Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/WQ97h9d1DGx0B5H0rpTizW6gE8Q.roa
File: WQ97h9d1DGx0B5H0rpTizW6gE8Q.roa (raw, json)
Hash identifier: C2n/dvyneSs1ezTk0Zhzi+x01RHeahChIlzP9A2i37I=
Subject key identifier: 59:0F:7B:87:D7:75:0C:6C:74:07:91:F4:AE:94:E2:CD:6E:A0:13:C4
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01A013848E6297D1383ED154C1759422033E
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/WQ97h9d1DGx0B5H0rpTizW6gE8Q.roa
Signing time: Tue 18 Aug 2026 06:17:29 +0000
ROA not before: Tue 18 Aug 2026 06:17:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219283
IP address blocks: 2a06:de07:f800::/39 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 19 Aug 2026 06:18:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:13:84:8e:62:97:d1:38:3e:d1:54:c1:75:94:22:03:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Aug 18 06:17:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=590f7b87d7750c6c740791f4ae94e2cd6ea013c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:6e:56:96:78:e1:b5:dd:43:38:57:10:e1:98:
7f:02:cb:c4:63:c6:32:5e:5c:a9:f2:e9:0a:43:b1:
6b:05:37:83:53:b7:27:23:9d:41:16:10:63:25:a4:
fa:65:9d:1a:1b:be:a3:11:f7:5a:a4:13:01:e1:d1:
fd:bd:72:b3:98:b5:b7:a0:8f:e0:54:a7:48:a6:54:
6f:8e:07:cc:8b:38:f5:1f:73:d5:d6:8d:c0:7e:3f:
85:c2:f8:d1:ed:12:0c:86:ea:31:fc:c3:14:fb:4f:
7f:0b:8a:16:ab:52:95:29:2b:e4:8a:b7:cc:75:5a:
74:d2:93:21:02:d0:36:b0:2e:a3:5e:66:6a:9d:9f:
bb:b0:f0:97:7e:25:d1:d8:b9:6b:3d:5c:39:99:c8:
19:19:67:6b:03:5d:92:5c:d0:91:5a:93:33:58:0c:
1e:bc:2d:84:a0:dc:3d:9f:44:38:44:84:67:da:a6:
e7:bd:01:32:0e:2f:12:80:f2:19:88:d8:fc:51:02:
bc:1f:b2:91:cc:86:a1:e6:98:cb:fc:9e:47:10:7a:
ef:a4:ce:e3:6e:d1:e9:21:2f:5c:c0:b0:1f:4a:0a:
22:cd:2c:08:c3:86:19:2c:0a:e7:54:a0:04:6b:f6:
37:89:d4:82:f8:72:fd:58:2d:b3:d4:4b:b4:23:2e:
1f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:0F:7B:87:D7:75:0C:6C:74:07:91:F4:AE:94:E2:CD:6E:A0:13:C4
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/WQ97h9d1DGx0B5H0rpTizW6gE8Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:de07:f800::/39
Signature Algorithm: sha256WithRSAEncryption
98:2c:35:fd:da:c7:d8:f9:3d:b2:4d:05:76:2d:c1:1b:23:19:
ea:10:00:a1:68:20:b2:38:fd:91:b5:f9:1d:47:4d:4b:8d:ea:
65:60:0b:d0:89:5b:f5:f2:d6:0a:92:f9:b2:20:69:6d:32:ee:
a3:51:57:ec:fb:33:52:27:38:62:12:aa:31:0d:25:e1:fc:c2:
4e:b6:86:69:61:23:d9:8d:1e:aa:ef:6f:87:48:20:de:5b:f8:
41:d2:59:fa:40:59:ab:6d:90:d0:c7:9f:dc:9d:53:59:73:4e:
25:3c:28:31:24:4c:18:5f:f5:f1:f8:2a:ce:02:c8:1a:8c:4a:
d8:03:b0:a6:e9:fd:e8:80:71:a7:b8:32:d8:02:c3:60:01:ab:
65:36:8f:49:04:63:7a:c8:58:a9:91:ea:f9:05:aa:ba:c1:6c:
8e:1a:ae:16:b1:ed:e6:49:04:61:42:6d:e1:da:57:45:0e:c4:
0b:fd:85:30:04:7c:49:19:f9:45:78:f0:34:23:6e:e2:d6:ac:
be:14:ce:65:96:38:a9:fa:72:3e:c1:92:6a:59:d5:95:ae:6d:
95:8a:13:cb:3c:4c:26:a0:c7:16:f1:ff:f8:ea:13:f6:fb:71:
ee:49:8a:e6:21:56:97:d0:09:ba:5d:1c:77:6c:31:53:45:a1:
5b:b9:dc:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 18 10:40:24 2026 by rpki-client