Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/bTyW4wtE85VNzWf8aKNG05TUuuM.roa
File: bTyW4wtE85VNzWf8aKNG05TUuuM.roa (raw, json)
Hash identifier: td8ogv6qu1ubJsPxv29P80UKnyVw0wb2+/i+ZB+i0iM=
Subject key identifier: 6D:3C:96:E3:0B:44:F3:95:4D:CD:67:FC:68:A3:46:D3:94:D4:BA:E3
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01A09F3E30D8EFDA4D6690247E2DA6FDCAC8
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/bTyW4wtE85VNzWf8aKNG05TUuuM.roa
Signing time: Mon 14 Sep 2026 09:27:28 +0000
ROA not before: Mon 14 Sep 2026 09:27:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202458
IP address blocks: 2a0e:97c0:dc0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Sep 2026 14:37:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9f:3e:30:d8:ef:da:4d:66:90:24:7e:2d:a6:fd:ca:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Sep 14 09:27:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6d3c96e30b44f3954dcd67fc68a346d394d4bae3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c7:7e:1d:34:3a:10:80:92:c1:d9:08:60:81:
86:d2:97:66:8c:e4:c1:dc:93:48:62:03:4f:76:12:
ff:64:71:85:7f:71:c1:c4:fc:86:54:6c:5d:d4:3a:
2d:a1:31:85:63:16:0b:90:08:66:13:94:97:a3:eb:
b0:34:13:34:34:cb:3a:27:7d:d7:c6:69:6b:7e:ef:
7d:dc:1c:03:ac:e4:e5:a1:32:65:20:e3:8d:7f:8e:
7c:42:d4:7b:5e:e2:a4:1c:b7:e5:a6:2e:30:1f:49:
df:11:2c:5a:89:f6:64:be:8f:f0:a1:f7:aa:df:e9:
9f:f1:75:cc:0d:f7:23:9c:a6:53:bd:15:ef:8f:4a:
75:ba:46:0f:e2:b0:a7:81:10:4f:59:7e:8f:f2:55:
1b:91:bc:a6:42:57:ac:a1:c6:e0:9d:36:48:24:be:
76:90:45:ad:69:fd:1d:e9:80:17:8f:6c:58:3c:a7:
8e:a8:27:e2:dd:60:e0:7c:74:b4:71:c2:7f:e8:05:
04:32:a4:c2:99:1b:c8:17:f9:38:5e:b5:68:a7:d8:
76:e6:20:45:d3:d5:65:7b:b0:e7:07:96:6d:db:37:
72:1c:ff:8a:51:2b:4d:bc:47:88:41:2d:a1:52:6b:
57:5f:f4:55:f4:25:83:7b:5b:7d:6d:7f:7e:c1:11:
33:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:3C:96:E3:0B:44:F3:95:4D:CD:67:FC:68:A3:46:D3:94:D4:BA:E3
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/bTyW4wtE85VNzWf8aKNG05TUuuM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:dc0::/44
Signature Algorithm: sha256WithRSAEncryption
25:52:c0:05:fa:ee:fe:cc:b9:92:59:d0:5d:7c:bb:ae:7d:b5:
12:c8:f5:74:b7:bc:bf:00:5c:89:a5:44:be:ec:5f:df:36:f5:
93:06:74:01:b4:47:5f:87:dd:1c:f7:57:a9:2c:b6:81:48:c5:
55:da:75:4a:89:fe:7a:21:14:45:10:7a:4b:54:1b:db:60:63:
0f:4c:b8:e3:a1:5e:f1:d2:9a:bd:f1:75:94:84:47:8a:f6:d6:
5b:9b:c2:89:56:41:64:5b:f1:e1:2c:4a:2d:6d:2d:2d:ee:41:
69:f1:6e:c6:03:62:58:c2:ed:ea:47:9c:fb:bc:30:1a:37:39:
1c:50:2c:54:34:c9:c4:d4:4d:5b:ea:03:28:15:f5:b2:9b:71:
8d:96:d0:6b:f1:b3:c8:c4:63:70:4d:34:5a:7c:24:0c:aa:88:
0b:a6:e1:fc:2c:93:f8:b7:7c:61:ba:be:8d:da:b8:a5:b4:52:
a5:4f:d5:6c:f3:7d:82:f5:2e:ef:be:3a:e5:ac:cf:69:ef:1c:
bd:85:7f:33:73:d3:ae:0b:ce:aa:9d:7c:48:9f:66:29:ab:60:
e2:9f:75:6d:02:b9:d8:27:7b:9e:46:23:71:2c:f2:24:b0:79:
50:e5:b4:5b:5a:20:ed:32:a6:bb:b7:8e:4f:4d:17:1a:dd:34:
16:9f:04:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 01:23:03 2026 by rpki-client