Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/_-7V18ZZI7aUpt64Hn0AICpKzZQ.roa
File: _-7V18ZZI7aUpt64Hn0AICpKzZQ.roa (raw, json)
Hash identifier: C+akktVuYkF06fEyDRlxwkISRFWnZHwtHj0oHDjthVg=
Subject key identifier: FF:EE:D5:D7:C6:59:23:B6:94:A6:DE:B8:1E:7D:00:20:2A:4A:CD:94
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01A089B11014465F66BA2A85DC5DB3905AC5
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/_-7V18ZZI7aUpt64Hn0AICpKzZQ.roa
Signing time: Thu 10 Sep 2026 05:01:17 +0000
ROA not before: Thu 10 Sep 2026 05:01:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197309
IP address blocks: 45.12.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 05:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:89:b1:10:14:46:5f:66:ba:2a:85:dc:5d:b3:90:5a:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Sep 10 05:01:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ffeed5d7c65923b694a6deb81e7d00202a4acd94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c3:42:43:98:35:b4:24:13:88:85:cd:2e:2f:
9f:50:87:50:d1:09:e0:f7:8f:59:c8:6c:b3:50:8a:
84:59:87:f5:10:1b:0d:00:de:24:6b:60:57:6f:a3:
ed:dc:48:78:a0:1d:f4:c4:dd:32:db:22:97:9a:98:
7b:13:ac:f7:fc:bd:fa:7d:8e:df:b8:10:81:7f:a1:
9c:44:7b:68:04:41:9c:3c:96:0e:49:ec:9a:e4:18:
32:17:a1:fe:14:6e:b3:d8:c9:74:5e:b0:f5:df:e5:
b7:ee:e9:c6:17:b7:78:7f:70:b2:79:ce:4f:a6:d8:
8c:74:35:4c:90:ba:3d:c9:f9:ea:e6:69:0a:c8:85:
7d:49:f4:2b:e7:27:7e:d1:f0:20:8e:62:b9:e5:5e:
75:56:91:bf:1d:fa:e7:73:92:5b:6d:73:64:7d:e3:
c2:45:2b:5a:da:4d:3a:ec:66:30:25:1b:06:6c:c8:
cf:ec:3a:17:d3:69:fb:94:75:23:81:dc:1d:b4:40:
b3:e7:b4:e2:67:59:bb:32:44:47:77:2c:33:6d:46:
5d:0b:13:8f:9f:bf:95:12:f3:dc:36:7a:a4:df:a5:
78:30:f7:75:8e:ac:dc:2a:f9:21:f0:32:ed:ae:a2:
a0:a5:55:a6:d6:8d:96:f7:ca:5a:73:68:cc:c0:94:
17:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:EE:D5:D7:C6:59:23:B6:94:A6:DE:B8:1E:7D:00:20:2A:4A:CD:94
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/_-7V18ZZI7aUpt64Hn0AICpKzZQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.71.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:bf:6c:53:45:39:ec:33:87:e0:a9:b7:e5:36:36:0d:f3:30:
bc:5c:87:d6:43:12:e4:7e:c6:5c:e0:45:fe:a1:37:9e:8e:59:
63:47:99:82:ce:d0:9e:64:f6:87:98:c8:c8:67:4f:8a:f8:45:
a8:9f:64:48:9a:7f:1e:58:fd:7e:e3:82:66:47:06:7e:eb:9c:
8d:0b:f2:b4:0a:80:08:88:d2:37:61:32:2d:2b:fe:1c:16:5e:
f7:18:a5:33:0c:ff:cf:10:a3:8a:a9:0c:13:d6:fe:86:c8:6d:
13:30:d8:7d:d2:ad:c6:97:a4:1f:86:31:5c:4c:8d:82:00:42:
a1:39:92:9a:f6:55:6b:22:bd:94:87:81:17:58:59:d5:d1:79:
b6:a2:44:e3:33:a7:1b:7c:2d:b6:4b:56:c6:c0:1a:63:5a:5c:
c7:0e:0e:5c:5e:0b:06:6c:bc:fc:24:3d:47:a0:c1:c8:e0:bd:
57:89:34:f0:5c:be:55:f3:27:32:2e:dc:ab:d1:51:ee:1d:f0:
8a:37:ac:90:21:86:8f:6a:c1:c5:a6:5a:a4:d6:a2:aa:40:4a:
fa:6f:a5:94:83:1f:c0:34:5d:5e:32:ac:45:b2:b7:d7:24:ba:
33:ab:8d:50:ad:0a:86:ec:88:74:cd:7d:14:0c:47:08:b7:56:
27:c8:dd:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 14:46:06 2026 by rpki-client