Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Wov3X3CsQ8Bw2xK9sJX8H2gzt5U.roa
File: Wov3X3CsQ8Bw2xK9sJX8H2gzt5U.roa (raw, json)
Hash identifier: i8RjYNqH3rcUJInlkSwmI0Fj6kTKwwUVgRzsSLc9n8A=
Subject key identifier: 5A:8B:F7:5F:70:AC:43:C0:70:DB:12:BD:B0:95:FC:1F:68:33:B7:95
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01A09EDB3F9A770AD6FA648E6E7D52CAD6B5
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Wov3X3CsQ8Bw2xK9sJX8H2gzt5U.roa
Signing time: Mon 14 Sep 2026 07:39:23 +0000
ROA not before: Mon 14 Sep 2026 07:39:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212767
IP address blocks: 2a10:2f00:14a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Sep 2026 20:52:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9e:db:3f:9a:77:0a:d6:fa:64:8e:6e:7d:52:ca:d6:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Sep 14 07:39:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5a8bf75f70ac43c070db12bdb095fc1f6833b795
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c0:88:62:91:47:33:2f:18:41:ba:05:aa:d0:
c9:9c:49:09:a9:24:47:22:72:16:ca:f8:72:89:7d:
b0:8a:74:f5:47:13:b3:74:25:0c:96:be:4b:4d:81:
22:57:60:2e:18:2b:97:bb:52:3e:fa:de:71:28:36:
de:7a:85:6e:87:34:9c:b7:9f:9b:17:10:30:34:07:
74:c3:9a:8b:f1:16:df:7a:d3:7c:6b:30:e6:6c:7c:
a8:23:b9:a4:5b:9d:e3:6d:2b:3c:3e:3d:40:ab:2c:
61:86:0e:ea:6f:be:1f:67:6a:65:39:7e:ab:54:6e:
26:f7:61:32:5b:3c:72:f9:38:d9:ef:28:d8:98:fe:
0e:ae:73:a9:49:70:5f:91:13:26:97:15:9c:94:1e:
80:06:9b:2b:e5:6f:a7:ba:fb:e7:0b:e4:8b:4d:62:
34:73:82:7f:02:80:00:e3:35:08:1c:c3:86:a3:f9:
8f:86:c3:7b:cf:b3:39:6d:0e:3c:a3:76:85:24:b5:
2d:90:ea:3e:ad:91:1d:b7:4c:83:89:2b:ec:88:37:
2b:0f:da:56:a8:9e:7c:d1:87:95:c9:2f:8e:9d:14:
cd:a8:18:d8:2d:3e:8d:fa:42:3a:e2:42:e9:fe:e3:
df:4b:d7:ab:f9:81:13:d5:9e:c3:42:f9:f6:53:cf:
4c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:8B:F7:5F:70:AC:43:C0:70:DB:12:BD:B0:95:FC:1F:68:33:B7:95
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Wov3X3CsQ8Bw2xK9sJX8H2gzt5U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:2f00:14a::/48
Signature Algorithm: sha256WithRSAEncryption
73:6d:79:e8:1f:89:5e:d2:a1:79:06:f6:b7:29:fa:20:18:47:
a0:58:ec:81:8a:e8:d5:5e:c0:50:42:a4:db:4b:1c:3e:bf:eb:
7e:a8:1d:2a:f9:fa:6a:24:52:86:60:3f:e4:bf:6b:ed:92:9b:
6d:fa:39:fa:05:b8:57:cf:48:22:22:f5:ee:4c:f3:a1:cd:5b:
40:4b:4b:cd:66:89:15:b0:2e:e6:4d:36:34:90:c6:c5:bb:e5:
cf:cd:8a:44:54:05:54:44:4c:cb:20:19:a5:1a:88:dd:36:83:
54:ac:25:55:cf:6b:48:51:a1:1f:4d:a4:6a:2e:37:0d:b3:68:
cd:af:d0:0e:19:14:7f:7c:53:3b:3c:a8:e3:75:32:03:c7:62:
40:ce:a5:21:19:ce:83:eb:d3:f2:12:1e:dd:c2:b1:53:57:0d:
17:c8:76:fb:74:42:49:bd:89:1d:90:be:ab:65:93:84:69:af:
a4:fa:61:57:a3:c2:94:54:e3:ab:f5:cf:58:67:0b:e1:4f:7f:
df:4d:92:ba:d7:3a:a0:d8:88:2f:76:c7:80:46:46:8d:85:26:
de:46:98:5c:82:4f:c2:0c:5a:21:8a:a4:70:c0:e1:bf:13:5d:
65:38:03:db:fb:8f:8f:81:99:09:f9:6e:d5:a8:e1:a7:7f:13:
10:81:37:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 01:24:10 2026 by rpki-client