Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/bj7-iCtNDkVIM0KVt-b-jjDVxW4.roa
File: bj7-iCtNDkVIM0KVt-b-jjDVxW4.roa (raw, json)
Hash identifier: U/ae62k04iOQZWDvSOySEkjq7LrANZzGtwsS+0K7HIw=
Subject key identifier: 6E:3E:FE:88:2B:4D:0E:45:48:33:42:95:B7:E6:FE:8E:30:D5:C5:6E
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01A09EDB3EFB293CEDC0C416D660C42815D6
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/bj7-iCtNDkVIM0KVt-b-jjDVxW4.roa
Signing time: Mon 14 Sep 2026 07:39:23 +0000
ROA not before: Mon 14 Sep 2026 07:39:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212270
IP address blocks: 2a0e:b107:f50::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Sep 2026 20:52:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9e:db:3e:fb:29:3c:ed:c0:c4:16:d6:60:c4:28:15:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Sep 14 07:39:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6e3efe882b4d0e4548334295b7e6fe8e30d5c56e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a6:d4:fb:ee:21:34:c6:a0:e4:5a:91:37:41:
52:b8:21:6a:d6:24:c2:59:75:1d:a1:8b:16:95:92:
03:06:3d:8f:68:3f:ca:2d:e1:6e:7a:b6:60:04:b7:
86:b0:33:d7:70:30:d3:81:6a:7f:08:8c:b6:eb:97:
78:87:e9:37:30:8c:b3:22:04:e9:94:41:20:12:7c:
dd:64:39:dc:99:77:ef:cf:b3:06:74:a4:44:a8:45:
ac:8b:9b:c3:fb:85:cd:94:b9:d4:7f:db:30:5b:27:
e9:a2:1d:c0:47:95:19:8e:84:ae:9b:87:b0:8d:1f:
0a:4b:2e:b8:0a:fa:ce:fa:1a:a6:ca:a3:5a:c0:df:
51:7c:c0:be:5d:64:01:47:0d:2b:94:52:66:7a:f1:
e7:d6:65:8a:4c:58:71:bd:6a:00:7f:50:78:31:0d:
89:f5:4b:23:e6:0d:f1:37:f6:ea:55:de:31:b7:a6:
67:a9:2c:5b:36:cc:88:9e:28:01:cf:1b:e1:ab:6a:
cc:83:4d:2e:88:5c:c9:dc:a6:17:b6:40:68:05:b7:
1c:01:91:80:73:91:4e:e3:49:26:18:0f:20:b8:e7:
c8:f7:c6:86:89:5e:03:90:fb:17:e3:a7:07:c3:d9:
15:6d:32:24:c0:b2:4b:7e:cb:21:ea:d8:5f:44:fb:
19:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:3E:FE:88:2B:4D:0E:45:48:33:42:95:B7:E6:FE:8E:30:D5:C5:6E
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/bj7-iCtNDkVIM0KVt-b-jjDVxW4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:f50::/44
Signature Algorithm: sha256WithRSAEncryption
b0:55:8b:24:a3:e1:e6:f4:42:fb:77:6b:d9:9f:c9:fe:7f:6e:
97:a1:70:0e:b8:05:44:9b:ce:82:05:1c:be:f6:f0:34:4e:13:
28:f9:5e:bb:22:ac:7a:0d:fc:c6:ca:b3:ab:1e:51:eb:b6:00:
7e:06:07:c7:49:0f:91:4f:82:d6:48:5a:21:b0:72:c0:c9:76:
13:65:d1:e4:bb:57:18:91:cd:38:a4:86:49:a8:7a:48:aa:07:
b4:3d:05:15:e4:8a:73:5f:05:92:d2:56:6f:a9:94:c0:f2:66:
c4:e2:a4:87:85:52:33:f2:c3:bd:1d:09:42:63:04:c6:40:53:
68:0e:61:38:5e:8c:b3:89:c7:f4:d6:9c:9c:21:de:62:2d:ba:
5f:b6:3d:0a:a0:e6:1c:08:03:91:7d:b5:33:e1:92:ad:c3:ce:
c9:b7:aa:a6:be:00:1f:ab:f7:b1:68:27:f0:3a:eb:4a:c1:a8:
88:e2:6d:aa:30:63:22:af:aa:c2:55:36:7b:b4:dd:86:a1:11:
2a:75:cf:20:98:73:c4:6b:4b:d0:c7:fa:7c:57:95:0a:87:81:
ff:74:90:73:92:0d:a1:d3:14:30:89:52:50:6c:7c:5a:f1:f2:
32:62:67:1e:7d:3d:b5:f4:7a:f5:3e:e2:77:b5:96:fb:22:df:
c0:33:36:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 01:24:47 2026 by rpki-client