Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/YVs4Iz2Wo38eSa5A15-s4cUSjQI.roa
File: YVs4Iz2Wo38eSa5A15-s4cUSjQI.roa (raw, json)
Hash identifier: Dwbb3pbOkdbia8wZtb6rGG4DbsJDn1hBkpy3hZhvQsQ=
Subject key identifier: 61:5B:38:23:3D:96:A3:7F:1E:49:AE:40:D7:9F:AC:E1:C5:12:8D:02
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01A09EDB3D8E1FDB9A539D624B9A71DCA450
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/YVs4Iz2Wo38eSa5A15-s4cUSjQI.roa
Signing time: Mon 14 Sep 2026 07:39:23 +0000
ROA not before: Mon 14 Sep 2026 07:39:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212121
IP address blocks: 2a0e:b107:1130::/44 maxlen: 48
2a0e:b107:1130::/48 maxlen: 48
2a0e:b107:1131::/48 maxlen: 48
2a0e:b107:1132::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Sep 2026 20:52:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9e:db:3d:8e:1f:db:9a:53:9d:62:4b:9a:71:dc:a4:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Sep 14 07:39:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=615b38233d96a37f1e49ae40d79face1c5128d02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9b:48:31:2e:ac:c2:2e:ac:63:22:3a:e2:54:
28:81:b3:24:c8:e1:25:71:b6:5b:1e:80:cb:db:b0:
34:22:f8:75:cb:f3:8a:ef:4c:e1:28:e5:ca:43:d9:
63:ce:29:6a:ad:da:3b:74:86:5c:30:0b:31:55:a3:
55:7f:7c:4b:4e:54:80:3b:5c:04:05:ed:e7:30:8c:
d5:72:15:17:dc:25:8f:34:8f:80:69:83:68:f6:5f:
ed:e3:8f:e5:6e:cd:b8:a9:fa:01:84:db:8c:3a:b9:
ad:01:b4:b5:45:d9:c3:09:f6:a7:39:a5:75:73:ae:
a5:5e:95:9a:50:19:b4:a6:82:2d:46:4d:94:f4:49:
78:17:96:b3:aa:1f:6a:cc:aa:6f:e0:a4:e2:94:6c:
89:28:a3:da:62:ed:d8:a4:e7:d7:3d:a1:85:ac:de:
75:40:48:14:b1:9d:d5:33:0b:5d:f2:c9:25:41:fe:
56:d5:08:de:d4:6b:81:52:96:fc:c3:c6:72:d3:e7:
a3:cc:d8:6e:37:ad:6a:9d:7c:fd:36:eb:04:75:e6:
cc:90:9a:52:14:b4:da:a0:e2:d9:6b:e0:5a:3d:40:
0e:8a:bc:65:64:89:49:9b:99:db:e5:9d:62:06:0e:
57:42:74:1a:ec:8c:04:db:6b:5c:c9:43:4d:45:44:
f4:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:5B:38:23:3D:96:A3:7F:1E:49:AE:40:D7:9F:AC:E1:C5:12:8D:02
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/YVs4Iz2Wo38eSa5A15-s4cUSjQI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:1130::/44
Signature Algorithm: sha256WithRSAEncryption
ca:9e:dc:56:50:04:ff:7b:80:63:67:8a:af:8e:02:dd:19:12:
c4:d2:63:f7:6b:48:ae:86:96:e3:a7:a6:6a:81:fe:fb:2a:15:
1f:3f:09:a6:1b:27:37:21:0c:e8:ad:44:29:14:23:34:c2:c2:
44:68:76:22:2c:11:02:ae:0e:4c:9a:f4:8e:d1:23:6a:22:8a:
c1:38:2c:ba:a2:d0:bc:14:36:94:db:51:21:f3:7a:70:29:c0:
98:03:a3:3c:7d:3a:45:81:93:88:c0:09:d3:27:27:a3:c3:1c:
0f:e8:e7:fd:a8:d9:17:39:4b:23:fe:25:da:16:00:16:1a:da:
49:ed:60:16:43:40:4a:69:b7:f4:92:3d:47:56:ba:b0:cf:ac:
0c:7e:9e:5a:2d:4d:5f:eb:f5:7f:bb:37:64:20:d2:b2:77:22:
48:91:73:a7:93:f2:9f:9a:be:ee:fe:7e:78:cd:d1:a4:39:5b:
93:37:b4:6f:73:6f:2a:af:2a:d2:d0:89:5e:68:ac:cd:92:f6:
62:f9:8c:38:02:21:4c:01:48:8b:de:97:7f:42:01:8b:f6:35:
fb:a8:8f:26:3e:bc:5b:70:90:82:cb:18:7b:4a:a6:8a:9d:87:
d8:c3:d5:7f:99:70:b0:20:e9:8c:3c:cb:8c:d8:01:55:da:a9:
86:63:45:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 01:23:50 2026 by rpki-client