Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/tJE6aHoDwXMOfmSFwv0KEMcyy8g.roa
File: tJE6aHoDwXMOfmSFwv0KEMcyy8g.roa (raw, json)
Hash identifier: kyzJ4ZGhWgxbIPmc8uVxAaa7j8kRIEgTCQnZUVPbnC8=
Subject key identifier: B4:91:3A:68:7A:03:C1:73:0E:7E:64:85:C2:FD:0A:10:C7:32:CB:C8
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019DC950CC5D10B935A77B2DCE7843592C6D
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/tJE6aHoDwXMOfmSFwv0KEMcyy8g.roa
Signing time: Sun 26 Apr 2026 10:23:28 +0000
ROA not before: Sun 26 Apr 2026 10:23:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205414
IP address blocks: 2a0e:97c0:b00::/48 maxlen: 48
2a0e:97c0:b0f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Apr 2026 07:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:c9:50:cc:5d:10:b9:35:a7:7b:2d:ce:78:43:59:2c:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Apr 26 10:23:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b4913a687a03c1730e7e6485c2fd0a10c732cbc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:99:c2:1f:c4:e5:4f:7a:d9:65:f3:34:27:2c:
c5:58:e9:c0:de:a3:ce:fa:59:0d:4b:6f:88:39:31:
4f:88:6a:ed:f2:01:6f:e1:42:eb:09:1f:76:86:44:
c3:63:3c:9c:27:89:c6:d9:6b:af:67:9b:78:71:5e:
eb:28:00:90:e8:6f:46:83:9b:23:55:57:af:1b:11:
51:2f:72:02:d1:a2:88:c8:c0:e7:b2:bd:10:16:f0:
56:b5:2e:5a:62:13:a5:f5:f1:f5:ba:5e:fc:0a:07:
dc:c7:53:75:de:76:45:fc:bf:eb:26:c2:c3:1d:7d:
94:c6:09:28:fb:29:26:9f:46:b2:9f:b2:7c:17:d5:
3a:b7:ec:fb:f5:45:ed:aa:15:9e:3a:d0:72:e6:61:
bf:aa:d1:9c:1a:9c:81:24:ae:1a:ba:1d:f4:24:e6:
6e:77:3c:d4:ab:6d:65:c6:8f:75:a4:af:45:03:b0:
46:95:eb:cb:07:56:c8:e2:27:ab:ba:9a:42:77:6b:
86:c3:91:3d:d5:16:78:18:f2:63:7d:39:2f:62:dd:
8b:53:e4:8b:20:df:24:10:38:0b:02:66:fc:33:c6:
67:89:7b:fe:1c:9a:c3:a8:bf:14:b0:8a:d3:dc:aa:
23:2b:ae:d5:2b:9b:54:f4:89:84:cd:0b:bc:6c:c3:
84:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:91:3A:68:7A:03:C1:73:0E:7E:64:85:C2:FD:0A:10:C7:32:CB:C8
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/tJE6aHoDwXMOfmSFwv0KEMcyy8g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:b00::/48
2a0e:97c0:b0f::/48
Signature Algorithm: sha256WithRSAEncryption
b3:13:0c:65:49:83:34:e7:20:d0:6f:99:f8:52:a3:25:c4:62:
bf:73:ea:06:2d:0e:87:d3:84:e6:1b:0d:94:21:70:c8:58:dc:
d2:46:bb:35:f8:fe:e9:b0:43:4e:aa:5b:5c:47:93:53:1b:20:
c2:cd:f3:83:9d:1e:71:c0:95:0c:2a:82:26:49:71:ee:36:57:
f9:e1:85:c0:0d:95:a6:0f:8e:97:dc:6d:cb:4e:99:96:5a:31:
d6:78:6e:19:18:50:38:68:68:fd:fb:45:b5:32:53:2c:46:17:
72:45:b0:a5:c7:4d:6d:17:08:58:52:39:e5:4e:a0:e9:27:98:
b7:e5:34:93:a2:e7:fb:35:a1:bd:bc:a8:74:1f:09:08:5d:58:
4f:10:b3:1c:2b:12:50:9d:77:50:92:c0:bd:b5:04:ea:57:e6:
68:4a:10:93:1c:b3:69:54:9f:6d:83:b1:f9:70:0a:fa:fd:ab:
db:9e:08:3e:5c:ab:69:69:3b:c3:1c:04:b4:59:3e:04:ed:79:
9a:b6:78:46:8f:cd:a5:a5:a4:08:f5:f1:61:4e:a2:63:64:4e:
64:22:c7:b2:0b:03:04:40:ad:7d:18:59:62:b7:13:de:2e:f9:
17:43:7b:43:2f:5f:a9:de:d7:a1:ba:95:cd:11:b6:44:05:a1:
e6:97:4f:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 15:51:37 2026 by rpki-client