Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/d7kPa9pAxo_SOTLD3--tfaN-1zY.roa
File: d7kPa9pAxo_SOTLD3--tfaN-1zY.roa (raw, json)
Hash identifier: G89vzu2g7oQ68amBSFmOoBX7ghuBdFocD2MxRZlGJNE=
Subject key identifier: 77:B9:0F:6B:DA:40:C6:8F:D2:39:32:C3:DF:EF:AD:7D:A3:7E:D7:36
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01A03B936092EC07EAAE0748A1486CC1AC89
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/d7kPa9pAxo_SOTLD3--tfaN-1zY.roa
Signing time: Wed 26 Aug 2026 00:58:29 +0000
ROA not before: Wed 26 Aug 2026 00:58:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 53667
IP address blocks: 2a06:de03:9c00::/38 maxlen: 48
2a06:de05:6000::/38 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 14:17:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3b:93:60:92:ec:07:ea:ae:07:48:a1:48:6c:c1:ac:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Aug 26 00:58:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=77b90f6bda40c68fd23932c3dfefad7da37ed736
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:db:de:4d:fa:61:a5:6b:c8:72:6e:9b:69:ee:
75:90:04:41:00:fb:36:50:28:9b:eb:34:00:94:1d:
20:77:90:42:45:97:ea:a6:67:0d:94:9e:ab:df:c4:
fa:57:c2:69:1e:2b:61:c3:b8:a1:fc:8e:3d:b2:96:
09:60:44:13:4b:c7:22:11:55:5c:18:21:c4:74:6c:
db:a6:14:a5:2d:5d:0a:1b:3b:71:70:f9:e1:f9:bd:
39:ed:fe:49:8b:92:22:94:d4:64:bf:be:a6:9f:58:
8b:84:2f:05:40:db:f0:e1:e0:11:3c:d1:b8:0e:77:
ec:c3:5b:40:3f:cd:a2:fb:89:09:c1:81:b8:fc:ef:
2f:81:89:c2:a3:75:4b:35:3c:4d:a7:d0:a9:38:df:
ce:47:df:9e:b5:32:18:d4:9e:8f:62:bb:42:7d:ae:
2b:f4:08:d9:96:cf:87:2e:a2:7f:46:24:d4:da:0b:
06:e2:4b:11:80:a7:e1:b5:1f:7b:fe:4b:f4:71:2c:
57:12:d4:38:a6:21:dc:f2:fa:96:1c:9c:61:21:76:
2b:77:f8:7c:95:51:31:da:fb:92:d2:92:45:bc:2f:
51:66:c1:22:57:30:a7:91:12:f1:4c:49:8b:c6:98:
e9:d9:aa:d2:98:ef:c5:48:02:1e:65:d1:0e:6f:55:
2e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:B9:0F:6B:DA:40:C6:8F:D2:39:32:C3:DF:EF:AD:7D:A3:7E:D7:36
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/d7kPa9pAxo_SOTLD3--tfaN-1zY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:de03:9c00::/38
2a06:de05:6000::/38
Signature Algorithm: sha256WithRSAEncryption
10:c7:2a:e1:08:18:df:b0:40:47:2c:19:27:dd:e5:1c:aa:1e:
d5:f0:4a:78:fd:90:ee:a4:db:c2:89:fb:bb:17:35:09:11:06:
ce:2b:2f:2e:dc:bd:af:77:1f:a8:13:ad:3a:85:84:25:54:ce:
c6:27:a2:cf:28:80:5f:1f:2a:bc:f9:ef:bc:fc:2c:01:86:48:
78:c1:7d:3e:52:2d:1c:21:b7:c6:ef:61:ef:84:6a:33:9d:20:
9c:cb:10:20:22:dc:d4:0e:f8:78:58:b8:32:a9:e7:1f:40:e2:
3f:72:42:24:a3:0c:24:57:66:da:a6:57:bf:22:73:0e:9f:12:
d5:6a:f3:4f:61:81:28:34:bb:05:de:87:9b:b6:20:54:7d:15:
2b:6a:8b:a8:f6:36:e4:af:cb:3a:3a:2f:66:b7:9a:01:dd:6f:
f9:e3:26:81:b3:cb:60:6f:45:85:97:e1:ab:d4:05:f3:4f:e7:
b1:95:8e:86:ac:06:5d:70:53:d9:dd:f9:8d:29:c9:5c:4c:cd:
4c:3a:3d:00:a5:35:86:79:c3:46:98:16:c2:c8:c8:1f:f6:c2:
d3:ac:14:18:8f:b7:b3:a9:6c:2b:d5:68:b7:14:53:96:63:1f:
e6:17:29:59:0c:2f:60:26:cc:ae:c3:f2:3a:fd:61:2a:0b:37:
ec:55:c9:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 20:27:54 2026 by rpki-client