Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/smTAvpQc39l_OaJoRXpMBXXwBU8.roa
File: smTAvpQc39l_OaJoRXpMBXXwBU8.roa (raw, json)
Hash identifier: KEQkHpkcIv+Z9IiuHHCXXVv3haInr7MQ0zkAVPlOaEk=
Subject key identifier: B2:64:C0:BE:94:1C:DF:D9:7F:39:A2:68:45:7A:4C:05:75:F0:05:4F
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019E6BB8BA4E6344DC2C04F55D223AF516EC
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/smTAvpQc39l_OaJoRXpMBXXwBU8.roa
Signing time: Wed 27 May 2026 23:15:28 +0000
ROA not before: Wed 27 May 2026 23:15:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213302
IP address blocks: 2a10:ccc5:e000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 29 May 2026 13:25:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:6b:b8:ba:4e:63:44:dc:2c:04:f5:5d:22:3a:f5:16:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: May 27 23:15:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b264c0be941cdfd97f39a268457a4c0575f0054f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a2:36:ac:24:b0:fa:b9:f2:7d:fd:8c:e4:44:
bf:6c:2e:60:2a:b4:46:73:b3:5d:48:7a:53:8f:5b:
8a:89:b5:d5:b4:a9:4f:42:1f:28:52:ee:29:f7:43:
e8:a9:36:72:03:d1:41:86:44:e4:ae:99:a3:ab:bb:
44:ce:43:aa:35:b4:f8:22:a8:cb:41:9f:2e:57:9d:
4c:82:56:cd:a6:dc:20:ea:98:b7:eb:16:e1:0e:25:
db:b5:aa:bf:bb:04:3c:03:7d:06:8f:fe:9e:e2:cd:
7c:4f:b4:23:99:b2:28:df:fa:51:cd:69:59:f6:ba:
3d:5b:d3:75:72:01:30:e2:e7:bf:ca:b1:2f:27:18:
a1:54:07:b3:b0:12:4f:da:a9:d0:0c:eb:df:43:42:
6a:1c:e0:3e:4d:1a:84:f4:bd:f0:ea:66:a5:96:6b:
51:4e:f2:7b:92:aa:16:df:92:0e:b6:94:9e:28:83:
29:e6:f7:88:86:11:27:f7:78:38:a7:d9:31:20:29:
df:43:34:c5:f0:19:f4:b3:b6:3b:f8:7a:bd:c1:cc:
bf:73:0a:65:38:20:b4:a4:4d:2e:bf:5e:0b:dc:84:
6f:71:fb:af:ca:b7:4f:74:93:e3:a0:be:52:47:1e:
c2:fc:40:41:11:b7:cc:eb:15:ae:44:6d:7f:b5:69:
cc:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:64:C0:BE:94:1C:DF:D9:7F:39:A2:68:45:7A:4C:05:75:F0:05:4F
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/smTAvpQc39l_OaJoRXpMBXXwBU8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:ccc5:e000::/36
Signature Algorithm: sha256WithRSAEncryption
0a:69:00:92:0a:29:bc:6c:d1:50:e9:90:9b:97:c5:18:59:41:
8f:e8:8b:2a:cc:35:1e:fa:15:0c:de:15:cb:1b:62:f3:82:70:
75:3a:2f:60:e6:08:24:9d:32:09:7c:28:ba:44:00:d2:28:d9:
42:8f:da:24:2b:f6:ad:74:ef:d3:75:8a:3c:7f:a3:67:51:2e:
48:68:2f:64:f5:70:29:61:ca:31:13:ba:5b:54:05:90:46:ba:
06:f3:e8:61:e3:ae:2b:ac:58:d2:15:c0:f6:5a:df:cd:e6:cc:
52:63:5c:36:10:ad:b4:e0:f8:1f:11:46:e4:99:87:75:01:9c:
46:d1:1c:4f:3a:3a:a6:ad:d8:41:3f:b1:d0:73:7b:9f:3b:4c:
65:6d:1d:5a:f5:0a:d4:20:ab:dd:01:2f:25:5f:b5:56:a7:ef:
eb:b6:6f:59:45:c0:e5:cf:44:aa:47:68:c7:e5:ba:05:de:5d:
b5:52:d3:cb:89:01:c6:20:1e:5a:8a:47:fc:06:b0:9b:94:c8:
58:0f:8b:df:4a:38:e6:a3:a3:bf:97:f0:a0:19:e1:23:a3:ee:
3a:d8:9a:f0:72:be:ae:58:f3:03:50:46:75:1b:c6:99:72:e9:
b4:e5:65:d0:9b:46:74:ac:b7:ee:55:b6:7c:8f:5b:7e:2b:1e:
d8:06:4e:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 28 22:14:52 2026 by rpki-client