Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ute6JEgv21JvHs82JqPwa56zqSc.roa
File: ute6JEgv21JvHs82JqPwa56zqSc.roa (raw, json)
Hash identifier: B9evy+ztyAZtPHqiCWWx+m1qAYnbwl+f2CAFMk43Ung=
Subject key identifier: BA:D7:BA:24:48:2F:DB:52:6F:1E:CF:36:26:A3:F0:6B:9E:B3:A9:27
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01A09A04A3B8071BF56EBF271A44334CC3BA
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ute6JEgv21JvHs82JqPwa56zqSc.roa
Signing time: Sun 13 Sep 2026 09:06:30 +0000
ROA not before: Sun 13 Sep 2026 09:06:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219495
IP address blocks: 2a10:ccc0:150::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Sep 2026 12:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9a:04:a3:b8:07:1b:f5:6e:bf:27:1a:44:33:4c:c3:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Sep 13 09:06:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bad7ba24482fdb526f1ecf3626a3f06b9eb3a927
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9f:d3:2c:83:83:43:b9:9c:58:76:8a:73:5a:
e6:2f:57:7a:23:eb:cc:e1:6c:b2:c5:34:b8:5d:0c:
75:2c:36:8d:fa:34:1e:60:7b:1b:7e:8c:1e:42:21:
e6:dc:9b:86:fc:76:8d:9c:07:c0:fe:a1:3b:bb:7b:
48:44:5d:b8:fe:ff:8d:4b:07:e1:49:b3:2d:02:25:
6c:a0:00:c5:f3:a3:42:ec:00:85:8b:26:ce:3d:9a:
26:42:fb:85:67:63:e4:81:3c:f2:0b:ad:09:d9:fe:
bd:81:1f:28:31:ab:69:5e:43:bb:8b:cd:c3:77:16:
e1:a7:70:54:a9:ae:fe:8a:2e:8c:00:60:36:e0:c7:
dd:70:3e:fa:f9:1e:cc:ee:58:c3:c2:3a:84:37:7d:
b4:38:b5:b8:1c:e7:4a:be:55:47:a1:fa:d9:b4:d2:
a2:43:67:32:f0:42:cd:2d:08:52:51:66:57:49:e9:
52:e9:e4:ea:9a:c2:e4:25:4c:7b:58:de:58:5e:49:
81:23:bd:8f:cf:f3:66:06:ee:3f:d7:75:d1:54:02:
01:38:a0:d5:ad:54:b8:c2:70:04:f9:fe:c9:fa:a1:
7e:9e:b0:7b:ce:35:07:e8:f8:cb:8f:13:4e:02:bb:
0d:b2:32:36:30:34:89:c2:e6:bc:ce:10:c8:e1:96:
31:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:D7:BA:24:48:2F:DB:52:6F:1E:CF:36:26:A3:F0:6B:9E:B3:A9:27
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ute6JEgv21JvHs82JqPwa56zqSc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:ccc0:150::/44
Signature Algorithm: sha256WithRSAEncryption
16:f4:d1:91:1f:59:a6:1d:b9:fd:13:30:de:bb:b0:4c:56:bc:
7d:d0:17:c4:21:61:5e:8d:e1:91:ac:58:54:e7:9e:0d:4d:89:
24:1a:fc:17:77:96:fd:56:a4:60:c1:9d:5d:e0:f8:e4:c3:89:
01:88:51:cf:55:ce:66:a4:a6:83:4d:cc:d8:04:a6:18:94:da:
53:1a:07:6b:50:b0:bf:35:22:93:50:a2:46:ec:0e:71:b8:71:
35:fe:ba:34:9d:e3:c2:cd:3b:b7:0c:50:8a:b7:9e:84:05:2f:
40:f3:ba:64:d9:eb:5d:cb:9f:6e:cc:f4:f1:46:86:2a:1e:a7:
85:24:83:4c:92:bc:9f:e1:64:69:40:0d:da:3d:12:92:45:8d:
f2:a6:18:50:7d:b5:f2:e1:cd:5a:01:5d:21:c8:81:2b:44:a5:
dc:b4:43:58:a0:b4:f7:76:5c:08:30:7d:65:2a:ae:ea:5a:9f:
e6:81:e6:79:80:af:31:e2:fb:2a:fd:d9:09:54:27:3f:b1:5a:
75:47:88:bd:3e:11:51:a2:f4:04:97:71:fb:3c:cf:7b:c1:1a:
85:c4:4c:06:28:ca:72:0c:fb:97:df:e5:db:0f:2f:74:e8:8d:
ba:6a:b8:ca:8d:52:46:13:bd:2d:d3:d7:14:5a:fd:54:3f:c1:
dd:6e:ed:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 20:31:04 2026 by rpki-client