Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/wGyvaDsfHgqFG_taVejhsKKDq7c.roa
File: wGyvaDsfHgqFG_taVejhsKKDq7c.roa (raw, json)
Hash identifier: K26hXLnmmGMzVcn5ziVRjoo5xMY5jxs77y46B64oJp4=
Subject key identifier: C0:6C:AF:68:3B:1F:1E:0A:85:1B:FB:5A:55:E8:E1:B0:A2:83:AB:B7
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019F292C2086AFDF1344D6C0D15E3E56979C
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/wGyvaDsfHgqFG_taVejhsKKDq7c.roa
Signing time: Fri 03 Jul 2026 18:09:45 +0000
ROA not before: Fri 03 Jul 2026 18:09:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219284
IP address blocks: 2a0e:97c0:d70::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 18:09:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:29:2c:20:86:af:df:13:44:d6:c0:d1:5e:3e:56:97:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jul 3 18:09:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c06caf683b1f1e0a851bfb5a55e8e1b0a283abb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:02:9a:98:8b:b8:0c:6d:14:5b:00:43:3a:94:
2b:d1:a1:14:03:9d:f6:72:44:b5:76:2d:5e:3e:2c:
db:2d:d2:17:d0:a8:89:da:bc:bf:e1:ca:b3:1d:20:
07:08:8e:fe:18:54:26:40:d4:39:b3:35:5b:1f:8f:
43:94:8a:92:09:0d:41:94:01:35:20:e8:23:c4:30:
a3:ec:9e:9a:b9:31:93:de:71:60:9e:62:ad:b1:16:
41:14:7c:f3:5c:b8:c5:5c:f1:80:d6:b9:46:b7:9d:
6a:70:a8:4e:48:04:9a:d9:3c:12:b4:bd:a9:df:51:
34:63:d1:17:0f:94:ac:a2:2a:69:24:6f:1a:95:9c:
18:eb:60:ca:8a:cc:84:84:2b:39:d6:25:e1:e9:5c:
02:6e:8d:20:aa:51:cd:7e:0b:0b:6d:8c:da:5b:d0:
a8:d8:4f:c0:2a:9b:e5:08:23:85:14:1c:07:0d:f0:
5a:0b:b7:a1:0a:82:b6:69:13:47:4c:88:dd:ca:18:
da:2b:42:97:e3:96:a7:96:e1:b8:a1:11:07:3b:55:
69:12:17:ef:f4:18:74:8e:fc:60:a6:4e:e9:20:e3:
73:3b:ca:59:c7:fe:a7:84:8d:db:ff:8a:19:cd:bd:
3f:18:3b:c0:ae:b1:56:32:57:42:23:4e:8c:6f:63:
9c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:6C:AF:68:3B:1F:1E:0A:85:1B:FB:5A:55:E8:E1:B0:A2:83:AB:B7
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/wGyvaDsfHgqFG_taVejhsKKDq7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:d70::/44
Signature Algorithm: sha256WithRSAEncryption
38:01:57:d6:13:e9:ff:5e:83:bc:da:3f:d3:9e:33:8e:89:b0:
1e:42:bd:57:40:57:9a:f3:be:5f:2a:72:5f:ff:ae:3a:22:81:
7f:27:89:ab:e3:62:f5:3d:e4:b3:2e:fa:1b:b8:0f:3a:29:7d:
d2:fd:a7:c5:1a:76:01:dd:d6:2c:f9:ed:ae:ac:21:67:33:4c:
ca:87:c6:c1:7d:dc:27:2f:c2:43:f6:95:0f:cf:fa:ad:d7:9a:
c7:38:e8:ae:e9:48:74:69:8b:c2:a5:98:86:91:ae:7c:ba:6b:
2d:ab:63:9c:8b:91:4c:b1:36:42:22:81:70:e1:fe:67:66:47:
3f:91:67:1b:a9:c3:b4:06:3d:01:0c:f8:cd:6b:70:dc:8a:06:
a4:fa:57:5b:f0:c8:58:b1:8b:a0:7b:6b:79:a6:b4:f7:5b:47:
5a:19:36:19:94:fc:9a:00:4a:99:ec:ce:a0:86:92:a1:f1:e0:
dd:37:ea:4d:53:4d:ee:cb:3c:b9:7c:2d:61:36:c2:73:a2:0f:
23:ae:48:1a:b3:c9:2f:a2:e1:b9:59:32:28:9f:df:d9:6b:64:
04:cc:48:90:8d:6a:0e:dd:54:e9:1b:43:72:6c:a8:7d:c9:dc:
5a:73:7e:30:72:3b:26:d6:31:00:82:6d:40:58:05:4b:f9:03:
00:cd:82:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 23:17:12 2026 by rpki-client