Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/tXsq2XzeyjxdhJoWhO1_JYsJjxY.roa
File: tXsq2XzeyjxdhJoWhO1_JYsJjxY.roa (raw, json)
Hash identifier: t89ufkB9ZwK31Si4PfqJrSjmzEfR/4vMdsa5YH0O7R4=
Subject key identifier: B5:7B:2A:D9:7C:DE:CA:3C:5D:84:9A:16:84:ED:7F:25:8B:09:8F:16
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01A0525A24C30450B1A434F187D79D838463
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/tXsq2XzeyjxdhJoWhO1_JYsJjxY.roa
Signing time: Sun 30 Aug 2026 11:07:14 +0000
ROA not before: Sun 30 Aug 2026 11:07:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198750
IP address blocks: 2a0e:97c3:400::/38 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 31 Aug 2026 05:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:52:5a:24:c3:04:50:b1:a4:34:f1:87:d7:9d:83:84:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Aug 30 11:07:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b57b2ad97cdeca3c5d849a1684ed7f258b098f16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:f6:17:bd:d1:f3:4d:f4:97:03:dd:89:71:b5:
5e:dc:76:b3:8b:a1:5c:7e:92:e9:11:4b:28:4f:ad:
96:34:e3:95:27:43:33:84:7e:b3:c8:44:fe:df:0f:
a7:ea:4f:06:3a:b4:94:f1:aa:94:7b:ed:92:06:4c:
ac:53:3e:c7:00:28:9e:b0:cc:3a:94:a0:05:ae:9e:
a5:8e:e4:bd:b4:1a:7a:cb:73:78:5a:22:47:7e:92:
9f:94:14:d8:8b:da:83:2f:76:6c:1e:7d:b6:20:db:
44:ea:14:62:67:8e:d1:ff:50:82:6f:a5:a3:73:92:
6e:f9:7b:24:8f:88:a4:05:d6:c6:14:9b:de:0f:e3:
56:b6:9e:8c:dd:81:a0:3e:07:4c:16:32:cd:fb:50:
ef:74:df:c1:ae:fa:7a:f3:d3:51:49:1f:48:2d:7b:
cc:53:aa:71:58:76:59:43:89:3d:77:37:1f:15:16:
ad:c5:47:1c:e5:5d:a3:42:29:43:62:76:52:8f:1b:
84:64:d5:a7:d8:34:bb:af:f2:15:87:8a:4e:cb:96:
c9:08:19:c5:90:51:5c:5a:78:da:fd:63:5f:f1:db:
a1:c7:08:44:87:9f:f9:b1:23:46:1b:1a:ee:59:d9:
ca:84:82:81:fa:4f:7c:33:61:44:07:ca:8c:3c:27:
0a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:7B:2A:D9:7C:DE:CA:3C:5D:84:9A:16:84:ED:7F:25:8B:09:8F:16
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/tXsq2XzeyjxdhJoWhO1_JYsJjxY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c3:400::/38
Signature Algorithm: sha256WithRSAEncryption
41:65:83:53:d1:e1:cb:a3:7b:69:6b:1a:0b:8b:ad:a5:3a:a3:
87:a5:9f:34:37:d7:f8:1d:23:c9:c9:96:37:16:89:0e:0d:23:
7c:26:9e:4c:46:78:a1:80:a8:42:24:14:61:33:74:23:9e:8a:
f7:a4:92:2e:68:99:f6:f4:72:48:16:0a:5b:fa:98:b3:1f:0b:
ff:7e:13:8f:09:02:7c:de:ad:d9:78:8d:2e:ef:9c:8f:ab:4c:
7f:b0:77:af:61:b2:a0:28:9e:01:55:39:9d:84:b6:eb:13:0b:
9a:6a:4d:84:d0:66:4b:10:20:8f:74:3f:f1:66:36:41:1f:88:
58:ac:c5:75:33:ae:87:4f:ed:fb:0d:62:6a:a0:b6:54:12:17:
5d:22:22:a4:a6:ce:e3:08:f7:17:41:b8:3f:01:93:6f:17:ab:
f2:af:55:52:b8:4f:f3:fe:42:00:40:6a:6d:56:4e:f0:91:79:
46:82:50:8a:e1:76:31:b9:01:52:e5:9c:41:3e:6a:11:99:b0:
cd:8f:f8:17:f7:ef:3e:fc:df:75:35:3b:c9:34:de:2f:10:9a:
d3:c2:eb:b9:de:f3:72:58:8c:f5:bf:6f:c6:29:e1:96:0a:73:
1a:78:4e:00:b8:24:d8:58:ef:13:59:e5:74:4c:e3:c0:0e:ea:
2b:e2:a8:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 30 14:28:11 2026 by rpki-client