Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/sZSQjT_c2BSHEyY46aK1f6DzrlQ.roa
File: sZSQjT_c2BSHEyY46aK1f6DzrlQ.roa (raw, json)
Hash identifier: Sf2aM8n9zz5ENwXHta0jPxoOrBjB4W/21EY2ws+XP8k=
Subject key identifier: B1:94:90:8D:3F:DC:D8:14:87:13:26:38:E9:A2:B5:7F:A0:F3:AE:54
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01A09A0BFA6352A5B6EFFF3C47F377C26238
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/sZSQjT_c2BSHEyY46aK1f6DzrlQ.roa
Signing time: Sun 13 Sep 2026 09:14:31 +0000
ROA not before: Sun 13 Sep 2026 09:14:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197634
IP address blocks: 2a0e:97c0:ce0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Sep 2026 09:14:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9a:0b:fa:63:52:a5:b6:ef:ff:3c:47:f3:77:c2:62:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Sep 13 09:14:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b194908d3fdcd81487132638e9a2b57fa0f3ae54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:09:b2:58:d1:5f:6f:95:bd:7d:a6:0b:ad:df:
8f:15:91:67:28:b1:0a:5b:1f:a0:b2:55:1d:76:22:
1c:d9:d9:56:81:94:98:cd:ee:51:98:e4:5f:02:10:
5a:3d:e2:e6:33:23:7a:1f:73:b1:5f:71:2c:48:34:
c0:19:b5:29:9e:7f:a5:e2:e2:20:c6:58:31:dc:7a:
97:57:69:a9:8d:4f:37:fe:54:ba:df:6b:7b:61:12:
3e:fd:a1:38:5f:af:7f:73:a2:de:a2:96:5d:20:ad:
61:bb:b0:7b:e9:29:a9:b9:0d:b1:5e:f0:b2:42:0f:
15:72:60:35:cb:52:5a:95:6f:02:e2:59:16:d3:7a:
e9:dd:91:ce:54:ea:2a:11:47:9b:8c:a3:52:0b:e7:
47:3e:b6:63:94:37:7a:34:42:6b:44:7b:fc:7c:06:
fe:0b:68:a3:08:02:a9:cc:15:4e:0d:60:c7:56:d2:
66:40:27:3a:25:91:cc:96:14:33:8c:d0:2b:ab:f1:
1b:f6:eb:aa:5c:a6:0b:ef:f1:71:94:51:03:2b:60:
d0:af:04:ca:60:21:0a:62:50:c0:6a:be:76:7b:29:
9c:f1:95:b3:70:0e:1c:6f:f9:1a:90:7a:8a:d3:77:
ea:4d:7d:8d:af:da:8a:12:5c:43:11:42:3e:12:8d:
88:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:94:90:8D:3F:DC:D8:14:87:13:26:38:E9:A2:B5:7F:A0:F3:AE:54
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/sZSQjT_c2BSHEyY46aK1f6DzrlQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:ce0::/44
Signature Algorithm: sha256WithRSAEncryption
5e:e9:95:5b:f5:3c:b6:5f:ad:09:4e:18:8b:c4:6a:46:15:39:
b9:58:bc:1d:8b:0f:2a:d2:6e:39:1b:33:b9:3d:28:f2:8a:22:
ed:53:31:1c:3f:71:04:d8:41:fe:c1:5b:18:10:c3:58:b2:2f:
ea:b3:25:a3:20:ee:e9:b7:3f:dd:90:8f:7e:56:3c:68:d0:07:
a8:85:70:b1:7c:20:5a:83:09:fa:19:85:2e:db:f4:f2:c7:83:
e1:69:c8:a8:66:21:4d:d9:d5:87:e7:de:8b:95:64:25:3c:00:
10:d8:57:c6:f1:f8:57:c7:2a:43:4c:a1:32:79:20:3c:fd:a9:
37:37:8a:36:c6:6d:81:2e:df:54:de:53:03:eb:8e:bf:b0:0e:
ba:a3:57:f4:54:cf:a0:c3:b3:fc:1f:17:ee:6b:11:dd:90:fc:
f1:f4:e0:ad:47:c9:0c:da:00:a5:1a:8f:04:9d:a8:d8:1c:70:
ec:c8:e2:ed:1c:16:2c:3d:d8:f3:0a:59:04:99:3b:d0:fb:a3:
24:1a:3a:dc:18:bd:ef:d0:ff:da:8a:68:be:0b:2b:18:db:c2:
6c:a8:21:80:e3:b6:b1:54:32:c6:7c:62:78:8d:72:2c:d9:0a:
4e:4e:97:63:f7:d6:15:1b:34:23:50:07:0d:cb:ad:85:d7:6f:
e6:90:23:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 20:30:28 2026 by rpki-client