Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/v4Y2xvWNn8TTjKLyj9BAfFTHqNQ.roa
File: v4Y2xvWNn8TTjKLyj9BAfFTHqNQ.roa (raw, json)
Hash identifier: wyZuwwku1iYUDx7HKmopDMU118ZuvePxtwt57E7qbTw=
Subject key identifier: BF:86:36:C6:F5:8D:9F:C4:D3:8C:A2:F2:8F:D0:40:7C:54:C7:A8:D4
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019F1D08D309A604B2811A130687657A85B1
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/v4Y2xvWNn8TTjKLyj9BAfFTHqNQ.roa
Signing time: Wed 01 Jul 2026 09:35:45 +0000
ROA not before: Wed 01 Jul 2026 09:35:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219495
IP address blocks: 2a10:ccc0:150::/44 maxlen: 48
2a10:ccc0:150::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 Jul 2026 14:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1d:08:d3:09:a6:04:b2:81:1a:13:06:87:65:7a:85:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jul 1 09:35:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bf8636c6f58d9fc4d38ca2f28fd0407c54c7a8d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:2d:2e:7b:2d:bd:4f:0b:23:49:e8:12:1f:07:
42:76:c9:7e:8b:da:5f:1f:d3:45:64:3c:20:0e:d1:
8e:37:c0:01:51:83:85:2a:8b:94:fa:f7:40:85:17:
d0:ec:19:b9:88:6b:7a:22:f8:4d:08:c0:83:9d:70:
91:06:5f:86:fa:81:a4:86:f6:5f:b8:f8:76:4a:33:
c2:e9:91:7b:9b:74:d7:6d:9b:fc:b5:f6:27:70:d1:
3e:04:4a:03:93:b0:7a:40:b8:87:4d:bd:99:f7:a2:
57:9c:73:53:5a:f6:7b:bf:c4:96:54:d7:63:4c:01:
7b:b5:97:19:2c:09:4d:65:7a:ae:1d:e6:39:98:7b:
1b:8a:2b:4b:96:88:52:7d:77:ea:e9:61:2f:8d:26:
d3:b1:59:88:94:c0:06:b0:19:2d:3e:b4:ea:a3:0f:
33:38:ad:3e:5d:92:e2:e3:74:df:b5:1b:cb:15:d7:
24:4d:66:66:0c:8b:72:ed:c0:1f:36:69:57:57:c0:
0b:b2:93:10:71:de:2a:c1:51:c0:72:ef:b4:76:10:
8b:f7:8f:80:f0:6c:13:ab:0b:0a:30:07:e7:ef:de:
d6:18:c1:be:d1:74:83:54:d8:8a:31:f6:bb:8c:e5:
de:fc:ad:e9:1b:d7:6f:7e:5f:9a:56:3c:49:89:af:
cd:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:86:36:C6:F5:8D:9F:C4:D3:8C:A2:F2:8F:D0:40:7C:54:C7:A8:D4
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/v4Y2xvWNn8TTjKLyj9BAfFTHqNQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:ccc0:150::/44
Signature Algorithm: sha256WithRSAEncryption
c0:fb:92:5f:3e:64:6a:97:e9:2d:de:42:0e:f8:33:1d:bd:b2:
f5:b1:68:78:8a:09:0f:47:a2:c6:54:b2:db:8a:5a:7c:99:fc:
19:9f:e1:43:b4:8f:0f:fe:3f:e4:5b:3b:4b:c6:d5:36:05:34:
f6:7b:2c:79:23:6e:19:92:b1:ac:08:84:2f:17:0b:dd:54:4d:
e7:54:fd:54:da:1f:8a:cf:a1:5b:0a:c6:b2:8f:23:8e:b8:82:
f1:e4:d0:7b:71:1f:cc:e7:56:57:98:bc:91:3e:7f:cd:39:89:
68:c8:9d:c4:f8:3d:20:45:00:e5:c6:6e:04:77:7f:71:2d:9a:
d9:8f:0b:a6:01:e8:c4:a2:00:d4:73:b2:0e:85:8a:f8:01:e8:
61:aa:48:2b:9b:57:78:28:89:ff:aa:ad:f2:3a:33:f1:a1:ef:
26:fb:b4:4d:0d:ba:5e:8e:ff:18:50:aa:50:62:39:18:c9:a6:
19:fe:8f:0f:12:62:82:6b:7d:a0:98:d5:c3:4a:c8:9f:71:bf:
94:43:50:5c:02:76:82:eb:d1:a5:0b:47:fd:dd:3a:9b:ec:89:
14:6a:4b:3e:1e:28:89:ab:c2:c8:26:c6:56:ef:7c:7e:46:d7:
43:ee:e1:7e:86:c3:29:9e:78:28:c1:1a:e0:16:24:1c:81:e2:
ea:b8:64:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 19:44:54 2026 by rpki-client