Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/sRK2XL9ijD5EgC1SXoID-YQW7As.roa
File: sRK2XL9ijD5EgC1SXoID-YQW7As.roa (raw, json)
Hash identifier: YJ1kWA3w0u4hr2R/vZWlwi7RtgoMql/FgZflNoWsSqM=
Subject key identifier: B1:12:B6:5C:BF:62:8C:3E:44:80:2D:52:5E:82:03:F9:84:16:EC:0B
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019ED1B14B7377FB0CE2D1B0520D396D0A5A
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/sRK2XL9ijD5EgC1SXoID-YQW7As.roa
Signing time: Tue 16 Jun 2026 18:28:37 +0000
ROA not before: Tue 16 Jun 2026 18:28:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205621
IP address blocks: 2a0e:97c0:3c0::/48 maxlen: 48
2a0e:97c0:3c1::/48 maxlen: 48
2a0e:97c0:3c2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Jun 2026 18:28:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d1:b1:4b:73:77:fb:0c:e2:d1:b0:52:0d:39:6d:0a:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jun 16 18:28:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b112b65cbf628c3e44802d525e8203f98416ec0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:d5:d9:0a:d8:7b:47:9b:c3:e2:4e:45:ab:54:
0a:67:56:f0:91:be:ae:37:a6:75:46:8a:69:d6:d6:
48:11:e6:c6:bc:43:4f:b5:40:4e:b9:12:df:7f:3b:
9b:43:63:9e:b6:ef:fe:03:ec:33:7b:c7:2d:69:8a:
45:1f:5e:c7:b6:f9:4d:11:33:81:7e:f6:a2:21:c8:
88:64:88:6b:52:55:c9:fa:bd:5a:46:f5:7d:2e:a0:
57:b4:f4:85:0d:87:cd:5b:8a:06:17:ec:b4:a2:21:
24:5c:e5:8c:cb:8b:7c:a5:6c:d9:e9:42:f6:7e:05:
c2:40:11:ee:2d:73:d9:36:c3:fd:d6:9b:ee:6f:c2:
b0:3d:1a:d7:a9:7f:e1:e2:36:e9:fe:c4:8b:3c:48:
da:db:02:7c:af:4d:97:a5:12:3e:5b:98:8c:3a:59:
ad:e9:67:ef:29:51:b1:6b:41:b9:65:ab:26:58:e3:
b9:22:d7:2b:1f:59:7d:9c:dd:84:a7:48:23:4c:3d:
c9:54:58:ee:47:d0:03:6c:72:dc:a6:2a:cd:1f:b7:
49:4b:fd:12:2d:a2:38:60:11:05:82:07:62:59:eb:
c2:3f:d3:7a:1d:7b:b5:a8:b1:e9:ec:55:38:9a:77:
51:8c:29:4c:ba:b5:e4:28:91:5f:40:0d:3d:80:2b:
40:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:12:B6:5C:BF:62:8C:3E:44:80:2D:52:5E:82:03:F9:84:16:EC:0B
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/sRK2XL9ijD5EgC1SXoID-YQW7As.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:3c0::-2a0e:97c0:3c2:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
23:1a:c4:f3:6c:7b:07:0d:4d:63:bf:ea:bf:b0:9e:94:a1:2a:
78:e8:70:5b:84:81:05:25:9c:b6:03:cc:03:a4:2c:6d:69:22:
00:e8:7e:d3:ee:e2:e2:bb:9a:1c:7c:8b:9b:62:76:bd:93:30:
c2:bb:24:1b:0e:40:bf:1c:e8:14:1a:34:d5:3d:25:3e:2d:72:
d3:db:00:95:0a:d1:18:e1:fe:be:89:f5:91:56:f4:b0:06:a5:
02:9c:8a:e5:16:b0:2c:47:22:38:b6:07:b2:d1:87:67:23:54:
59:73:31:c1:4a:33:23:fc:fe:10:d7:f8:b5:92:6d:08:1a:ce:
76:17:51:5a:63:e3:75:19:37:4f:fd:c5:42:19:1a:9c:4f:8d:
34:4b:e7:48:50:a0:86:41:dc:88:e4:7a:11:e2:d0:48:a9:9a:
ce:98:a8:3e:cf:cd:6e:55:17:1b:fd:ed:31:01:e4:16:63:c1:
ba:12:a3:f6:2e:17:fc:3a:bd:14:80:27:26:58:5f:20:9a:75:
98:21:0f:80:72:91:1a:4e:f0:df:4e:8d:70:fc:aa:0f:8d:2d:
49:7b:31:4e:3f:a3:76:31:c2:b7:4d:75:7f:fa:b1:e4:e7:c3:
1b:e9:ae:b9:c2:ca:d6:9a:d8:ad:29:e2:97:ee:a5:f4:33:ea:
9c:7c:a6:79
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jun 17 04:30:20 2026 by rpki-client