Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/qkhKgeLGiLhcUVz28MwSU_0GECE.roa
File: qkhKgeLGiLhcUVz28MwSU_0GECE.roa (raw, json)
Hash identifier: jYCz4zIEkWFamIzAIhJHp6Yu1DPO+d8BieJReFlyxdI=
Subject key identifier: AA:48:4A:81:E2:C6:88:B8:5C:51:5C:F6:F0:CC:12:53:FD:06:10:21
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019FB1FEFD0B49ECE051A9A0F651AE12A60A
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/qkhKgeLGiLhcUVz28MwSU_0GECE.roa
Signing time: Thu 30 Jul 2026 07:48:25 +0000
ROA not before: Thu 30 Jul 2026 07:48:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200625
IP address blocks: 2a0e:97c3::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 31 Jul 2026 14:14:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b1:fe:fd:0b:49:ec:e0:51:a9:a0:f6:51:ae:12:a6:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jul 30 07:48:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=aa484a81e2c688b85c515cf6f0cc1253fd061021
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2c:58:1e:99:9d:f8:6b:95:38:35:aa:12:df:
a5:ec:98:1b:36:2d:e1:28:b1:f6:3a:94:06:b8:d7:
97:ef:af:b1:7b:ff:0c:23:cb:07:65:0a:eb:5b:6f:
a0:66:bc:64:bd:e3:8c:b9:01:80:92:c7:a7:03:db:
26:37:7d:7a:1e:14:50:e1:d9:80:dc:a1:7c:d9:d9:
9d:3e:64:62:d1:e3:32:e9:0f:49:ce:2a:fc:16:d8:
0d:3e:f9:45:64:0f:ea:31:0e:44:a0:7f:34:3e:e9:
7d:fc:7b:21:5b:fe:74:73:e5:60:42:d2:3f:f2:ce:
f0:69:52:dd:22:3e:9d:2a:53:ed:20:b9:14:a0:c0:
b2:12:91:1e:05:34:77:73:29:11:b6:1a:a8:2d:a3:
ce:20:01:3a:94:e0:db:29:6f:bc:23:d1:00:45:f5:
94:16:ba:dd:f7:46:23:8d:c1:92:d9:3b:d9:65:20:
9c:f1:8f:44:9c:48:b0:80:41:aa:c0:c1:56:75:72:
39:93:bd:af:c2:e0:07:9d:b2:a2:d4:fe:01:97:26:
f6:98:f8:6b:28:0d:a2:28:47:0a:eb:fc:0f:8a:aa:
77:c8:7b:4f:b9:71:b2:4d:ce:b1:f3:22:83:da:b6:
4c:9d:c1:c3:f8:19:ce:c4:18:fb:b6:db:1b:5e:3b:
6e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:48:4A:81:E2:C6:88:B8:5C:51:5C:F6:F0:CC:12:53:FD:06:10:21
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/qkhKgeLGiLhcUVz28MwSU_0GECE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c3::/40
Signature Algorithm: sha256WithRSAEncryption
1c:10:95:99:90:97:f3:17:b8:1b:a2:63:80:49:1c:6f:56:90:
12:1b:32:e7:cc:c7:7d:b4:a3:1b:93:d4:f6:bf:51:ec:2a:7c:
8f:bd:74:b5:08:55:34:f1:5a:44:40:fb:38:bb:7d:b4:90:8b:
12:15:58:79:d2:a1:80:72:bb:1c:ef:d9:7e:30:88:42:f3:39:
6a:79:b7:cf:fc:32:13:fe:f4:c3:9e:db:d7:f9:65:b3:39:e3:
18:79:e9:4f:f2:1a:3a:16:90:b8:c4:64:ab:05:4c:04:0f:31:
ed:da:47:67:1e:f3:26:94:74:ed:7a:ec:07:e5:63:53:be:64:
a0:19:77:ec:7f:34:ae:e3:57:e4:4a:a0:ee:ac:33:ed:7a:ec:
f7:36:3e:f5:14:e4:86:9b:d5:95:d3:8b:91:0d:b3:b7:31:7f:
5a:81:c7:29:b0:d4:8c:64:4a:ea:5f:ac:18:a1:a0:54:90:1f:
60:48:8e:01:12:f3:6c:b3:69:8b:ab:f4:8d:0f:67:6e:ea:7a:
3e:09:e0:d1:f1:04:9f:94:32:f6:ac:25:67:ea:ca:f6:8f:24:
15:bc:4b:fa:59:74:66:91:90:a6:dd:c8:99:d6:10:1b:85:bb:
c7:b0:f7:61:d6:9b:31:d8:63:36:bb:f9:5f:f5:c1:66:e2:0a:
ea:70:9b:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 30 18:23:51 2026 by rpki-client