Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/sFidH2YvThyxnIpjridy-0iIgMU.roa
File: sFidH2YvThyxnIpjridy-0iIgMU.roa (raw, json)
Hash identifier: sFJzSFB8B9HLVFr0xajZqD140VHsvvGS10fvlvlPvpo=
Subject key identifier: B0:58:9D:1F:66:2F:4E:1C:B1:9C:8A:63:AE:27:72:FB:48:88:80:C5
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01A09A0BF6CDB71FA26C0E28098A9244AAD7
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/sFidH2YvThyxnIpjridy-0iIgMU.roa
Signing time: Sun 13 Sep 2026 09:14:30 +0000
ROA not before: Sun 13 Sep 2026 09:14:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61218
IP address blocks: 2a0e:97c0:4b00::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Sep 2026 12:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9a:0b:f6:cd:b7:1f:a2:6c:0e:28:09:8a:92:44:aa:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Sep 13 09:14:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b0589d1f662f4e1cb19c8a63ae2772fb488880c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:b5:dd:21:63:68:eb:6a:2a:5e:33:85:48:49:
b4:61:b6:57:cf:8d:2d:55:53:27:5d:fd:93:4f:72:
24:b1:43:44:92:a7:f6:50:93:fa:9d:e1:2d:d0:ce:
49:99:06:64:12:1e:cc:c5:46:93:9e:51:c1:da:a2:
f4:b0:ec:6a:9e:c7:35:bf:d1:a6:5d:9d:41:c2:ae:
85:69:12:5d:98:b6:8f:4f:29:5a:21:1c:3e:06:7c:
b0:91:3b:10:45:3f:97:77:01:96:be:eb:44:42:4f:
0e:85:0b:37:22:7d:d7:19:3b:de:c5:2e:1d:47:79:
48:75:38:11:60:8c:e1:13:70:69:44:60:b8:76:83:
4f:c8:d4:60:e1:96:a5:25:e3:4e:cc:af:2d:50:fd:
08:04:71:11:f7:59:e5:8a:58:81:92:bf:8c:81:d8:
94:19:cf:81:74:b8:e8:64:ec:19:f1:5f:d7:01:4c:
37:09:39:dc:1d:91:5f:90:5c:69:32:6a:45:a0:28:
24:93:76:8a:b9:cb:b3:29:41:df:06:9b:fb:cf:07:
49:6b:70:a8:14:a1:1b:b9:0e:0a:ee:1b:bf:7d:58:
68:1c:03:8c:a7:27:ed:03:59:1d:08:f5:13:ef:dd:
e9:ad:8a:81:11:ec:fa:aa:87:85:ea:e4:f5:b6:f5:
47:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:58:9D:1F:66:2F:4E:1C:B1:9C:8A:63:AE:27:72:FB:48:88:80:C5
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/sFidH2YvThyxnIpjridy-0iIgMU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:4b00::/40
Signature Algorithm: sha256WithRSAEncryption
c3:c3:62:22:c7:e9:62:88:74:d4:fa:ef:51:a6:56:7a:9b:5a:
99:a1:c9:6e:7c:0f:a3:44:98:06:d7:51:4e:53:07:19:da:99:
7e:7d:fc:18:c4:e2:8e:0e:1e:59:52:e1:04:ef:f0:01:f3:1c:
cd:f8:01:66:db:d1:88:4b:9e:b7:7c:91:b7:36:dc:cb:7b:86:
86:b2:94:45:c7:61:ac:8d:5f:36:a6:4f:9b:8e:84:21:7d:b2:
29:ff:e9:af:1f:00:f5:63:84:0a:4e:a2:7b:14:fb:f7:d4:7e:
1d:3f:3e:71:63:f0:a8:29:1e:78:02:7e:59:cf:c7:4b:6c:77:
90:68:a8:a3:80:b3:26:df:7a:1a:52:f3:ea:6c:66:87:b0:7f:
8f:26:de:a1:e2:78:7e:5d:4f:82:7f:07:bc:64:41:e8:0c:3d:
5b:2c:76:60:f4:41:b5:c5:4d:ee:d3:72:01:c7:f6:f6:f7:a8:
37:8e:b7:3c:22:09:1a:0d:fd:ff:8c:d2:6a:ba:fe:5f:d4:92:
29:5a:91:4f:df:4f:84:95:a2:94:3a:b7:d2:e8:af:29:c6:d9:
a8:bf:37:c0:fb:27:96:d2:c5:17:fc:04:4d:ac:db:16:70:bd:
0b:dd:33:41:4c:67:49:21:4e:28:e3:37:93:5b:11:8e:79:60:
d5:32:03:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 20:30:59 2026 by rpki-client