Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/m1BShBudCI8mTNkbrfe9k6t2Gw8.roa
File: m1BShBudCI8mTNkbrfe9k6t2Gw8.roa (raw, json)
Hash identifier: kz+c4rRKINqA43iFhP9hmv8vAQrY4QLBOHXSpqZQEUw=
Subject key identifier: 9B:50:52:84:1B:9D:08:8F:26:4C:D9:1B:AD:F7:BD:93:AB:76:1B:0F
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01A0138577313372C2C44F1381DB308AB7D7
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/m1BShBudCI8mTNkbrfe9k6t2Gw8.roa
Signing time: Tue 18 Aug 2026 06:18:28 +0000
ROA not before: Tue 18 Aug 2026 06:18:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219208
IP address blocks: 2a06:de07:fa00::/39 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 19 Aug 2026 06:18:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:13:85:77:31:33:72:c2:c4:4f:13:81:db:30:8a:b7:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Aug 18 06:18:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9b5052841b9d088f264cd91badf7bd93ab761b0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:b4:a7:ad:fc:d4:30:9b:95:93:0f:d1:4c:fe:
e5:37:c1:90:4a:ce:7e:f9:07:1c:0e:2b:8e:d9:43:
68:3f:e1:e5:f2:85:25:65:81:76:b2:2f:7d:34:d6:
01:f9:3d:e9:be:de:8e:bd:4b:9c:8c:56:ef:c1:3c:
f8:8f:2e:9d:97:94:32:21:9a:46:ef:3f:e0:66:4e:
57:6d:ae:2f:89:ce:6b:3b:65:dc:02:8c:b9:6c:8a:
e8:23:2c:0a:af:46:51:59:7e:d5:e8:c2:f7:b2:69:
9d:c8:d9:f2:ab:0c:39:0d:13:86:d7:96:f4:1f:3c:
5f:58:21:25:d0:da:ae:0f:15:25:23:1a:fc:8f:57:
b7:c5:5b:d0:e6:b1:3d:54:bc:4f:c3:21:63:75:cf:
cf:c2:36:58:f2:df:e2:7f:b6:42:a4:b5:d1:4f:c8:
38:8e:f0:ca:0e:f0:f8:93:c9:c8:f3:8b:c5:47:67:
ca:ff:8c:4d:b9:da:5c:0c:ca:26:84:5c:9c:28:fa:
e6:5b:36:43:19:1e:49:7a:6a:96:45:7a:fd:dd:3c:
f3:33:b2:ed:71:60:5f:fd:42:6a:05:b7:48:89:7e:
d7:27:7f:e8:f7:fb:37:3b:55:4a:dd:68:30:43:74:
ba:13:68:2a:1e:28:ee:b5:e1:4d:cf:cc:bb:c5:c0:
a7:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:50:52:84:1B:9D:08:8F:26:4C:D9:1B:AD:F7:BD:93:AB:76:1B:0F
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/m1BShBudCI8mTNkbrfe9k6t2Gw8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:de07:fa00::/39
Signature Algorithm: sha256WithRSAEncryption
a1:14:50:d6:94:a7:e4:c8:18:f5:9f:7b:7f:65:27:85:39:db:
25:2f:7b:be:a4:19:81:21:ff:b0:48:a5:e3:b3:16:bc:17:45:
90:4d:89:13:93:3f:f1:a9:94:d3:b0:c8:c1:58:9b:26:9d:cf:
3e:a1:9d:fd:15:5f:68:dc:74:bd:69:88:f9:91:cf:70:65:8e:
24:b0:8d:bf:14:fa:7b:ae:7b:02:d6:ac:a1:dc:a5:4d:72:c7:
44:ff:40:0d:bb:c1:6e:d0:20:bb:66:44:7a:ce:28:34:a6:a2:
42:2e:1a:a5:1a:e9:33:b2:6f:b3:e4:5f:af:69:52:56:5a:6b:
01:7d:88:bc:cb:43:67:27:0f:6c:38:65:3c:80:da:78:06:6f:
77:3e:0d:fb:55:d2:8b:47:64:e9:df:66:2a:3e:6d:02:18:ea:
cf:89:b9:13:2b:d3:7c:d8:47:e1:50:20:57:1d:7d:43:e5:bc:
67:29:d5:da:c2:df:47:0a:af:7d:92:d1:d6:03:40:2a:4e:02:
2e:e0:83:08:99:d6:1a:cd:10:a7:d5:64:1e:a2:b7:2b:a2:d3:
2f:f9:b3:e9:b6:c1:f8:74:29:fa:81:ab:ef:4e:b7:f7:ea:08:
71:24:6e:26:1a:2e:98:91:63:4d:de:e2:9a:90:fd:ab:ae:7c:
d4:67:6c:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 18 10:37:17 2026 by rpki-client