Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/vJrzMhX1KIjWjFZ_qCr4qRIpCmI.roa
File: vJrzMhX1KIjWjFZ_qCr4qRIpCmI.roa (raw, json)
Hash identifier: BCSLu1hg0gfsZWoVy/qkTVRf2gLSEJup44ZJu4Y8tiQ=
Subject key identifier: BC:9A:F3:32:15:F5:28:88:D6:8C:56:7F:A8:2A:F8:A9:12:29:0A:62
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01A03EEFFA9545A415E203D5BCA8ABD0A72D
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/vJrzMhX1KIjWjFZ_qCr4qRIpCmI.roa
Signing time: Wed 26 Aug 2026 16:38:29 +0000
ROA not before: Wed 26 Aug 2026 16:38:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219207
IP address blocks: 2a06:de07:f800::/38 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3e:ef:fa:95:45:a4:15:e2:03:d5:bc:a8:ab:d0:a7:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Aug 26 16:38:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bc9af33215f52888d68c567fa82af8a912290a62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:44:35:d1:69:03:65:cb:91:19:91:23:fc:e8:
34:96:6c:e3:f6:47:70:7e:61:63:c7:99:3e:9f:0a:
7b:aa:80:14:13:21:db:ad:05:67:47:a8:66:75:6b:
22:e6:c1:3f:72:15:2b:21:af:42:8c:2b:be:23:8c:
72:c6:bf:90:c1:05:00:2f:72:1f:a4:af:4c:32:09:
a9:98:bc:49:9c:2a:2c:db:28:c1:05:ae:bb:c5:74:
23:1e:e1:45:45:bb:af:dd:af:49:11:cb:53:ec:ed:
af:e2:a2:91:d1:57:d3:40:86:90:81:47:48:81:2b:
34:b1:91:0e:40:59:51:8e:ae:b8:e2:a4:1f:d1:e3:
f1:46:0e:73:4d:0d:fe:37:e2:38:4c:17:a2:a4:e1:
cf:27:62:61:b9:d2:27:74:a6:a4:8a:0d:c3:7d:40:
44:b9:81:7d:40:ba:ca:52:6c:b2:33:19:73:c9:a1:
3b:4f:1d:4d:3d:fb:23:2c:08:33:55:9f:5f:21:0d:
9d:c6:e5:ed:36:23:63:f7:f6:49:a5:d8:76:5f:d6:
83:9a:91:5c:42:44:02:9c:10:db:b9:f8:af:67:e8:
28:e0:c4:bc:8f:1f:89:8b:af:88:4b:4b:f2:7e:41:
b1:b9:a5:f1:1d:5e:f9:e4:5b:57:10:88:ff:14:c9:
5f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:9A:F3:32:15:F5:28:88:D6:8C:56:7F:A8:2A:F8:A9:12:29:0A:62
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/vJrzMhX1KIjWjFZ_qCr4qRIpCmI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:de07:f800::/38
Signature Algorithm: sha256WithRSAEncryption
ab:10:cb:b2:30:4a:e3:21:ed:fd:e8:06:eb:70:86:76:a7:0d:
ee:62:da:8f:ac:c5:19:20:1e:ba:8e:85:0a:64:e4:e8:78:fa:
23:49:d6:bd:27:bd:bb:4c:0a:12:a7:16:81:a7:af:2b:2a:51:
b4:14:a4:03:e5:20:d0:0f:5b:81:8d:1a:d0:12:5b:4f:cc:9a:
69:3f:fb:37:89:c9:be:90:55:df:8e:bb:84:3c:9b:fd:b8:c1:
db:a9:2c:1f:59:cc:39:79:05:e7:5d:b5:5d:12:9a:2b:eb:e2:
a5:1f:2d:30:d9:25:b3:fd:6c:fc:17:17:53:cd:1e:5a:a6:47:
8d:35:01:24:8d:9e:d4:cd:a3:1f:76:af:4a:61:13:b6:00:63:
bf:93:7c:b9:18:fb:66:55:d7:79:37:f8:eb:41:3d:82:08:83:
a2:56:01:e1:13:19:0c:70:24:45:7e:75:21:93:12:75:84:fe:
5f:f9:df:17:b0:f1:ee:a9:15:6e:9b:ee:9b:11:5a:97:d1:84:
7a:02:3e:7f:76:87:97:72:5d:d2:80:3e:8c:d2:df:28:35:55:
7d:04:7a:ac:77:88:d8:dd:14:84:62:7d:56:0c:ae:5f:75:87:
e0:94:87:32:7b:52:51:1d:98:e7:ff:15:32:75:75:a8:a3:21:
95:e7:a8:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 03:59:49 2026 by rpki-client