Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/_7lBMScf1Pt5gRpmQB66vY-Z-HQ.roa
File: _7lBMScf1Pt5gRpmQB66vY-Z-HQ.roa (raw, json)
Hash identifier: GMhFYKUT3LWdDTtOJQfspV1i0N9uE07mXKpI8AX56U8=
Subject key identifier: FF:B9:41:31:27:1F:D4:FB:79:81:1A:66:40:1E:BA:BD:8F:99:F8:74
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01A05A0508436FA442C4F8CFF2A2E5669D1A
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/_7lBMScf1Pt5gRpmQB66vY-Z-HQ.roa
Signing time: Mon 31 Aug 2026 22:51:14 +0000
ROA not before: Mon 31 Aug 2026 22:51:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204051
IP address blocks: 2a10:2f00:186::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 21:38:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5a:05:08:43:6f:a4:42:c4:f8:cf:f2:a2:e5:66:9d:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Aug 31 22:51:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ffb94131271fd4fb79811a66401ebabd8f99f874
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:fc:aa:6f:48:c6:45:a6:16:11:4d:38:de:9a:
75:49:30:59:35:ef:b5:9a:9d:a1:21:e1:f3:bc:cb:
cc:5e:0a:12:c5:4e:6f:3c:c4:0a:f4:7c:d3:91:51:
63:1d:2f:32:02:86:6d:03:1c:2d:e4:21:04:ac:79:
4d:c6:23:d6:a3:46:65:97:c1:f9:26:c0:b7:b4:f2:
5b:3a:67:70:e6:f9:eb:74:e7:65:67:ed:9d:69:09:
7d:be:8c:eb:dd:ee:ca:ea:3d:59:a8:30:54:51:9f:
90:e2:a1:11:5b:86:bf:c8:95:4e:63:97:56:03:51:
36:44:3c:ce:c1:cd:24:1d:08:a6:ae:a4:99:3a:91:
0c:b2:1a:c7:67:50:b1:31:01:0e:6b:1d:ba:b8:bd:
85:32:4b:1b:aa:d5:a2:ab:c9:ce:69:6f:46:0d:a8:
d1:77:2c:00:a2:12:a3:6a:93:35:6c:b9:d4:71:a2:
63:8a:34:fc:7b:93:f4:62:e1:da:95:ae:c4:ff:46:
33:97:9f:bf:88:91:2c:d1:49:cb:a7:f6:9b:7d:84:
88:29:bc:72:cd:ae:2b:60:ff:a3:b0:2a:40:d6:69:
09:9d:f1:bc:96:89:8e:35:67:95:81:64:8b:d4:21:
6d:2e:15:e1:ca:af:95:ff:12:88:3a:00:0e:0a:f7:
3a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:B9:41:31:27:1F:D4:FB:79:81:1A:66:40:1E:BA:BD:8F:99:F8:74
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/_7lBMScf1Pt5gRpmQB66vY-Z-HQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:2f00:186::/48
Signature Algorithm: sha256WithRSAEncryption
7b:37:6b:25:e1:f5:48:99:f3:b5:c4:6b:cd:c0:d3:05:e3:80:
db:70:e9:33:2d:71:60:d2:99:4d:be:e0:8d:e9:bf:e8:50:80:
24:67:e5:63:a7:e2:ab:2e:c1:f1:2d:e4:42:1d:14:d2:37:63:
c0:b8:ac:c4:7c:ce:1a:d2:f8:92:8a:13:9f:74:3a:b3:2a:a7:
10:5f:fd:b2:11:5d:6e:c0:b0:c6:28:25:54:66:5f:6e:6b:06:
88:c0:51:7d:e6:5c:48:65:b5:98:00:90:ab:95:fb:b3:a9:b8:
16:61:69:1f:b4:ae:03:0d:eb:0a:cb:78:f3:e7:09:dd:94:c2:
ac:86:a7:25:b8:5c:4c:71:98:0a:4f:18:db:ee:1e:bb:c2:55:
b2:dc:af:f5:c2:04:fe:7e:5a:46:28:3b:39:c3:5e:37:32:19:
53:92:01:c2:5d:fa:93:9b:c4:ab:7d:61:9a:c7:b9:96:c6:90:
d9:51:41:60:2c:7f:42:01:9d:02:3c:b3:0f:d7:14:98:2c:fc:
e0:8a:33:ce:93:99:f2:1b:76:c1:84:d0:02:32:d4:7e:d9:41:
ad:29:e4:e8:98:86:75:3b:34:00:89:51:33:74:c7:ca:50:71:
0e:24:35:db:4c:cf:6a:26:d2:56:eb:65:11:a1:04:82:ab:47:
f4:60:1b:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 03:46:46 2026 by rpki-client