Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/efCjXBs2dYN_N9ejcT7X68jBmRA.roa
File: efCjXBs2dYN_N9ejcT7X68jBmRA.roa (raw, json)
Hash identifier: Ny7rVME3va7bMY4bx/vcpYckHcyiqj5YHNJCN1Q/ibc=
Subject key identifier: 79:F0:A3:5C:1B:36:75:83:7F:37:D7:A3:71:3E:D7:EB:C8:C1:99:10
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01A09A0BF9A8C8D608110ECDD6493CD20387
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/efCjXBs2dYN_N9ejcT7X68jBmRA.roa
Signing time: Sun 13 Sep 2026 09:14:31 +0000
ROA not before: Sun 13 Sep 2026 09:14:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197371
IP address blocks: 2a0e:97c0:c90::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Sep 2026 09:14:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9a:0b:f9:a8:c8:d6:08:11:0e:cd:d6:49:3c:d2:03:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Sep 13 09:14:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=79f0a35c1b3675837f37d7a3713ed7ebc8c19910
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:3c:40:76:5d:ef:f7:0e:36:d9:76:0c:6c:75:
b2:8d:c9:98:d7:6f:d3:81:a4:9d:96:d1:02:91:0e:
81:f4:fc:e7:81:b7:f1:72:23:5c:8a:57:fe:14:2e:
02:c9:80:01:6a:87:4b:75:d6:69:28:40:4d:77:9c:
68:7b:3a:4d:75:de:2b:94:11:5f:2f:89:91:25:5d:
6f:a7:e8:cf:14:05:92:fe:a3:21:86:cc:ab:f0:47:
67:bb:9e:39:ea:cf:bd:97:d3:e0:ae:38:b3:5e:43:
88:01:0a:a9:1d:9d:a8:af:c3:5f:2b:0a:86:9e:ad:
97:60:34:3e:bd:b6:ee:d5:0c:69:c5:17:97:96:c7:
96:fe:16:4a:a3:13:c8:87:4a:52:b6:74:d5:a0:17:
78:75:de:1e:66:b5:15:34:83:30:89:4e:e0:70:fb:
93:7f:6b:1a:45:c3:8c:01:a8:27:33:e5:37:42:33:
cd:56:54:8a:b6:ba:1f:c0:75:69:f8:b9:1e:57:31:
a0:5a:28:1e:86:36:71:b8:e7:c0:c1:23:10:92:0b:
4e:08:49:98:46:db:75:9a:ff:c5:06:5d:8f:c3:cc:
6e:46:68:f0:8c:ad:a2:ac:ec:f1:0f:55:92:69:11:
98:dc:0a:14:d6:b1:3f:7f:9e:45:ff:ac:20:3e:dd:
b3:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:F0:A3:5C:1B:36:75:83:7F:37:D7:A3:71:3E:D7:EB:C8:C1:99:10
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/efCjXBs2dYN_N9ejcT7X68jBmRA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:c90::/44
Signature Algorithm: sha256WithRSAEncryption
77:a0:68:71:11:2f:d6:21:23:d2:fb:e8:ef:7e:f2:9b:f1:41:
04:d5:8b:53:47:db:78:72:30:74:95:94:27:95:fb:c5:41:ed:
62:05:79:ba:c9:b0:d7:dc:dd:54:56:43:6c:d6:8b:37:d1:85:
bf:fb:17:bc:f7:e2:70:76:26:a3:30:75:02:c7:82:e7:14:e0:
fe:b6:f0:b9:f5:d7:44:b1:3a:8a:77:31:33:36:ac:f8:95:86:
83:f0:84:36:c6:c2:3c:ac:db:71:b0:4d:d6:2d:91:92:8f:e7:
de:45:0f:0f:18:15:7f:c7:d0:de:ac:d0:dc:16:b3:16:18:9a:
73:0e:a2:2b:25:8c:bc:29:a0:9b:f6:3a:90:75:7e:c7:be:cd:
7d:7d:60:55:8a:12:f0:84:ae:ab:6a:cb:8a:be:92:5c:ab:93:
f4:6b:2b:61:8c:98:aa:d8:39:1c:a0:d2:cd:c0:bc:75:5f:dd:
eb:c3:46:da:c3:29:79:05:26:9f:e8:42:00:db:27:e3:4f:2e:
19:df:ce:0a:38:8d:e8:df:1e:40:15:a1:8a:d6:17:7f:6a:ef:
95:7d:06:30:93:d8:98:b1:7e:61:b4:fc:34:9a:b8:51:2b:5a:
df:86:77:49:ce:ff:0c:ca:5c:e7:c7:cf:24:21:e7:3d:c6:4e:
47:53:20:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 20:29:44 2026 by rpki-client