Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/npQQY2zZK0ji3b2rojwgtxXQW_s.roa
File: npQQY2zZK0ji3b2rojwgtxXQW_s.roa (raw, json)
Hash identifier: tSYI7d4OnxBZvkgDtrYXAepLg+ccVBjqix46tIuV/YU=
Subject key identifier: 9E:94:10:63:6C:D9:2B:48:E2:DD:BD:AB:A2:3C:20:B7:15:D0:5B:FB
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01A09ED400158108034DB480ECA40A250EDD
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/npQQY2zZK0ji3b2rojwgtxXQW_s.roa
Signing time: Mon 14 Sep 2026 07:31:28 +0000
ROA not before: Mon 14 Sep 2026 07:31:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210320
IP address blocks: 2a0e:b107:18c0::/48 maxlen: 48
2a0e:b107:18c1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Sep 2026 20:52:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9e:d4:00:15:81:08:03:4d:b4:80:ec:a4:0a:25:0e:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Sep 14 07:31:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9e9410636cd92b48e2ddbdaba23c20b715d05bfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:74:1b:6e:16:a3:24:71:58:84:d8:46:85:39:
8f:70:0c:35:19:16:63:04:8f:0d:b5:49:1b:75:99:
87:23:09:d0:4d:14:32:55:3c:54:34:d9:ec:75:c3:
d6:c0:3b:03:5b:1f:36:3c:26:f4:04:5b:94:d7:56:
a3:4f:af:3a:b1:76:a7:7c:b2:eb:55:cc:ab:e0:46:
2a:cd:94:20:e8:0b:12:3f:cf:77:ae:31:bf:88:a4:
88:65:03:a6:8a:b9:a7:4b:3e:1c:63:b3:36:fd:66:
13:84:d7:b6:58:cf:a4:49:f8:11:e9:e1:dc:ae:f0:
6f:b1:ec:b0:e1:22:43:73:f0:2b:fa:87:3c:f9:0c:
af:ed:e9:bd:af:32:22:7c:0c:b6:51:6b:38:32:08:
9f:00:12:08:4f:4d:c1:18:60:69:c8:4e:3e:01:5e:
87:02:82:61:6b:10:32:ef:86:81:67:ec:78:b9:27:
a2:7c:f7:1d:13:9d:6d:be:59:49:37:31:91:3a:79:
c3:e4:f7:3a:e7:21:a4:0e:bf:dd:ee:5b:c4:d6:12:
29:ab:51:4e:a3:15:f2:0c:42:25:ea:d5:33:c6:5e:
a6:b6:b9:f7:73:31:fe:b3:fc:57:5a:49:c8:86:32:
c0:52:2e:c1:ab:f0:bf:b3:62:be:44:6d:c7:a3:08:
30:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:94:10:63:6C:D9:2B:48:E2:DD:BD:AB:A2:3C:20:B7:15:D0:5B:FB
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/npQQY2zZK0ji3b2rojwgtxXQW_s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:18c0::/47
Signature Algorithm: sha256WithRSAEncryption
07:e6:58:10:ec:fc:5c:20:8c:37:4e:0f:4a:b8:cb:14:4f:06:
ed:ad:57:43:89:f4:08:c7:c7:d4:20:91:13:f1:4f:08:58:2d:
78:ef:df:b1:70:f5:98:81:fb:09:64:15:ac:77:b0:3f:f5:75:
19:ab:28:1f:51:a4:db:fa:12:b6:1f:3d:6b:fe:25:9f:d6:c1:
c8:2c:e1:81:86:8f:28:5c:22:99:15:c0:ee:16:0a:32:b2:30:
77:e6:7c:21:50:c0:47:1e:39:57:18:45:eb:26:95:83:76:37:
ad:37:a0:f6:b0:5f:4a:81:73:eb:00:c4:a9:d3:c0:29:72:b4:
6a:ae:c4:f7:a7:67:df:f5:50:c9:0f:2f:cc:3a:2a:b6:1f:e5:
76:d4:2c:3d:69:a7:bb:e0:a6:50:2b:50:ff:a3:04:85:82:a1:
27:7e:0c:85:da:8e:27:25:7c:c6:a5:b2:bb:99:be:ee:60:df:
16:c5:b0:a3:01:66:b3:fa:8d:7b:b9:06:86:40:8a:79:b0:bb:
48:6e:e0:e9:5f:40:16:79:59:24:39:ce:3c:bb:5a:e5:3d:6c:
5a:22:dc:46:1a:a5:a9:cd:55:36:eb:ba:23:4a:d5:47:7d:b1:
22:65:cd:65:cd:3a:a5:d8:b9:38:37:84:08:eb:6a:ce:ac:78:
7a:f9:94:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 01:24:19 2026 by rpki-client