm1lDy8lXF3uKM=
Subject key identifier: 58:00:A4:02:B4:D4:C3:38:73:37:65:03:20:74:0F:43:7C:8D:DA:D7
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01A090D7610B3B1EC09B76CFB21A42293E1E
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/WACkArTUwzhzN2UDIHQPQ3yN2tc.roa
Signing time: Fri 11 Sep 2026 14:20:29 +0000
ROA not before: Fri 11 Sep 2026 14:20:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218686
IP address blocks: 2a0e:97c0:360::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 21:40:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:90:d7:61:0b:3b:1e:c0:9b:76:cf:b2:1a:42:29:3e:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Sep 11 14:20:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5800a402b4d4c3387337650320740f437c8ddad7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d8:6d:c2:11:4e:aa:0c:cc:52:ff:15:d7:41:
af:9d:96:3b:29:a4:c6:b1:e5:a9:5e:b9:88:ef:b5:
4c:d7:87:0e:0f:ae:e3:36:87:7d:a6:7e:98:6a:01:
bc:bb:a4:47:d0:0a:b3:74:a5:8f:42:97:f4:87:af:
5e:0a:73:dc:fd:83:c9:a6:10:89:1f:a3:d7:60:ae:
af:f9:5d:21:a8:6b:67:e1:fa:41:c8:82:7a:72:64:
69:11:2f:6e:d0:a7:c6:b2:01:b2:8d:df:d6:8f:f5:
b9:7e:6c:62:67:9c:4b:33:38:11:44:48:57:d3:3b:
41:5f:53:df:1a:bf:89:0e:a5:6e:22:25:ec:3e:9d:
f9:f4:6a:da:88:69:2e:e3:33:cf:6d:17:7e:f0:b1:
90:02:4d:af:37:81:5d:e6:a2:b6:b5:33:6d:9b:8e:
cd:0f:10:c3:dc:98:b5:78:b4:7b:b2:70:6c:fe:b6:
b1:30:03:b5:3d:b6:25:d9:8f:14:02:14:2b:9a:26:
ae:02:39:08:b1:37:ee:6d:27:46:25:de:d6:ab:91:
bf:67:52:6f:bb:b9:79:df:42:b6:c3:82:a3:a5:cb:
26:81:f9:6c:f6:09:ca:ed:47:f1:cf:21:cb:92:f9:
e7:16:56:e2:9e:e8:42:10:be:38:e5:13:04:79:0b:
3e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:00:A4:02:B4:D4:C3:38:73:37:65:03:20:74:0F:43:7C:8D:DA:D7
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/WACkArTUwzhzN2UDIHQPQ3yN2tc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:360::/44
Signature Algorithm: sha256WithRSAEncryption
4a:13:22:d9:eb:aa:0a:25:8e:79:b9:74:64:76:af:06:3f:ed:
57:85:e1:76:c8:96:4c:6f:af:87:52:53:da:eb:d5:e0:a8:bd:
52:66:4c:1b:62:63:cc:0e:58:86:3a:79:68:97:eb:37:e5:78:
1d:f2:f6:b3:a6:13:e1:18:bf:d7:cd:d0:7c:c9:e0:8f:8c:58:
c2:17:e3:6e:01:9c:8a:7a:b1:85:6f:5d:1f:47:bf:71:a5:d0:
0b:43:99:5b:ea:f1:02:fd:14:0c:e9:92:29:f7:3b:2d:bc:56:
d2:17:b3:58:5f:16:cc:7c:49:8e:2b:07:32:5f:62:04:4d:e8:
38:e1:6d:a4:d6:1f:a6:17:d5:d5:2c:b9:40:fe:32:42:cf:59:
15:d6:85:36:29:51:eb:08:a6:f2:d0:d9:20:17:0d:19:ff:d8:
64:6d:31:cb:5e:f0:d7:a2:84:f8:4a:f3:13:20:fc:45:46:3b:
f8:3e:77:07:6e:3a:c8:03:4c:4b:38:40:a7:57:61:7f:b3:8a:
e0:46:aa:30:13:cf:64:d2:5d:06:9d:7f:81:2d:69:5c:f6:c3:
ad:69:b7:77:82:1e:49:ab:2f:6f:fe:8c:5d:b1:3f:a5:d0:2a:
33:c0:40:73:67:a6:0a:14:50:02:16:a5:70:11:1e:e5:43:10:
ce:a8:93:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 12 05:06:14 2026 by rpki-client