Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/vELtQvjZLHbAApKwXdB_O2fPUDE.roa
File: vELtQvjZLHbAApKwXdB_O2fPUDE.roa (raw, json)
Hash identifier: ukuoaa42X4b/mVmJ1qtu0PvFbYfN+7Voo0nJzY/lSIA=
Subject key identifier: BC:42:ED:42:F8:D9:2C:76:C0:02:92:B0:5D:D0:7F:3B:67:CF:50:31
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01A18997822D4ED357E3B8D9037BC6588A68
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/vELtQvjZLHbAApKwXdB_O2fPUDE.roa
Signing time: Thu 29 Oct 2026 21:36:10 +0000
ROA not before: Thu 29 Oct 2026 21:36:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218321
IP address blocks: 2a0e:97c0:260::/48 maxlen: 48
2a0e:97c0:261::/48 maxlen: 48
2a0e:97c0:262::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Nov 2026 22:05:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:89:97:82:2d:4e:d3:57:e3:b8:d9:03:7b:c6:58:8a:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Oct 29 21:36:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bc42ed42f8d92c76c00292b05dd07f3b67cf5031
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a1:8f:0a:c5:de:a1:d7:87:88:8a:1f:64:99:
d3:c0:b0:94:ed:53:e1:5d:f6:4d:e4:73:78:31:7b:
21:59:53:bd:9e:c1:00:0b:bd:d9:5a:39:9e:1c:b1:
38:da:36:e1:40:0c:a2:26:bc:e6:89:69:70:d5:36:
45:73:a6:88:0e:23:35:44:22:c4:e8:e4:31:94:28:
e3:ed:08:28:07:51:d9:ae:1c:5a:70:c2:ee:a6:66:
35:99:27:5a:9f:27:b3:eb:80:d0:a9:7c:62:02:07:
b9:36:c2:6b:0f:25:9d:cd:19:60:5a:c4:fd:79:70:
e1:a0:5b:1e:9b:b6:d4:f6:34:21:9a:d8:ea:44:c1:
c6:59:8d:0c:55:56:68:3d:32:52:7b:9c:53:70:c2:
38:30:90:fe:44:f9:fa:01:c3:36:12:6f:68:13:28:
be:44:1c:b0:22:c1:94:8d:ab:58:a5:d1:f9:a6:92:
f2:37:71:11:9d:e3:53:b8:9a:cc:29:a4:02:07:6a:
e8:49:93:8f:b6:c9:7b:49:25:9a:10:1f:e4:37:6a:
c2:66:8f:4a:7c:85:61:96:9b:de:5d:33:36:ab:56:
4a:9b:0d:b2:0d:65:b1:f5:fb:67:94:19:cb:79:c3:
b9:10:f2:10:11:12:47:19:23:c9:44:96:88:4c:58:
9e:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:42:ED:42:F8:D9:2C:76:C0:02:92:B0:5D:D0:7F:3B:67:CF:50:31
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/vELtQvjZLHbAApKwXdB_O2fPUDE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:260::-2a0e:97c0:262:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
86:4a:c4:c9:e6:89:15:54:69:d3:cd:47:b6:4c:f9:c7:24:3f:
0b:8c:5f:c4:cb:24:de:54:8a:ce:67:37:28:7b:c2:4d:fd:ee:
9f:cb:a7:8c:97:c7:62:fc:dd:d2:f1:00:7c:ca:52:25:f2:a7:
fb:e5:d1:80:ba:7e:6f:67:90:a6:a4:c9:62:9e:d0:ab:38:f2:
35:d3:a8:20:80:00:c0:22:50:34:5f:a4:d3:99:24:8b:3a:01:
67:46:1a:57:29:9d:df:14:e6:a6:7b:9c:19:5e:45:fb:32:d2:
49:54:e8:7e:fd:4c:76:3a:2d:f5:f0:7a:f5:93:f3:10:5e:f2:
a1:f7:23:75:74:a9:4f:3f:17:39:85:a4:f1:b2:d3:0b:28:ab:
76:a0:37:f9:59:87:00:0a:ea:a6:19:3c:6e:af:c6:61:75:0b:
67:37:e3:94:ee:8b:d4:ac:1f:bc:7d:5c:40:c7:da:0e:b4:1e:
bd:eb:00:13:d4:e2:79:1b:97:00:4f:bb:bc:96:60:78:de:90:
a5:ca:3a:be:7e:1c:19:04:ce:cb:aa:32:a0:0c:a0:1c:31:97:
93:8e:0f:b6:15:5a:75:f8:f9:77:8f:22:eb:92:ec:7d:3c:3e:
ef:26:85:ba:c1:07:f4:fb:30:10:9c:4c:b6:4b:4f:50:94:39:
5e:75:89:af
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Nov 10 08:54:06 2026 by rpki-client