Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/_g8273b5ZTpV-2s6ucOWcokuELc.roa
File: _g8273b5ZTpV-2s6ucOWcokuELc.roa (raw, json)
Hash identifier: TXkp1BXleXAJqfu9/db2ll/YobsqaZxx6+MR+8i0Nqc=
Subject key identifier: FE:0F:36:EF:76:F9:65:3A:55:FB:6B:3A:B9:C3:96:72:89:2E:10:B7
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01A09ED4009641E73B37120C135D4C6A4E0D
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/_g8273b5ZTpV-2s6ucOWcokuELc.roa
Signing time: Mon 14 Sep 2026 07:31:28 +0000
ROA not before: Mon 14 Sep 2026 07:31:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210426
IP address blocks: 2a0e:97c0:5e0::/44 maxlen: 48
2a0e:97c0:5e0::/48 maxlen: 48
2a0e:97c0:5e1::/48 maxlen: 48
2a0e:97c0:5e2::/48 maxlen: 48
2a0e:97c0:5e3::/48 maxlen: 48
2a0e:97c0:5e4::/48 maxlen: 48
2a0e:97c0:5e5::/48 maxlen: 48
2a0e:97c0:5e6::/48 maxlen: 48
2a0e:97c0:5e7::/48 maxlen: 48
2a0e:97c0:5e8::/48 maxlen: 48
2a0e:97c0:5e9::/48 maxlen: 48
2a0e:97c0:5ea::/48 maxlen: 48
2a0e:97c0:5eb::/48 maxlen: 48
2a0e:97c0:5ec::/48 maxlen: 48
2a0e:97c0:5ed::/48 maxlen: 48
2a0e:97c0:5ee::/48 maxlen: 48
2a0e:97c0:5ef::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Sep 2026 14:37:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9e:d4:00:96:41:e7:3b:37:12:0c:13:5d:4c:6a:4e:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Sep 14 07:31:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fe0f36ef76f9653a55fb6b3ab9c39672892e10b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:0c:22:e7:a3:29:7c:7a:79:c2:b6:4c:fa:c7:
96:34:71:2e:7c:c2:1e:b2:68:08:40:19:56:96:ae:
af:bf:c5:5c:99:0a:50:a7:0b:12:0b:78:d9:b6:a6:
28:dd:d9:6c:f0:06:71:c4:80:37:f4:78:7f:9e:55:
ff:78:83:9b:c1:2c:3c:67:4f:76:7c:a9:fd:69:bf:
2f:3a:19:2b:89:50:8f:f8:8b:73:c8:88:d0:08:7a:
22:1e:33:e3:01:6a:83:40:f4:9a:3f:ad:15:7e:9f:
f0:53:cb:c1:69:39:05:9c:e7:d2:ae:52:69:ec:6c:
45:f2:b5:f1:36:7b:b1:08:86:18:ae:4b:71:79:e6:
4d:62:33:9d:a5:f1:cb:03:5c:01:01:64:fd:64:ce:
93:d2:20:e7:4e:b8:0f:33:04:78:33:71:a7:4a:7e:
f2:96:01:3c:02:9d:29:d3:28:fb:5e:50:9c:50:6b:
76:1a:92:ea:09:50:84:1b:ea:b2:7a:8f:35:b8:3a:
d7:6c:af:c6:fc:77:bc:2b:8d:7a:cc:9a:56:53:ff:
05:e9:62:44:18:d4:1a:78:78:ea:ef:9e:ee:18:b9:
f1:57:4d:6b:c2:5d:fd:a2:9b:0a:e7:96:fe:ad:ed:
96:6f:bd:ae:ad:c1:32:61:08:ba:ec:15:7b:08:cf:
ad:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:0F:36:EF:76:F9:65:3A:55:FB:6B:3A:B9:C3:96:72:89:2E:10:B7
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/_g8273b5ZTpV-2s6ucOWcokuELc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:5e0::/44
Signature Algorithm: sha256WithRSAEncryption
57:64:0a:9f:7c:96:6c:6e:eb:b4:4d:53:a1:ac:f3:b5:1b:45:
e9:6a:d7:43:fe:d2:87:57:d4:23:ea:1f:db:07:bf:cf:d6:9e:
33:9f:ca:48:ec:0d:43:33:d4:f7:bf:03:5c:be:e5:c8:2a:ce:
c3:0a:69:9a:99:2b:8d:61:35:cd:9e:a5:ae:5e:81:b1:c2:f7:
2e:e5:12:e7:c6:0c:95:c5:dc:66:0c:0b:cc:9d:22:c3:a7:37:
5d:56:0f:42:16:a0:c1:e3:93:b6:c0:f5:e1:fe:29:99:e6:83:
47:f1:7b:12:e6:4c:66:09:1e:2a:e5:b9:cb:9d:14:6f:c4:a0:
43:3c:60:0d:4d:25:22:75:59:ff:98:71:9c:2a:43:35:45:e8:
6b:97:90:2c:39:96:ea:80:32:ef:c5:07:6b:1f:91:6f:1e:c6:
e7:d9:2f:73:d1:25:7a:e0:a2:51:cf:5c:30:ec:fc:87:53:32:
60:ef:53:35:05:1b:b9:9c:7c:bb:c2:5d:7d:e5:d7:8b:a1:a9:
5f:b4:de:73:e4:ca:74:1a:b9:1f:c6:48:2c:c1:21:79:a3:42:
d3:c1:fc:5a:0f:50:eb:b2:31:26:00:f7:95:e1:fc:68:68:fc:
3e:b3:e1:59:34:53:2b:19:2a:81:49:90:45:2f:22:43:bb:fb:
e4:6c:7c:80
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAaCe1ACWQec7NxIME11Mak4NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjYwOTE0MDczMTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZTBmMzZlZjc2Zjk2NTNhNTVmYjZiM2FiOWMzOTY3Mjg5MmUxMGI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5gwi56MpfHp5wrZM+seWNHEufMIe
smgIQBlWlq6vv8VcmQpQpwsSC3jZtqYo3dls8AZxxIA39Hh/nlX/eIObwSw8Z092
fKn9ab8vOhkriVCP+ItzyIjQCHoiHjPjAWqDQPSaP60Vfp/wU8vBaTkFnOfSrlJp
7GxF8rXxNnuxCIYYrktxeeZNYjOdpfHLA1wBAWT9ZM6T0iDnTrgPMwR4M3GnSn7y
lgE8Ap0p0yj7XlCcUGt2GpLqCVCEG+qyeo81uDrXbK/G/He8K416zJpWU/8F6WJE
GNQaeHjq757uGLnxV01rwl39opsK55b+re2Wb72urcEyYQi67BV7CM+tWQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFP4PNu92+WU6VftrOrnDlnKJLhC3MB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvX2c4MjczYjVaVHBWLTJzNnVjT1djb2t1RUxjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6XwAXg
MA0GCSqGSIb3DQEBCwUAA4IBAQBXZAqffJZsbuu0TVOhrPO1G0XpatdD/tKHV9Qj
6h/bB7/P1p4zn8pI7A1DM9T3vwNcvuXIKs7DCmmamSuNYTXNnqWuXoGxwvcu5RLn
xgyVxdxmDAvMnSLDpzddVg9CFqDB45O2wPXh/imZ5oNH8XsS5kxmCR4q5bnLnRRv
xKBDPGANTSUidVn/mHGcKkM1Rehrl5AsOZbqgDLvxQdrH5FvHsbn2S9z0SV64KJR
z1ww7PyHUzJg71M1BRu5nHy7wl195deLoalftN5z5Mp0GrkfxkgswSF5o0LTwfxa
D1DrsjEmAPeV4fxoaPw+s+FZNFMrGSqBSZBFLyJDu/vkbHyA
-----END CERTIFICATE-----
Generated at Tue Sep 15 01:23:03 2026 by rpki-client