Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/w9WqqyblgvwNY99WiMRVwsB8CtQ.roa
File: w9WqqyblgvwNY99WiMRVwsB8CtQ.roa (raw, json)
Hash identifier: BfuqbqumJVbTfqrKjk7K+Qv2yriPNRqqdlB8tO6JovQ=
Subject key identifier: C3:D5:AA:AB:26:E5:82:FC:0D:63:DF:56:88:C4:55:C2:C0:7C:0A:D4
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01A09A075D38F888E72402B89BE676B8856F
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/w9WqqyblgvwNY99WiMRVwsB8CtQ.roa
Signing time: Sun 13 Sep 2026 09:09:28 +0000
ROA not before: Sun 13 Sep 2026 09:09:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214344
IP address blocks: 2a10:ccc6:6661::/48 maxlen: 48
2a10:ccc6:6662::/48 maxlen: 48
2a10:ccc6:6663::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Sep 2026 12:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9a:07:5d:38:f8:88:e7:24:02:b8:9b:e6:76:b8:85:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Sep 13 09:09:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c3d5aaab26e582fc0d63df5688c455c2c07c0ad4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9b:c3:e8:a9:d0:e6:e2:dc:3e:03:58:06:2f:
95:7b:5d:de:b0:e7:fd:0c:ae:65:16:51:36:7d:b3:
d0:47:54:b5:f9:ef:d2:e9:17:a4:5a:0a:f8:80:ff:
f3:8c:a0:e9:7c:ee:25:6d:7a:01:60:c9:6b:cf:62:
ca:0b:56:9f:a2:b5:76:a0:3f:9c:36:b8:74:d0:e2:
f1:23:c7:ae:e0:f1:fd:6b:88:16:d2:ff:d0:5e:d7:
ff:90:79:2f:4c:9d:8b:89:c8:83:70:50:77:fd:bc:
a6:10:15:36:ce:b2:58:38:16:f2:c0:ec:97:14:ec:
e4:c8:98:f4:ab:60:af:99:97:81:3c:30:e5:1b:1b:
9c:84:06:5e:b2:96:5b:5e:e5:e2:1f:82:d2:7c:c9:
8a:57:82:f2:f2:56:b3:ed:30:0a:8d:df:9d:42:7f:
08:7b:42:51:f9:2e:36:f8:8f:2e:b6:cb:8a:71:90:
5d:b7:b8:74:59:9e:e5:48:c9:ae:7f:d0:ef:70:ab:
ed:0e:8d:80:29:a2:35:80:17:e2:c4:14:65:83:46:
c0:21:b8:81:53:5d:6e:05:ff:37:6e:63:c4:a4:8b:
4e:9c:ea:5c:64:8e:b3:06:16:e9:44:fc:38:f6:76:
20:d7:50:9f:74:74:9e:6c:41:57:65:2c:74:ac:14:
da:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:D5:AA:AB:26:E5:82:FC:0D:63:DF:56:88:C4:55:C2:C0:7C:0A:D4
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/w9WqqyblgvwNY99WiMRVwsB8CtQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:ccc6:6661::-2a10:ccc6:6663:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
20:65:d4:fd:49:83:93:f5:7c:ff:4d:2d:90:4a:92:ed:46:bb:
e5:eb:5a:a8:aa:26:f2:85:32:d7:aa:52:44:ac:ed:74:df:38:
63:60:03:76:8b:1b:52:a6:79:e2:43:48:b7:f5:fa:a8:ff:d4:
bd:e8:62:ef:f3:85:c1:72:fb:e8:99:c2:3a:54:89:29:c6:15:
db:5e:07:47:ba:f7:b2:62:29:49:20:b2:db:26:ea:45:d8:b7:
ff:ba:29:a7:73:6c:8a:cd:15:a3:dd:53:7e:93:2f:f0:2f:6f:
df:4f:40:3f:30:68:54:17:22:1a:e8:5a:9c:67:93:70:b6:04:
14:12:bf:09:3c:d5:25:5e:a8:9e:45:ce:f2:d6:c0:a0:80:5f:
7e:fd:be:49:8d:4e:d0:df:61:f3:1d:12:6e:e0:6d:cc:8a:36:
41:8e:64:65:59:65:8c:69:15:d0:97:97:e9:9e:d2:80:b6:26:
09:36:3a:08:a2:13:ee:47:a0:84:b5:61:f0:4f:8a:0b:33:bd:
02:63:e3:8c:83:ef:63:31:d3:f7:01:2e:78:13:65:8f:13:a3:
0a:d6:83:0e:93:1d:f6:71:9a:1c:97:3a:c1:9f:f8:54:d7:c0:
94:c6:64:c7:9e:c5:31:4d:dc:54:e4:13:c8:97:99:cc:14:25:
66:96:46:14
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Sep 13 20:31:30 2026 by rpki-client