Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/mi2RLjvxTN6QM1ukws4r9Kfm0is.roa
File: mi2RLjvxTN6QM1ukws4r9Kfm0is.roa (raw, json)
Hash identifier: DY8rWejygpKut4bHc7zOGv7ckB4pA899nvJtM6p3PeE=
Subject key identifier: 9A:2D:91:2E:3B:F1:4C:DE:90:33:5B:A4:C2:CE:2B:F4:A7:E6:D2:2B
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01A09A00F5B87EBC272D5ADC642AE89BA211
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/mi2RLjvxTN6QM1ukws4r9Kfm0is.roa
Signing time: Sun 13 Sep 2026 09:02:29 +0000
ROA not before: Sun 13 Sep 2026 09:02:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31898
IP address blocks: 2a0e:97c0:aba::/48 maxlen: 48
2a0e:b107:361::/48 maxlen: 48
2a0e:b107:362::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Sep 2026 09:14:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9a:00:f5:b8:7e:bc:27:2d:5a:dc:64:2a:e8:9b:a2:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Sep 13 09:02:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9a2d912e3bf14cde90335ba4c2ce2bf4a7e6d22b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:eb:31:28:18:9f:2b:5d:2a:4b:75:72:d1:cd:
4e:0c:58:2e:f1:60:22:28:55:14:fc:a4:b0:2a:1a:
40:fd:da:c0:96:49:de:7f:1c:5c:d2:34:7e:e0:24:
d9:a0:0a:15:66:b0:02:d6:0b:30:e7:42:49:b7:aa:
36:81:86:b2:4a:57:ee:de:b0:f3:16:a6:04:a6:0f:
26:86:a9:e6:0f:d0:02:1b:cb:5a:5b:90:1f:05:95:
80:d2:64:15:44:1f:d5:3e:a5:75:31:c0:ad:f4:38:
d8:0a:f9:73:9c:55:22:d2:40:8a:8e:91:09:15:fe:
e0:08:ac:46:55:e3:58:e6:12:de:9f:ba:b3:8b:6c:
87:25:00:66:67:66:2c:3c:8b:3a:a2:00:f6:d3:2b:
09:87:7c:4b:91:64:d2:93:cb:3f:99:45:d6:94:b9:
99:ac:c5:da:24:19:e7:e2:4b:91:78:82:73:eb:d0:
41:35:80:8f:2f:8f:a8:ed:3d:a7:bb:c3:3c:90:81:
36:88:a7:02:6d:a7:0f:c2:3c:5b:f3:87:88:29:28:
ea:e1:53:05:d8:a3:51:8a:1e:19:08:13:a3:ef:e6:
18:d1:15:3b:19:b5:c6:e8:23:13:4c:fd:5d:85:5b:
bb:9e:9f:52:cc:f3:c6:25:3a:93:b6:91:87:d3:30:
d6:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:2D:91:2E:3B:F1:4C:DE:90:33:5B:A4:C2:CE:2B:F4:A7:E6:D2:2B
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/mi2RLjvxTN6QM1ukws4r9Kfm0is.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:aba::/48
2a0e:b107:361::-2a0e:b107:362:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
42:7c:5e:7d:72:61:bb:9c:df:04:a7:9f:78:a6:ff:20:c2:af:
ba:da:06:3e:b9:fd:f6:b9:39:c2:ad:40:54:18:37:9c:51:58:
72:0f:37:7b:a6:33:72:d8:0d:fc:c8:8c:53:78:6b:31:e4:24:
18:6f:f3:a0:c5:1e:f6:32:0d:b0:9b:8c:36:59:a6:b7:10:01:
45:f2:af:49:54:29:7b:a1:62:bf:06:5f:bb:b1:3d:fa:f3:67:
c2:2f:14:6c:18:02:8f:70:3f:7e:bb:d8:eb:d0:42:fc:17:5c:
32:fc:db:30:71:e1:82:fe:ab:8d:03:17:a5:b3:4c:83:5f:59:
db:63:fe:5b:6a:b1:3e:cf:7f:09:f7:cc:34:4d:14:41:3e:98:
20:de:11:71:a9:cb:1f:3f:a7:0b:74:f9:b3:69:7f:7e:b9:f0:
85:3c:13:35:b5:20:9b:96:90:f4:7a:40:bd:e9:07:bb:f5:0f:
2c:47:44:3f:82:3f:7d:87:89:1f:c6:df:93:3f:50:03:ee:f7:
11:e7:64:2c:97:38:a8:3b:aa:de:2d:54:dd:00:05:0a:35:9c:
19:26:b3:83:7d:c0:2b:e8:de:05:b1:7f:ca:f6:4f:ad:aa:4d:
1d:2e:80:a2:b2:95:ec:60:cc:bd:d4:e0:31:e0:b6:9a:b8:80:
ef:a1:68:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 20:29:50 2026 by rpki-client