Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/kN4AyteeJR0vo0I4Xr9R_AGAhZU.roa
File: kN4AyteeJR0vo0I4Xr9R_AGAhZU.roa (raw, json)
Hash identifier: LRiUxef+hu4sDGhf03MsG/FDUnQQStqdjmyOkkkvPSI=
Subject key identifier: 90:DE:00:CA:D7:9E:25:1D:2F:A3:42:38:5E:BF:51:FC:01:80:85:95
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019CFDC103CCD14CD61DAF87F5F38A7AF82E
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/kN4AyteeJR0vo0I4Xr9R_AGAhZU.roa
Signing time: Tue 17 Mar 2026 21:43:30 +0000
ROA not before: Tue 17 Mar 2026 21:43:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215011
IP address blocks: 2a06:de00:50::/44 maxlen: 48
2a0e:97c0:8a0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Mar 2026 22:10:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:fd:c1:03:cc:d1:4c:d6:1d:af:87:f5:f3:8a:7a:f8:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Mar 17 21:43:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=90de00cad79e251d2fa342385ebf51fc01808595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:aa:f1:9b:19:66:e6:6c:57:58:52:c5:de:dd:
2f:07:ac:1e:6e:31:65:d8:2c:51:f3:51:b4:35:16:
3c:1a:5e:b5:fe:1c:b9:42:b1:0a:65:24:20:cb:f1:
4f:cd:8f:a4:ba:17:2a:0b:a3:b9:e9:08:91:c1:22:
de:5d:62:ca:0f:b2:92:91:c6:ab:74:5d:e9:c4:1a:
68:51:6f:07:de:68:7c:25:5d:c1:8c:21:33:a7:ba:
c3:a5:a2:34:71:8b:30:35:42:38:fa:0d:17:9d:8b:
c9:55:8c:1b:d2:3c:71:6a:f5:e7:b1:40:e2:a1:b7:
48:e0:03:27:3b:ae:ad:44:98:cf:a1:42:60:2b:a2:
7e:6d:c5:f2:ba:11:ec:ea:74:75:dc:9c:db:15:fd:
f8:87:0c:30:31:8b:dc:6c:01:78:17:e5:fa:d4:96:
1c:e7:22:04:4e:0f:d9:20:fe:d8:5e:55:71:be:b8:
ef:91:58:73:9d:59:75:3e:70:5a:2e:bd:c6:d6:f6:
be:ec:cb:1e:05:b3:93:54:47:86:d8:fd:30:33:79:
42:e1:97:cd:22:b2:96:1f:c4:01:00:60:a7:43:8c:
7e:cf:08:18:eb:c7:71:38:d4:5d:ba:a4:78:e2:8a:
eb:8e:99:38:47:10:e6:67:ac:34:41:0e:bf:19:96:
67:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:DE:00:CA:D7:9E:25:1D:2F:A3:42:38:5E:BF:51:FC:01:80:85:95
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/kN4AyteeJR0vo0I4Xr9R_AGAhZU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:de00:50::/44
2a0e:97c0:8a0::/44
Signature Algorithm: sha256WithRSAEncryption
0e:ea:13:6f:e3:ca:4d:21:84:ff:19:37:92:71:c4:e7:1f:f0:
ec:1d:0b:57:58:ea:24:63:b9:fd:81:ad:35:b9:dd:e1:d8:d8:
0c:24:e2:ef:52:15:33:1d:04:b4:a2:2c:99:69:b5:b9:89:00:
3e:64:00:b7:ec:29:23:d2:fa:62:30:40:7f:5f:c1:c7:b4:da:
ef:dc:52:ae:0a:2d:b9:ff:66:91:b1:07:07:df:36:53:7d:d2:
77:79:ba:ce:89:c6:3f:95:9e:1a:3d:8f:8b:88:a4:49:2e:ea:
0a:90:97:eb:fd:0f:8b:1f:39:21:65:c1:3c:de:ca:8a:10:a7:
fe:6b:38:cc:70:40:b6:e6:cc:19:63:63:4b:ab:9a:1e:2c:6b:
a6:0c:35:e1:72:72:15:4a:e5:5e:8e:5e:48:ea:1a:ef:73:a8:
6c:a6:3d:42:19:93:49:57:70:10:fc:f8:bf:78:13:82:94:61:
ba:63:9c:50:0a:b4:b7:29:43:ea:e5:01:52:fa:a7:7c:88:3d:
f7:5a:08:5f:2e:2a:49:db:8b:30:74:d6:c8:dd:5b:01:49:a8:
95:1a:a4:fa:a2:f8:64:e7:d5:05:3c:64:c6:13:f4:3e:8a:64:
22:ab:61:e3:3c:a7:45:05:3d:4b:f3:63:42:fd:9a:3f:6f:10:
51:11:ac:2f
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZz9wQPM0UzWHa+H9fOKevguMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjYwMzE3MjE0MzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MGRlMDBjYWQ3OWUyNTFkMmZhMzQyMzg1ZWJmNTFmYzAxODA4NTk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKrxmxlm5mxXWFLF3t0vB6webjFl
2CxR81G0NRY8Gl61/hy5QrEKZSQgy/FPzY+kuhcqC6O56QiRwSLeXWLKD7KSkcar
dF3pxBpoUW8H3mh8JV3BjCEzp7rDpaI0cYswNUI4+g0XnYvJVYwb0jxxavXnsUDi
obdI4AMnO66tRJjPoUJgK6J+bcXyuhHs6nR13JzbFf34hwwwMYvcbAF4F+X61JYc
5yIETg/ZIP7YXlVxvrjvkVhznVl1PnBaLr3G1va+7MseBbOTVEeG2P0wM3lC4ZfN
IrKWH8QBAGCnQ4x+zwgY68dxONRduqR44orrjpk4RxDmZ6w0QQ6/GZZndwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFJDeAMrXniUdL6NCOF6/UfwBgIWVMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEva040QXl0ZWVKUjB2bzBJNFhyOVJfQUdBaFpVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcEKgbeAABQ
AwcEKg6XwAigMA0GCSqGSIb3DQEBCwUAA4IBAQAO6hNv48pNIYT/GTeSccTnH/Ds
HQtXWOokY7n9ga01ud3h2NgMJOLvUhUzHQS0oiyZabW5iQA+ZAC37Ckj0vpiMEB/
X8HHtNrv3FKuCi25/2aRsQcH3zZTfdJ3ebrOicY/lZ4aPY+LiKRJLuoKkJfr/Q+L
HzkhZcE83sqKEKf+azjMcEC25swZY2NLq5oeLGumDDXhcnIVSuVejl5I6hrvc6hs
pj1CGZNJV3AQ/Pi/eBOClGG6Y5xQCrS3KUPq5QFS+qd8iD33WghfLipJ24swdNbI
3VsBSaiVGqT6ovhk59UFPGTGE/Q+imQiq2HjPKdFBT1L82NC/Zo/bxBREawv
-----END CERTIFICATE-----
Generated at Thu Mar 19 02:31:46 2026 by rpki-client