Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/hl7LdFdh60JqarCiV-sQufukxC4.roa
File: hl7LdFdh60JqarCiV-sQufukxC4.roa (raw, json)
Hash identifier: UErt62MvXcZv/JDtlNdw6ymDZGHeK005trQQ5v/EPbA=
Subject key identifier: 86:5E:CB:74:57:61:EB:42:6A:6A:B0:A2:57:EB:10:B9:FB:A4:C4:2E
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019D018F23F064DB76CD55C7694C41F13782
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/hl7LdFdh60JqarCiV-sQufukxC4.roa
Signing time: Wed 18 Mar 2026 15:27:31 +0000
ROA not before: Wed 18 Mar 2026 15:27:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213426
IP address blocks: 2a06:de00:1f00::/44 maxlen: 48
2a06:de01:1f00::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Mar 2026 23:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:01:8f:23:f0:64:db:76:cd:55:c7:69:4c:41:f1:37:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Mar 18 15:27:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=865ecb745761eb426a6ab0a257eb10b9fba4c42e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:61:fa:dd:9f:ff:fd:02:84:88:2b:1d:99:ab:
38:dd:2e:e4:23:6f:b2:45:a1:e9:e9:ae:03:a7:43:
65:0d:23:5e:d0:6e:b7:5e:3a:19:04:e9:e2:bc:8a:
a0:d5:dd:60:e3:42:36:0c:8b:25:b3:4e:8e:6d:bc:
25:8a:37:88:de:dd:e9:b5:4c:a6:76:96:7a:2a:57:
6c:9f:85:65:62:9e:df:67:a0:6b:39:5b:ff:68:ff:
6f:81:8c:74:94:68:d1:07:19:c7:bf:90:c7:e9:ae:
d0:ae:63:6e:0b:aa:6e:d6:7d:77:70:07:a1:ba:5f:
96:fd:0f:04:c1:e3:bc:5b:29:d7:4d:a5:47:ec:b4:
66:5b:d4:57:70:0d:b9:a6:37:8b:9a:fe:22:e9:25:
d4:6e:2b:cc:39:45:d2:97:08:0f:e1:ce:79:d6:2d:
f9:bb:68:0e:b5:87:44:ef:e0:da:9f:dd:0e:7f:ba:
21:d4:60:18:b7:5e:56:20:17:98:ab:e2:1c:0f:1e:
c0:c8:aa:f9:02:0b:b5:c4:e8:77:6c:90:bb:4d:c4:
4f:c0:d0:08:23:02:8a:4b:3f:14:68:31:25:ea:53:
74:01:cc:14:31:63:79:3c:5b:32:d1:27:0b:c6:fe:
4f:48:be:ff:f1:3c:5b:b3:97:c8:bd:20:ad:22:74:
23:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:5E:CB:74:57:61:EB:42:6A:6A:B0:A2:57:EB:10:B9:FB:A4:C4:2E
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/hl7LdFdh60JqarCiV-sQufukxC4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:de00:1f00::/44
2a06:de01:1f00::/44
Signature Algorithm: sha256WithRSAEncryption
62:69:8b:41:3f:ca:77:28:c6:1e:92:9b:8e:29:90:a0:20:7d:
09:40:f0:4b:d3:d8:ef:e5:16:f1:c9:1a:49:cf:da:46:e5:8c:
cc:b6:1d:45:c6:29:23:4e:3b:6e:dd:49:86:ff:aa:0c:80:f3:
bd:58:87:09:41:ac:45:72:80:ff:d1:bf:4b:6d:43:42:f7:78:
bd:64:69:ed:5a:db:de:2f:cc:71:36:96:dc:9c:86:42:21:ce:
61:f2:77:c6:76:52:d4:f2:8a:31:7e:ec:a0:08:d8:da:5b:13:
af:da:20:03:84:90:db:d1:ec:a8:e7:64:fe:c6:91:44:80:fa:
b6:2b:d6:09:1c:df:6a:8d:ef:7e:7e:f2:a2:86:cf:a2:3a:12:
df:b8:f5:88:cf:24:b7:67:2f:8f:85:4e:4c:81:49:19:0c:88:
88:78:56:9f:83:24:77:5a:21:af:32:79:24:f0:b1:1f:93:39:
59:6f:4e:31:15:b6:27:4c:8d:11:3e:cb:50:a0:59:a7:00:90:
b2:50:3d:0b:43:12:d4:70:02:08:0d:5d:78:09:70:1c:ae:8e:
3e:54:0a:8c:d8:b8:08:f4:5c:57:d0:3d:b7:4d:13:75:3d:4f:
98:91:48:c7:0a:93:5d:c5:b8:ba:b4:d2:f3:c3:95:11:df:c5:
72:29:39:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 02:33:42 2026 by rpki-client