Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/hNAMhzweV8TgwjPu7VknDqmX47s.roa
File: hNAMhzweV8TgwjPu7VknDqmX47s.roa (raw, json)
Hash identifier: uRyzp9uDAuSjjvi9QS6x6jo3bl0qmHrBqIul5FWklQE=
Subject key identifier: 84:D0:0C:87:3C:1E:57:C4:E0:C2:33:EE:ED:59:27:0E:A9:97:E3:BB
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01A09ECE836EAC08E4ACDAFF16DE808D40DC
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/hNAMhzweV8TgwjPu7VknDqmX47s.roa
Signing time: Mon 14 Sep 2026 07:25:29 +0000
ROA not before: Mon 14 Sep 2026 07:25:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42394
IP address blocks: 2a0e:97c7:160::/44 maxlen: 48
2a0e:b107:ff0::/48 maxlen: 48
2a0e:b107:fff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Sep 2026 20:52:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9e:ce:83:6e:ac:08:e4:ac:da:ff:16:de:80:8d:40:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Sep 14 07:25:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=84d00c873c1e57c4e0c233eeed59270ea997e3bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:31:34:92:b6:15:98:d4:7c:97:49:6d:b6:4c:
67:de:06:08:71:de:2c:b1:46:9d:f7:0d:80:77:c7:
c9:e6:e5:70:54:22:6e:65:8a:ab:b1:55:0a:f2:04:
7c:a3:f3:14:80:55:5e:7a:1a:24:a3:e0:56:27:c0:
96:d1:2c:08:21:7a:97:d5:99:c8:bf:d2:4b:34:88:
e9:48:b1:02:65:3e:b2:bb:b4:fd:0b:04:5a:47:5a:
62:b2:ea:46:56:dc:fd:26:e6:31:94:40:24:b0:2c:
45:9a:5b:39:60:d3:d5:66:53:9b:94:c5:0f:ce:02:
07:e7:4f:46:38:5c:7a:ee:87:b3:15:35:6c:5c:fb:
db:cb:9f:c8:c2:ba:bb:6d:8d:97:60:8b:3e:86:84:
72:2a:1e:e1:a6:74:3c:84:aa:b0:81:e6:3d:dd:61:
99:8b:39:1f:4d:c4:88:1d:30:a5:67:09:1e:bf:ba:
99:0c:a5:b7:da:3e:2b:af:fa:f1:10:cd:fb:5f:85:
2a:21:15:a2:00:80:f0:a1:f0:1a:8b:79:c2:a8:2e:
eb:73:86:46:77:8c:27:99:c3:2f:59:47:a7:69:86:
8c:ba:05:bf:5c:56:c7:e1:6d:d0:85:5a:ea:1a:63:
d4:21:0e:34:ea:8a:63:ab:00:19:84:1a:b4:93:23:
7e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:D0:0C:87:3C:1E:57:C4:E0:C2:33:EE:ED:59:27:0E:A9:97:E3:BB
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/hNAMhzweV8TgwjPu7VknDqmX47s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c7:160::/44
2a0e:b107:ff0::/48
2a0e:b107:fff::/48
Signature Algorithm: sha256WithRSAEncryption
a9:40:c3:5a:af:8c:0d:ee:17:01:8b:86:c3:b2:97:ac:03:b8:
e8:5e:03:4d:51:5a:79:c2:ed:9b:6c:f5:03:40:12:9e:38:e7:
4b:57:e2:96:fa:4c:e6:fa:c0:e7:2b:13:48:09:51:e4:44:8d:
55:ee:4f:44:80:70:93:25:5d:96:be:fb:47:e2:b2:da:1a:d5:
ab:c9:d9:57:c3:5e:ba:70:37:7b:ef:6b:47:13:b3:6e:6e:49:
e6:d4:3c:36:b5:00:c9:db:76:c2:b0:17:68:9d:8e:60:a4:2a:
3d:72:26:60:21:79:bb:ad:17:02:f1:23:db:8f:39:42:51:11:
5f:a0:92:4a:1a:84:22:2f:d8:47:e4:04:12:81:4a:2f:22:9c:
ff:95:27:34:4d:dc:06:c7:ae:4a:40:83:e9:51:83:1a:5b:89:
f9:39:9f:27:d6:a2:98:e0:b3:6c:87:d5:81:4a:57:2a:eb:6c:
3f:4c:04:b9:2c:1d:9a:e6:e7:f8:45:1c:99:8e:78:1d:24:1b:
09:70:99:56:bc:8d:cb:70:51:02:eb:f0:25:82:87:71:56:34:
cf:05:9c:03:5f:e0:13:74:bf:5e:6a:ed:45:69:5e:d6:bc:5c:
2c:84:c1:37:2a:c3:7c:48:9e:4b:6d:82:e8:4e:05:34:44:3d:
5e:91:cd:bf
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAaCezoNurAjkrNr/Ft6AjUDcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjYwOTE0MDcyNTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NGQwMGM4NzNjMWU1N2M0ZTBjMjMzZWVlZDU5MjcwZWE5OTdlM2JiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxzE0krYVmNR8l0lttkxn3gYIcd4s
sUad9w2Ad8fJ5uVwVCJuZYqrsVUK8gR8o/MUgFVeehoko+BWJ8CW0SwIIXqX1ZnI
v9JLNIjpSLECZT6yu7T9CwRaR1pisupGVtz9JuYxlEAksCxFmls5YNPVZlOblMUP
zgIH509GOFx67oezFTVsXPvby5/Iwrq7bY2XYIs+hoRyKh7hpnQ8hKqwgeY93WGZ
izkfTcSIHTClZwkev7qZDKW32j4rr/rxEM37X4UqIRWiAIDwofAai3nCqC7rc4ZG
d4wnmcMvWUenaYaMugW/XFbH4W3QhVrqGmPUIQ406opjqwAZhBq0kyN+wwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFITQDIc8HlfE4MIz7u1ZJw6pl+O7MB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvaE5BTWh6d2VWOFRnd2pQdTdWa25EcW1YNDdzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzAhBAIAAjAbAwcEKg6XxwFg
AwcAKg6xBw/wAwcAKg6xBw//MA0GCSqGSIb3DQEBCwUAA4IBAQCpQMNar4wN7hcB
i4bDspesA7joXgNNUVp5wu2bbPUDQBKeOOdLV+KW+kzm+sDnKxNICVHkRI1V7k9E
gHCTJV2WvvtH4rLaGtWrydlXw166cDd772tHE7Nubknm1Dw2tQDJ23bCsBdonY5g
pCo9ciZgIXm7rRcC8SPbjzlCURFfoJJKGoQiL9hH5AQSgUovIpz/lSc0TdwGx65K
QIPpUYMaW4n5OZ8n1qKY4LNsh9WBSlcq62w/TAS5LB2a5uf4RRyZjngdJBsJcJlW
vI3LcFEC6/AlgodxVjTPBZwDX+ATdL9eau1FaV7WvFwshME3KsN8SJ5LbYLoTgU0
RD1ekc2/
-----END CERTIFICATE-----
Generated at Tue Sep 15 01:24:05 2026 by rpki-client