Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/w2NQiDdLvgGPAaTW9Xq-n6LmPIw.roa
File: w2NQiDdLvgGPAaTW9Xq-n6LmPIw.roa (raw, json)
Hash identifier: d4KQEVAq2emipgGjtc59eskO1BRtmKj/zafQJd2sUeE=
Subject key identifier: C3:63:50:88:37:4B:BE:01:8F:01:A4:D6:F5:7A:BE:9F:A2:E6:3C:8C
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01A0613DEB424D8461A551086B429500CDE9
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/w2NQiDdLvgGPAaTW9Xq-n6LmPIw.roa
Signing time: Wed 02 Sep 2026 08:30:42 +0000
ROA not before: Wed 02 Sep 2026 08:30:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208068
IP address blocks: 2a0e:97c0:520::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 14:57:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:61:3d:eb:42:4d:84:61:a5:51:08:6b:42:95:00:cd:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Sep 2 08:30:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c3635088374bbe018f01a4d6f57abe9fa2e63c8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4c:13:6d:2f:81:c3:f0:ae:e1:6f:bf:9b:c1:
30:da:38:09:64:b5:89:42:c2:c1:27:9c:aa:66:ae:
b9:03:82:02:1d:0e:b8:99:e2:56:9f:69:18:7c:a0:
4a:8e:f7:85:67:d0:3d:06:8c:8c:ec:71:2d:12:ce:
76:1e:50:85:cc:fa:75:de:02:1c:96:32:2d:65:8b:
10:ff:f5:1d:9c:31:47:f1:13:23:f0:23:31:d9:a8:
e2:24:23:d7:0a:de:86:de:b2:c0:47:69:bd:86:57:
b1:55:6c:ef:5e:e4:33:04:53:8a:15:bd:ec:a3:be:
c3:20:0c:de:58:65:75:76:2a:8f:26:ea:76:63:67:
4b:ae:3c:ae:e1:3d:cf:f3:c5:74:0e:38:c6:48:71:
70:c9:24:26:7c:4d:80:19:d4:b3:a0:e8:af:a4:e7:
69:03:b7:50:2b:44:17:0a:63:6b:cf:57:99:1c:4d:
39:98:26:f0:20:ee:3c:50:d2:2b:49:07:0f:90:6a:
51:c1:87:30:13:ed:c0:8f:88:7f:33:5e:3c:68:d7:
d0:58:3d:d4:3b:a7:e3:ac:b9:d8:52:62:8b:62:45:
25:e3:53:3c:04:bf:0a:4d:4b:e6:66:ae:01:b2:2c:
52:83:b7:77:b6:e7:1f:42:33:00:cf:ba:24:8f:74:
a3:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:63:50:88:37:4B:BE:01:8F:01:A4:D6:F5:7A:BE:9F:A2:E6:3C:8C
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/w2NQiDdLvgGPAaTW9Xq-n6LmPIw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:520::/44
Signature Algorithm: sha256WithRSAEncryption
16:b2:5b:b2:af:40:02:9c:04:fc:b3:b1:49:d1:69:75:a4:2f:
db:6b:29:e3:e0:f2:a4:d0:89:35:72:82:8d:28:e9:e7:ce:eb:
3a:e0:3c:2c:d8:e6:1b:bb:13:9b:a2:a3:7b:a4:f5:ed:70:87:
89:06:a9:8f:00:4a:28:8e:0c:dc:0d:0b:4b:92:ca:6f:ee:ca:
d9:9d:26:ef:39:bc:15:6b:4f:b5:c9:58:00:7c:81:10:cb:e9:
f4:23:16:da:d9:57:d8:b2:23:c7:f7:5c:50:b7:00:fa:69:11:
30:05:f6:a2:f5:8a:31:9e:54:db:e4:9e:a0:61:97:d6:b2:6d:
3a:dc:54:69:65:05:84:62:e3:b2:6c:0a:39:f0:a1:56:c0:1c:
08:a1:6e:c7:aa:b4:ee:69:2b:32:6e:bc:95:56:35:0a:f1:ae:
19:c8:62:dc:a8:cd:db:a0:70:72:f5:2b:f4:c5:6e:b0:a4:9a:
21:6a:4b:ea:38:7f:14:b7:06:3d:b0:da:89:8e:9e:d0:09:06:
66:ee:53:35:4d:84:1b:6c:14:d3:e1:b0:32:85:79:9e:6a:07:
8d:40:2e:34:4d:63:be:86:b0:1f:4b:70:14:8f:26:76:34:d0:
82:6d:59:22:37:d0:2f:51:eb:fd:0c:2d:ac:d2:5c:4c:b6:90:
d3:e9:4e:ff
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAaBhPetCTYRhpVEIa0KVAM3pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjYwOTAyMDgzMDQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMzYzNTA4ODM3NGJiZTAxOGYwMWE0ZDZmNTdhYmU5ZmEyZTYzYzhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxkwTbS+Bw/Cu4W+/m8Ew2jgJZLWJ
QsLBJ5yqZq65A4ICHQ64meJWn2kYfKBKjveFZ9A9BoyM7HEtEs52HlCFzPp13gIc
ljItZYsQ//UdnDFH8RMj8CMx2ajiJCPXCt6G3rLAR2m9hlexVWzvXuQzBFOKFb3s
o77DIAzeWGV1diqPJup2Y2dLrjyu4T3P88V0DjjGSHFwySQmfE2AGdSzoOivpOdp
A7dQK0QXCmNrz1eZHE05mCbwIO48UNIrSQcPkGpRwYcwE+3Aj4h/M148aNfQWD3U
O6fjrLnYUmKLYkUl41M8BL8KTUvmZq4BsixSg7d3tucfQjMAz7okj3SjswIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFMNjUIg3S74BjwGk1vV6vp+i5jyMMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvdzJOUWlEZEx2Z0dQQWFUVzlYcS1uNkxtUEl3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6XwAUg
MA0GCSqGSIb3DQEBCwUAA4IBAQAWsluyr0ACnAT8s7FJ0Wl1pC/baynj4PKk0Ik1
coKNKOnnzus64Dws2OYbuxOboqN7pPXtcIeJBqmPAEoojgzcDQtLkspv7srZnSbv
ObwVa0+1yVgAfIEQy+n0Ixba2VfYsiPH91xQtwD6aREwBfai9YoxnlTb5J6gYZfW
sm063FRpZQWEYuOybAo58KFWwBwIoW7HqrTuaSsybryVVjUK8a4ZyGLcqM3boHBy
9Sv0xW6wpJohakvqOH8UtwY9sNqJjp7QCQZm7lM1TYQbbBTT4bAyhXmeageNQC40
TWO+hrAfS3AUjyZ2NNCCbVkiN9AvUev9DC2s0lxMtpDT6U7/
-----END CERTIFICATE-----
Generated at Wed Sep 2 19:48:18 2026 by rpki-client