Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/h080j55BvEDsjO-f8vdawRLbXgU.roa
File: h080j55BvEDsjO-f8vdawRLbXgU.roa (raw, json)
Hash identifier: v3fR5uc5pyfaEF1Bojrbdl7oyLcrvcsCfBlrkaKuVj0=
Subject key identifier: 87:4F:34:8F:9E:41:BC:40:EC:8C:EF:9F:F2:F7:5A:C1:12:DB:5E:05
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019EC854FD699EA27F80B8D4C1E91088538A
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/h080j55BvEDsjO-f8vdawRLbXgU.roa
Signing time: Sun 14 Jun 2026 22:51:13 +0000
ROA not before: Sun 14 Jun 2026 22:51:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 151194
IP address blocks: 2a06:de00:de00::/44 maxlen: 48
2a06:de00:de0f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Jun 2026 07:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c8:54:fd:69:9e:a2:7f:80:b8:d4:c1:e9:10:88:53:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jun 14 22:51:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=874f348f9e41bc40ec8cef9ff2f75ac112db5e05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:8f:0b:bc:70:ba:1f:fd:81:e3:20:10:6a:eb:
f0:53:26:e6:df:4d:9c:d2:19:89:c2:5a:94:0d:f9:
a5:0a:65:cd:ca:be:83:f3:e2:f6:4e:7f:3c:9f:a2:
17:37:fa:00:d8:af:8e:1e:21:a3:7b:52:29:df:b2:
30:70:97:37:f6:08:75:90:7f:50:7f:97:ba:b9:51:
fc:8b:be:f2:a9:06:4f:1b:b7:b1:4b:7d:47:fd:25:
6a:50:01:31:a5:c4:80:a0:3b:50:5c:cd:48:ac:8a:
3c:1d:72:33:93:8e:14:6a:0a:84:9a:08:a4:c4:9b:
44:83:31:ad:c9:c4:3d:29:55:33:8a:00:97:c7:34:
5e:f3:cb:0a:e6:70:06:46:aa:3d:06:04:2e:20:ac:
df:0d:c3:c3:26:42:b8:ca:28:ae:6b:16:ae:90:6a:
f5:5c:02:9e:a6:9a:77:72:79:ab:90:31:07:54:a1:
a7:84:5b:f3:b2:ba:f4:9d:8a:30:db:a8:25:de:68:
d8:0d:48:ce:03:ee:d4:ea:2f:2c:75:b6:df:7b:72:
86:87:de:11:3f:3a:77:80:70:da:8c:60:f8:93:48:
5e:ba:e1:02:b8:f6:aa:82:27:44:f6:91:4f:46:ae:
b7:ae:45:b7:4b:97:9f:b0:4f:be:1a:e6:92:60:c6:
73:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:4F:34:8F:9E:41:BC:40:EC:8C:EF:9F:F2:F7:5A:C1:12:DB:5E:05
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/h080j55BvEDsjO-f8vdawRLbXgU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:de00:de00::/44
Signature Algorithm: sha256WithRSAEncryption
3c:8b:cd:45:0b:ca:e1:77:3b:e8:d6:52:22:44:a1:88:85:78:
ee:5b:5b:55:51:41:49:16:86:dc:3c:63:27:04:97:41:a6:d6:
b1:71:24:25:9b:e7:2f:43:e2:b5:8d:4d:ee:79:92:0c:a6:7c:
e6:13:6d:17:77:07:bb:09:17:6f:a8:78:b9:ae:b7:65:c6:5e:
94:7e:14:06:ee:c6:77:34:b9:01:2f:cb:ca:fb:a2:16:f7:48:
54:54:29:1e:c6:b6:b8:d0:65:e2:da:87:27:7c:af:95:6a:bf:
ed:f7:fc:26:6a:a6:e4:d7:7d:aa:45:ae:9a:0e:ba:c8:61:3c:
c8:f0:0e:b9:1d:d3:72:46:ed:f2:59:ee:47:97:d4:f1:73:85:
f3:f4:78:07:d9:8e:8d:42:37:6d:04:f0:12:74:77:3f:48:60:
61:56:81:77:9d:7c:1e:06:d1:2c:d0:89:6d:dc:1b:04:fe:23:
d0:00:b1:af:85:44:50:c1:ab:2f:a7:33:59:75:f7:6c:f1:ac:
6d:de:50:41:db:fc:b0:db:8a:a8:41:02:3a:6b:1a:5d:19:a7:
62:17:34:29:4a:e9:ff:9e:9c:6e:b3:99:fc:ff:88:e0:5f:04:
13:ac:c5:b5:f2:f4:ea:39:90:5d:04:f6:17:0c:e3:91:b3:55:
7f:58:48:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 15 12:56:39 2026 by rpki-client