Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Xbd2NTWXaQXuvMFZ-WOAOTCigWs.roa
File: Xbd2NTWXaQXuvMFZ-WOAOTCigWs.roa (raw, json)
Hash identifier: 6Sg17dDUMNJoejJBJz8FsJ2wPXg2t9Z+7RMyW6JVnIk=
Subject key identifier: 5D:B7:76:35:35:97:69:05:EE:BC:C1:59:F9:63:80:39:30:A2:81:6B
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01A09A0BFCBC9686E636AEB9D3DC5CEBDF6F
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Xbd2NTWXaQXuvMFZ-WOAOTCigWs.roa
Signing time: Sun 13 Sep 2026 09:14:31 +0000
ROA not before: Sun 13 Sep 2026 09:14:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199340
IP address blocks: 2a06:de03:9c00::/38 maxlen: 48
2a06:de05:6000::/38 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Sep 2026 12:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9a:0b:fc:bc:96:86:e6:36:ae:b9:d3:dc:5c:eb:df:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Sep 13 09:14:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5db7763535976905eebcc159f963803930a2816b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6f:4f:07:9c:ac:b9:e2:50:dd:dd:45:89:47:
62:05:9c:cf:59:09:06:e4:bd:dc:55:6c:a2:00:12:
6e:b4:41:d3:51:33:68:ba:48:6e:58:7f:f2:1e:ff:
f1:31:2b:6e:9c:51:54:01:af:4b:36:1c:92:72:81:
e7:d7:06:dd:95:25:32:a9:bb:1e:be:2d:4c:81:bd:
45:b3:3d:d4:74:31:13:3a:57:bf:5b:d1:5d:13:36:
08:7b:ea:49:f7:d2:9d:63:53:62:32:38:ff:84:87:
c5:c5:4f:ad:80:72:ba:ec:73:c4:ea:0a:33:81:b9:
64:8a:04:6e:6b:af:7c:c2:ba:a0:24:66:10:86:17:
dd:8a:fb:ce:43:dd:10:20:8b:8e:32:19:c8:a8:3b:
68:9c:f2:98:7b:dc:6d:ed:5d:0e:49:af:cc:1b:ad:
91:6c:2e:88:23:03:df:a2:bc:fa:1c:ee:89:6d:a6:
af:fc:ed:fa:63:bd:ce:1a:91:a5:83:4d:70:cf:37:
6e:7f:8f:2c:7e:50:c6:03:6f:88:77:d6:c0:4b:7e:
54:78:38:79:ee:af:dc:08:ea:ee:a4:6b:b9:a6:ec:
59:6d:f5:4b:59:9c:2d:8f:d7:2d:bd:5a:13:24:39:
77:03:38:41:35:80:3c:66:e0:42:ee:05:d3:0d:53:
c0:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:B7:76:35:35:97:69:05:EE:BC:C1:59:F9:63:80:39:30:A2:81:6B
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Xbd2NTWXaQXuvMFZ-WOAOTCigWs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:de03:9c00::/38
2a06:de05:6000::/38
Signature Algorithm: sha256WithRSAEncryption
07:70:b7:af:19:f6:90:a7:cf:86:ff:a2:f0:05:02:fb:63:2a:
9b:33:84:6a:ed:4a:df:21:58:23:a5:70:71:7c:af:74:ef:0e:
ef:3a:36:8a:39:8a:d6:c7:48:91:83:9b:3b:64:57:7a:21:e0:
ea:1e:2c:cb:dd:eb:77:41:ae:1e:39:09:df:a0:51:34:cc:ce:
7d:1e:8d:94:ba:de:a8:8a:e2:10:b4:4f:d4:b4:4b:59:12:ce:
4a:7e:ab:15:76:07:6b:0f:99:54:85:d0:0c:c5:7e:10:cd:b6:
af:0d:c4:96:f9:d5:ab:e9:9d:bc:6e:63:28:2b:a6:30:0c:53:
52:70:47:da:3c:98:05:fe:5e:18:bf:dd:a7:4e:80:e4:38:db:
d2:4e:5d:4b:d4:24:b0:12:0a:a0:06:b8:e2:2d:84:f2:7b:0d:
eb:0e:be:06:a8:7b:44:7a:64:0e:a8:1f:37:aa:7a:5a:6c:1e:
e4:96:d6:05:fe:bc:18:ab:07:7a:13:51:c3:9d:4d:8c:36:85:
36:0f:23:3c:3a:35:e4:de:05:cf:a7:58:17:1a:4e:ca:27:f2:
9c:1c:14:f8:72:8d:aa:35:34:21:95:14:8f:0e:22:a8:e8:3b:
7d:45:05:4f:06:3e:39:18:28:9b:b5:c4:3e:72:4d:f0:6b:38:
88:b1:54:d6
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgISAaCaC/y8lobmNq6509xc699vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjYwOTEzMDkxNDMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZGI3NzYzNTM1OTc2OTA1ZWViY2MxNTlmOTYzODAzOTMwYTI4MTZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArG9PB5ysueJQ3d1FiUdiBZzPWQkG
5L3cVWyiABJutEHTUTNoukhuWH/yHv/xMStunFFUAa9LNhyScoHn1wbdlSUyqbse
vi1Mgb1Fsz3UdDETOle/W9FdEzYIe+pJ99KdY1NiMjj/hIfFxU+tgHK67HPE6goz
gblkigRua698wrqgJGYQhhfdivvOQ90QIIuOMhnIqDtonPKYe9xt7V0OSa/MG62R
bC6IIwPforz6HO6Jbaav/O36Y73OGpGlg01wzzduf48sflDGA2+Id9bAS35UeDh5
7q/cCOrupGu5puxZbfVLWZwtj9ctvVoTJDl3AzhBNYA8ZuBC7gXTDVPAJwIDAQAB
o4ICEzCCAg8wHQYDVR0OBBYEFF23djU1l2kF7rzBWfljgDkwooFrMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvWGJkMk5UV1hhUVh1dk1GWi1XT0FPVENpZ1dzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCkGCCsGAQUFBwEHAQH/BBowGDAWBAIAAjAQAwYCKgbeA5wD
BgIqBt4FYDANBgkqhkiG9w0BAQsFAAOCAQEAB3C3rxn2kKfPhv+i8AUC+2MqmzOE
au1K3yFYI6VwcXyvdO8O7zo2ijmK1sdIkYObO2RXeiHg6h4sy93rd0GuHjkJ36BR
NMzOfR6NlLreqIriELRP1LRLWRLOSn6rFXYHaw+ZVIXQDMV+EM22rw3ElvnVq+md
vG5jKCumMAxTUnBH2jyYBf5eGL/dp06A5Djb0k5dS9QksBIKoAa44i2E8nsN6w6+
Bqh7RHpkDqgfN6p6Wmwe5JbWBf68GKsHehNRw51NjDaFNg8jPDo15N4Fz6dYFxpO
yifynBwU+HKNqjU0IZUUjw4iqOg7fUUFTwY+ORgom7XEPnJN8Gs4iLFU1g==
-----END CERTIFICATE-----
Generated at Sun Sep 13 20:29:40 2026 by rpki-client