Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/x0zC0ARwf1RAiDRIPgytcZttCns.roa
File: x0zC0ARwf1RAiDRIPgytcZttCns.roa (raw, json)
Hash identifier: g3sSjExSjo2b6L4fY3R4YugVuFdh/5L8dxeCX4jUdXo=
Subject key identifier: C7:4C:C2:D0:04:70:7F:54:40:88:34:48:3E:0C:AD:71:9B:6D:0A:7B
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019F3DB514FA7F27B47DC5124545456EB19A
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/x0zC0ARwf1RAiDRIPgytcZttCns.roa
Signing time: Tue 07 Jul 2026 17:51:45 +0000
ROA not before: Tue 07 Jul 2026 17:51:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213586
IP address blocks: 2a0e:97c0:9c0::/48 maxlen: 48
2a0e:97c0:9c1::/48 maxlen: 48
2a0e:97c0:9c2::/48 maxlen: 48
2a0e:97c0:9c3::/48 maxlen: 48
2a0e:97c0:9c4::/48 maxlen: 48
2a0e:97c0:9c5::/48 maxlen: 48
2a0e:97c0:9c6::/48 maxlen: 48
2a0e:97c0:9c7::/48 maxlen: 48
2a0e:97c0:9c8::/48 maxlen: 48
2a0e:97c0:9c9::/48 maxlen: 48
2a0e:97c0:9ca::/48 maxlen: 48
2a0e:97c0:9cb::/48 maxlen: 48
2a0e:97c0:9cc::/48 maxlen: 48
2a0e:97c0:9cd::/48 maxlen: 48
2a0e:97c0:9ce::/48 maxlen: 48
2a0e:97c0:9cf::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Jul 2026 23:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3d:b5:14:fa:7f:27:b4:7d:c5:12:45:45:45:6e:b1:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jul 7 17:51:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c74cc2d004707f54408834483e0cad719b6d0a7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:f1:ec:7c:ea:cf:69:10:96:f4:b9:a5:f2:20:
f4:6c:97:99:16:e4:e7:86:85:b4:21:35:d7:cd:85:
c8:f6:c4:94:d6:42:07:db:bf:5f:c3:cf:70:44:c4:
3f:65:bf:20:40:73:78:99:3a:bc:99:04:41:be:77:
fc:46:66:79:fd:80:ec:33:7a:16:a2:a6:35:0d:d2:
70:60:7d:ad:5d:ef:a6:73:5b:4e:85:38:56:f2:84:
4d:27:3f:59:50:2d:c4:ee:c1:b3:c5:a0:81:8b:8c:
8d:76:b6:2a:e7:7b:73:ae:b4:53:c7:2a:67:0b:3b:
80:42:b8:b8:45:e2:0c:12:eb:f7:57:b4:23:11:89:
55:50:f2:8f:8f:1f:6b:a6:9a:c7:ae:d8:89:11:56:
ec:a8:65:20:bd:7a:4b:c5:d2:3a:a2:51:b6:77:a6:
ae:f5:09:ae:51:b9:49:14:4f:f5:f9:8a:c8:14:0f:
9d:56:80:9d:f4:07:d9:b4:52:65:1a:54:de:d2:cf:
68:56:a9:35:1e:7f:bd:7f:12:03:29:6c:ba:a8:44:
5d:98:24:4c:8a:cf:00:84:4c:19:46:42:dd:42:a4:
80:eb:08:0f:f2:f7:54:c4:3c:91:7b:27:bb:12:87:
ac:2e:3a:8c:41:8e:55:1d:01:52:32:39:06:3d:2f:
20:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:4C:C2:D0:04:70:7F:54:40:88:34:48:3E:0C:AD:71:9B:6D:0A:7B
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/x0zC0ARwf1RAiDRIPgytcZttCns.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:9c0::/44
Signature Algorithm: sha256WithRSAEncryption
bc:0b:44:b6:31:a5:07:77:92:6e:f2:22:0d:60:f2:29:24:16:
3c:39:88:33:6a:c4:00:6e:4e:eb:4c:da:40:7e:3d:d6:61:24:
1f:aa:0e:ea:59:50:35:d6:f4:d9:9d:10:97:4b:86:dd:19:fb:
87:ba:24:fa:09:6a:e8:b2:c4:63:8b:0e:78:bd:67:54:c0:ac:
78:fa:08:c9:57:b9:a7:1d:a6:b5:8f:26:fe:f5:b8:b8:95:a2:
63:61:59:e4:4b:ee:16:21:86:60:6d:91:e6:fe:bc:3d:45:6a:
6c:18:a9:86:21:94:81:cc:ac:f3:c4:7a:ba:a4:d6:c8:4d:61:
96:74:b1:83:a7:c4:27:88:bc:16:3e:f3:b6:25:ba:08:a1:00:
05:ef:b2:fc:7f:01:29:f7:e4:c4:32:fc:3b:9e:0d:d9:0d:3d:
31:43:ba:20:89:78:ab:50:95:2c:1b:20:a1:7d:23:a9:1f:0c:
97:8c:b4:76:ab:82:d3:d1:9d:7e:53:34:5b:e2:d4:a9:e5:6d:
81:a1:42:34:fb:e1:f4:51:7d:67:66:76:50:3d:60:c0:20:73:
77:96:52:8e:e6:c0:79:3c:b0:83:cd:c6:53:02:ab:d1:aa:83:
69:7a:3e:46:b3:55:00:ac:c8:b3:e2:e1:87:bd:5f:2a:0f:a3:
35:d9:8b:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 08:04:06 2026 by rpki-client