Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/_xlfAv0A-OPi3EI2pw-fKQIkZMY.roa
File: _xlfAv0A-OPi3EI2pw-fKQIkZMY.roa (raw, json)
Hash identifier: 4ouYdK79h6jcttQeETFmQ+5wYTkXkSdOJBe8tbuSixc=
Subject key identifier: FF:19:5F:02:FD:00:F8:E3:E2:DC:42:36:A7:0F:9F:29:02:24:64:C6
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01A05A0508EF9592EF96676BC6F9830D9F1D
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/_xlfAv0A-OPi3EI2pw-fKQIkZMY.roa
Signing time: Mon 31 Aug 2026 22:51:14 +0000
ROA not before: Mon 31 Aug 2026 22:51:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211840
IP address blocks: 2a0e:b107:861::/48 maxlen: 48
2a0e:b107:862::/48 maxlen: 48
2a0e:b107:86c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 21:38:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5a:05:08:ef:95:92:ef:96:67:6b:c6:f9:83:0d:9f:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Aug 31 22:51:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ff195f02fd00f8e3e2dc4236a70f9f29022464c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a7:44:cf:f8:9c:ed:a6:1e:e3:9b:73:87:89:
68:60:0c:f8:33:e6:0d:e8:2e:74:8d:80:b5:9f:f2:
84:5e:96:61:7d:a3:bf:80:f8:1a:92:c0:e6:36:76:
42:ea:82:ef:c1:f6:c1:b6:90:3b:84:aa:8a:e5:df:
fd:52:d4:79:30:cd:69:b3:e3:7d:9e:fe:16:e1:9e:
be:be:8f:6c:e0:58:ec:ce:56:09:82:12:7b:d4:03:
3b:b2:ff:8e:c0:65:41:10:92:15:63:84:3a:f0:c0:
aa:2a:c2:9f:c6:bf:45:e6:5b:d3:99:5d:b9:d4:c4:
b6:b7:ba:ad:dc:a9:5d:58:ee:f1:fb:f1:db:16:40:
31:46:e7:2b:3d:6f:80:6f:24:b8:7e:38:b1:7b:f8:
7d:9b:3d:04:dc:86:72:66:64:0f:55:91:13:3f:1d:
ba:13:81:26:e7:a2:32:1f:45:27:12:69:48:8c:2f:
59:1c:9f:b9:cf:d2:58:a8:56:ea:a0:e6:0a:1f:03:
05:be:ee:ea:5f:7c:ba:a3:91:ab:d2:53:4d:62:47:
f8:1b:6f:c0:52:0e:c4:fa:26:b0:b2:7d:b2:14:e5:
96:d2:7f:07:bd:0a:07:17:6e:09:7c:28:11:ef:c2:
02:67:6a:7e:52:b0:1f:d6:c5:b9:19:d0:22:df:28:
ea:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:19:5F:02:FD:00:F8:E3:E2:DC:42:36:A7:0F:9F:29:02:24:64:C6
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/_xlfAv0A-OPi3EI2pw-fKQIkZMY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:861::-2a0e:b107:862:ffff:ffff:ffff:ffff:ffff
2a0e:b107:86c::/48
Signature Algorithm: sha256WithRSAEncryption
c5:9f:99:83:c3:da:18:4d:51:5f:8b:a3:8e:d7:e8:f0:84:49:
72:bb:c9:33:11:94:9b:08:96:f2:b7:18:d8:cc:bd:8c:f4:88:
d1:b9:95:07:99:1e:5e:71:e1:28:72:d1:80:ae:9d:d7:35:a7:
a0:b6:8d:9e:dd:4e:80:a7:51:61:2f:c2:ec:d8:f6:b6:7b:26:
d4:93:bd:f2:25:31:e9:c9:b8:d0:42:35:34:4a:43:1b:01:60:
c7:1a:a8:06:b4:85:ec:ad:5d:f2:17:ff:69:0f:c8:8d:38:6d:
13:d4:18:fe:28:e1:48:95:c4:c2:ed:e4:6c:40:96:8f:fa:23:
24:16:f9:42:28:de:af:5d:7e:3d:09:96:43:15:82:30:58:6d:
55:b4:a8:c6:23:7a:be:a7:43:a3:a4:f1:35:92:e7:f9:1c:06:
de:13:79:b1:7b:e4:fe:2f:58:5f:d3:82:65:ab:8d:a2:92:8c:
19:65:40:ce:1a:45:85:03:5c:99:10:17:c7:a2:2e:22:ed:0c:
9b:56:67:fb:b8:99:9d:cb:2b:08:81:f6:62:6e:79:18:62:64:
bb:49:0c:42:31:19:10:5d:f0:92:4c:78:a4:4e:af:64:2e:7d:
a7:a3:6a:87:d5:87:9c:3c:1c:89:ab:b8:23:ac:eb:b8:31:fd:
6a:64:72:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 03:46:51 2026 by rpki-client