Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/xX-1YngDKzt_p7u6ZPE1JoZ4-xU.roa
File: xX-1YngDKzt_p7u6ZPE1JoZ4-xU.roa (raw, json)
Hash identifier: 6Q9CfmCOVB50BnEl8eptCJ2i+oX3f8QWPsicZeK/GqU=
Subject key identifier: C5:7F:B5:62:78:03:2B:3B:7F:A7:BB:BA:64:F1:35:26:86:78:FB:15
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01A0A3EE7342F58BA9BBAB603C5B9ABE1748
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/xX-1YngDKzt_p7u6ZPE1JoZ4-xU.roa
Signing time: Tue 15 Sep 2026 07:18:28 +0000
ROA not before: Tue 15 Sep 2026 07:18:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63286
IP address blocks: 2a0e:97c0:3f0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 07:18:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a3:ee:73:42:f5:8b:a9:bb:ab:60:3c:5b:9a:be:17:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Sep 15 07:18:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c57fb56278032b3b7fa7bbba64f135268678fb15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3f:16:f6:cb:36:be:c4:cf:58:13:e1:ec:cf:
21:35:d4:f7:24:73:28:03:da:cd:21:a2:7d:04:a4:
c9:1b:ae:81:35:bc:b5:f6:b6:2e:ae:cb:b1:51:a2:
c9:98:3b:4e:58:40:6f:a8:c3:68:88:66:9e:0e:0d:
ee:72:b9:fd:e5:a8:83:ab:e1:2f:c1:61:45:d5:cf:
a0:d8:0a:fc:51:a3:6e:bd:c9:b5:39:10:22:c3:3d:
8b:84:40:53:b1:a3:a8:e7:4e:33:3c:51:4e:c6:ab:
11:fd:b0:f1:12:b3:7b:13:2e:92:be:79:cd:a6:90:
bc:cc:20:c5:34:7a:d2:0b:bb:61:af:eb:12:a2:3d:
96:59:d2:e7:6a:51:fb:ba:68:6c:e5:01:61:d6:78:
05:12:aa:17:83:ca:13:9d:e8:0c:24:92:19:a9:17:
8e:ff:b1:6b:66:6d:95:9c:aa:67:df:59:4d:08:63:
82:84:8b:45:84:d8:69:48:3a:cc:a2:f2:e5:71:dd:
c7:c5:f7:67:09:3a:ed:b2:c8:8c:14:28:98:b3:36:
f9:5c:c1:36:9c:e1:d2:47:fa:f1:25:f8:ba:39:f1:
50:6e:20:a0:39:c5:fe:bc:3f:37:34:1f:67:6c:f7:
38:53:62:86:7d:0f:2b:70:d6:c7:ea:89:5b:c2:b5:
a9:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:7F:B5:62:78:03:2B:3B:7F:A7:BB:BA:64:F1:35:26:86:78:FB:15
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/xX-1YngDKzt_p7u6ZPE1JoZ4-xU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:3f0::/44
Signature Algorithm: sha256WithRSAEncryption
60:11:0d:c7:3b:47:11:77:66:76:7f:8b:44:0c:72:e4:5f:73:
d7:75:aa:ba:60:84:51:2b:d7:fe:67:d6:2a:88:89:65:6a:83:
40:48:ba:c1:fa:5b:57:d8:8c:78:86:5a:92:ad:a1:31:96:0e:
8e:be:40:f1:83:29:67:cf:d0:9d:a0:e5:01:c9:cb:cb:6b:64:
3f:ce:63:3f:59:85:04:6d:34:cc:dc:7b:58:cd:c6:38:c1:8f:
ef:32:45:b7:6e:72:23:d1:39:6f:3a:ed:bf:63:bd:e3:8a:9e:
59:8c:97:3b:9b:38:83:79:9f:68:87:78:ce:e6:34:b0:b8:d6:
68:7f:06:53:03:06:ba:95:74:e8:48:c9:cf:7f:87:cd:66:d0:
3f:93:3b:af:d7:23:7f:c0:16:36:ce:b2:2c:1d:bb:cf:e7:27:
40:06:40:68:30:87:60:1d:e8:3f:b9:97:43:fd:ec:2f:8f:05:
f8:05:73:79:e8:86:cf:8a:90:05:91:e1:53:10:70:3b:74:61:
1a:bb:24:58:3d:44:d7:2b:39:0c:bb:72:5d:d5:3d:ad:a7:bd:
ab:8f:b1:f5:98:11:f5:ad:04:9f:4b:ba:c5:4b:c3:73:55:2b:
11:53:cc:e5:21:2b:ff:c1:9b:6b:75:29:78:df:95:d3:fd:ec:
76:7e:9e:fa
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAaCj7nNC9Yupu6tgPFuavhdIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjYwOTE1MDcxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNTdmYjU2Mjc4MDMyYjNiN2ZhN2JiYmE2NGYxMzUyNjg2NzhmYjE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoj8W9ss2vsTPWBPh7M8hNdT3JHMo
A9rNIaJ9BKTJG66BNby19rYursuxUaLJmDtOWEBvqMNoiGaeDg3ucrn95aiDq+Ev
wWFF1c+g2Ar8UaNuvcm1ORAiwz2LhEBTsaOo504zPFFOxqsR/bDxErN7Ey6SvnnN
ppC8zCDFNHrSC7thr+sSoj2WWdLnalH7umhs5QFh1ngFEqoXg8oTnegMJJIZqReO
/7FrZm2VnKpn31lNCGOChItFhNhpSDrMovLlcd3HxfdnCTrtssiMFCiYszb5XME2
nOHSR/rxJfi6OfFQbiCgOcX+vD83NB9nbPc4U2KGfQ8rcNbH6olbwrWp4wIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFMV/tWJ4Ays7f6e7umTxNSaGePsVMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEveFgtMVluZ0RLenRfcDd1NlpQRTFKb1o0LXhVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6XwAPw
MA0GCSqGSIb3DQEBCwUAA4IBAQBgEQ3HO0cRd2Z2f4tEDHLkX3PXdaq6YIRRK9f+
Z9YqiIllaoNASLrB+ltX2Ix4hlqSraExlg6OvkDxgylnz9CdoOUBycvLa2Q/zmM/
WYUEbTTM3HtYzcY4wY/vMkW3bnIj0TlvOu2/Y73jip5ZjJc7mziDeZ9oh3jO5jSw
uNZofwZTAwa6lXToSMnPf4fNZtA/kzuv1yN/wBY2zrIsHbvP5ydABkBoMIdgHeg/
uZdD/ewvjwX4BXN56IbPipAFkeFTEHA7dGEauyRYPUTXKzkMu3Jd1T2tp72rj7H1
mBH1rQSfS7rFS8NzVSsRU8zlISv/wZtrdSl435XT/ex2fp76
-----END CERTIFICATE-----
Generated at Tue Sep 15 15:12:18 2026 by rpki-client