Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/oNdkiCOVb44txz6wJCU1lHA6VPo.roa
File: oNdkiCOVb44txz6wJCU1lHA6VPo.roa (raw, json)
Hash identifier: LnqcfbmAm9nAK24C1al4LJZSpOHMEf2lwS6521i+J7g=
Subject key identifier: A0:D7:64:88:23:95:6F:8E:2D:C7:3E:B0:24:25:35:94:70:3A:54:FA
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019FB7EF3E60DECCBF6B9A48383553F00239
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/oNdkiCOVb44txz6wJCU1lHA6VPo.roa
Signing time: Fri 31 Jul 2026 11:28:57 +0000
ROA not before: Fri 31 Jul 2026 11:28:57 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213255
IP address blocks: 2a10:2f00:132::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Aug 2026 11:28:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b7:ef:3e:60:de:cc:bf:6b:9a:48:38:35:53:f0:02:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jul 31 11:28:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a0d7648823956f8e2dc73eb024253594703a54fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f8:28:40:85:83:29:31:a1:9c:90:6b:84:c5:
f2:8c:90:56:cd:ed:0d:4f:d1:44:c7:c4:66:98:c0:
a2:e3:72:d9:50:9e:7c:b8:21:1d:68:e3:c0:00:82:
4f:63:60:30:b3:c9:5e:54:95:dc:a5:e4:75:8b:90:
9e:65:80:28:d2:dc:20:b2:8b:85:0d:d5:b6:0e:ac:
42:e6:8a:8f:bb:7e:40:1c:d5:67:1f:48:d9:01:54:
2a:88:68:48:5c:62:4e:d3:5a:c7:12:6a:f1:33:e5:
88:15:cd:45:1d:99:7b:6c:ac:73:c6:e4:b4:d4:6f:
c2:53:25:66:32:ae:30:11:57:9f:bc:fe:18:2b:f8:
56:2b:8a:e9:72:25:6b:b9:ee:8d:f3:36:6b:bb:5f:
16:60:fb:c6:93:e7:67:78:c8:2a:45:81:1c:08:97:
da:c8:ef:08:e8:f4:e0:32:10:ff:dc:68:db:f6:ef:
71:eb:b3:1b:65:22:81:8c:ce:fd:03:4a:af:87:d4:
00:a2:15:eb:22:82:dc:7d:e6:e0:88:23:4b:37:e8:
bb:1b:67:08:c3:91:fc:5a:00:8d:30:ff:61:2c:3c:
e2:01:75:55:43:ce:45:f0:94:29:d0:12:20:5d:34:
25:14:81:c2:5a:ec:87:86:96:1f:d5:d7:d0:f3:95:
c8:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:D7:64:88:23:95:6F:8E:2D:C7:3E:B0:24:25:35:94:70:3A:54:FA
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/oNdkiCOVb44txz6wJCU1lHA6VPo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:2f00:132::/48
Signature Algorithm: sha256WithRSAEncryption
bb:1d:8b:11:72:6d:96:79:b6:6c:e8:dd:68:1c:a0:eb:4b:27:
df:51:65:75:73:28:57:73:9d:20:f9:fa:d4:d3:d9:85:b3:0d:
ae:40:2c:ee:65:c8:74:c6:98:df:af:5f:8e:a9:1a:26:f1:43:
64:93:2d:60:98:fb:bd:3e:b2:56:b5:6c:28:c3:14:00:21:c8:
3e:75:90:d1:33:85:91:13:1e:fc:3e:2c:97:ee:46:2a:76:d6:
e5:0d:a8:1e:18:ef:3a:92:67:79:9c:8e:5f:8d:f7:77:2f:2f:
de:79:fc:3c:66:e5:77:b7:dd:ca:bd:64:38:cf:00:31:2f:75:
a5:86:bb:d5:6c:a3:17:f3:b8:3d:62:73:bf:4e:70:b5:09:10:
58:26:3f:5b:68:66:00:d6:ce:be:35:12:20:d7:29:ba:ea:cc:
ae:ef:5b:73:df:08:27:b7:02:82:8f:f6:f5:2a:93:fe:38:60:
15:9c:0b:8f:06:12:d7:09:f3:1f:90:3f:0f:24:59:7a:cc:50:
ca:62:3b:76:8d:5e:68:2d:76:a7:92:3b:66:0b:01:e6:64:14:
43:07:24:34:c6:48:02:ba:81:fd:3a:a8:c5:df:ff:46:4f:58:
ef:09:e3:eb:3f:36:43:d9:f4:16:41:6c:7b:3c:a7:56:22:23:
2c:62:d1:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 31 19:45:55 2026 by rpki-client