Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/qSTIWLp8N77MMmqn8Mo4f9-nCBQ.roa
File: qSTIWLp8N77MMmqn8Mo4f9-nCBQ.roa (raw, json)
Hash identifier: +siXfzffNVdWkPwkQUbaEEflXDpNo2Nor+PBkS+OUsg=
Subject key identifier: A9:24:C8:58:BA:7C:37:BE:CC:32:6A:A7:F0:CA:38:7F:DF:A7:08:14
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019F1D08D28E2C34C5FE45D797EECA0D7D96
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/qSTIWLp8N77MMmqn8Mo4f9-nCBQ.roa
Signing time: Wed 01 Jul 2026 09:35:45 +0000
ROA not before: Wed 01 Jul 2026 09:35:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197477
IP address blocks: 2a06:de01:70::/44 maxlen: 48
2a10:ccc2:10::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 Jul 2026 14:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1d:08:d2:8e:2c:34:c5:fe:45:d7:97:ee:ca:0d:7d:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jul 1 09:35:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a924c858ba7c37becc326aa7f0ca387fdfa70814
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:98:e1:aa:27:e2:3a:e4:83:bc:cf:c4:cf:c9:
ba:21:39:a9:26:64:72:b4:1a:c1:83:2b:7c:4f:fe:
fd:41:15:56:bd:e0:ec:d9:20:6f:db:ee:44:d4:f5:
5c:97:a8:77:3c:cd:02:2d:6a:fe:75:41:df:e7:94:
9c:a7:37:8d:27:fa:a5:6a:40:9d:1e:88:3f:26:bf:
33:17:61:e9:45:67:3e:0e:64:c2:a6:c2:e2:40:56:
f1:bc:21:63:8b:32:96:e1:fc:e0:c0:4f:e6:60:7f:
cf:99:e3:45:ad:8a:3b:07:3d:38:ab:55:8e:dd:2a:
e5:67:20:76:10:57:65:0f:31:b2:34:59:10:9a:70:
71:d2:d0:0f:29:2b:1d:ce:75:d0:56:2e:fd:ed:6d:
69:61:d9:ce:9b:eb:8d:05:3d:d1:0f:d3:82:85:ee:
f5:49:62:6c:f9:55:12:01:69:ca:01:4f:27:83:95:
e8:78:81:cf:b3:b0:77:d5:2c:90:2f:4c:b2:17:c0:
02:db:71:b9:03:d3:bf:c3:82:41:9d:09:ad:6a:55:
ff:76:80:a2:da:76:9b:32:e5:a2:ed:33:9c:2d:38:
21:e3:a2:66:26:30:01:f9:ad:26:90:dc:7a:0b:fc:
ac:d1:c9:01:60:5b:09:64:b2:e9:80:b0:66:52:0d:
d1:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:24:C8:58:BA:7C:37:BE:CC:32:6A:A7:F0:CA:38:7F:DF:A7:08:14
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/qSTIWLp8N77MMmqn8Mo4f9-nCBQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:de01:70::/44
2a10:ccc2:10::/44
Signature Algorithm: sha256WithRSAEncryption
6d:1d:3f:22:78:d1:2a:1b:b0:a7:41:1c:f2:44:a0:22:9e:98:
21:8a:07:7d:3c:18:92:8d:7c:85:c7:bf:0e:c2:44:da:bb:fe:
c8:42:66:9e:7b:1f:a1:fc:6f:f7:01:f9:2e:34:9d:f5:cc:91:
f1:50:40:bb:35:9f:14:b7:27:a2:71:5f:fd:f0:2c:b1:87:b0:
1b:56:13:18:05:26:55:41:50:de:46:a8:9d:a4:69:50:9c:4a:
87:31:71:74:6e:ee:7f:2f:91:82:21:a9:94:05:85:bb:1f:16:
7b:e7:42:72:92:f2:01:48:6a:7c:b8:e6:a3:a9:54:06:55:2c:
ca:24:b5:b5:ea:8f:98:8a:4e:4d:de:6e:64:8e:01:a2:53:e3:
69:69:a5:b6:7c:5b:39:d4:16:51:55:b2:f8:7a:14:6a:d8:2c:
7f:13:80:73:01:ba:c2:88:81:64:61:d2:c3:48:fc:d9:ed:5b:
eb:6c:82:80:38:b4:8d:3d:ba:f8:af:2e:bf:48:98:71:e0:95:
89:13:89:b3:06:d1:b5:d4:06:51:41:f9:e9:ba:5e:63:61:6d:
d9:23:a9:44:76:10:97:bc:48:a1:fe:10:31:36:cd:8d:ae:83:
1e:bd:d3:0f:fb:61:95:d5:cc:3f:4b:b5:49:d1:43:d8:36:23:
98:f5:3f:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 19:44:53 2026 by rpki-client