Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/751881-6e00-4da8-badf-136dd2760d25/1/V51Xd-EnU0YE3waPlZqnDLP6u1M.roa
File: V51Xd-EnU0YE3waPlZqnDLP6u1M.roa (raw, json)
Hash identifier: LAp4Bm3heyzVm498syilDbsxbhhgwhye7TCJj3AhSpw=
Subject key identifier: 57:9D:57:77:E1:27:53:46:04:DF:06:8F:95:9A:A7:0C:B3:FA:BB:53
Certificate issuer: /CN=c99ee950f5b2d853d19603b27f35e361cba8689a
Certificate serial: 019E51AEE48EA09E05E090090FCC498567F8
Authority key identifier: C9:9E:E9:50:F5:B2:D8:53:D1:96:03:B2:7F:35:E3:61:CB:A8:68:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yZ7pUPWy2FPRlgOyfzXjYcuoaJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/751881-6e00-4da8-badf-136dd2760d25/1/V51Xd-EnU0YE3waPlZqnDLP6u1M.roa
Signing time: Fri 22 May 2026 21:54:36 +0000
ROA not before: Fri 22 May 2026 21:54:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 2a07:6ec0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/751881-6e00-4da8-badf-136dd2760d25/1/yZ7pUPWy2FPRlgOyfzXjYcuoaJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/751881-6e00-4da8-badf-136dd2760d25/1/yZ7pUPWy2FPRlgOyfzXjYcuoaJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/yZ7pUPWy2FPRlgOyfzXjYcuoaJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 May 2026 17:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:51:ae:e4:8e:a0:9e:05:e0:90:09:0f:cc:49:85:67:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c99ee950f5b2d853d19603b27f35e361cba8689a
Validity
Not Before: May 22 21:54:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=579d5777e127534604df068f959aa70cb3fabb53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:aa:f5:e0:7f:8f:9b:95:58:78:4e:a7:ca:b5:
ee:df:13:47:18:ac:1f:ea:3c:9c:c2:12:55:64:09:
d1:c9:7b:60:07:5c:1a:9f:c6:59:80:b5:f0:a6:76:
73:83:db:51:7d:aa:34:a6:ea:f7:47:5e:2f:40:38:
9e:69:e2:ac:24:f2:92:29:bf:b1:45:1b:7f:bd:17:
e9:4e:f4:25:7e:6c:0f:e7:9c:05:30:e7:9f:0a:70:
5b:54:b4:78:ed:67:a3:fe:cc:99:4c:5a:91:91:12:
1c:5a:53:ac:d1:16:0f:f7:14:15:f7:e6:f9:3b:68:
5b:bf:d7:18:4a:f5:86:83:86:73:b3:bf:e9:84:f8:
dd:13:bc:33:35:29:e3:c0:ee:22:cd:a6:f1:6e:bf:
38:dc:8d:42:d5:e6:39:a2:2d:bf:13:09:3b:de:7e:
19:d8:fa:9d:56:68:7e:39:d6:3c:a6:be:d8:93:cb:
d7:98:2b:94:6f:6b:74:3c:99:04:c0:3b:f1:17:e9:
ea:bf:2e:b7:fe:57:b2:3e:59:b4:8f:f6:00:a8:01:
45:f6:39:c9:a4:a8:22:e8:e5:20:2a:82:3b:aa:6f:
b7:c8:39:d6:e5:e9:ed:2d:1d:f5:7d:d2:f6:11:e5:
2f:f6:19:86:d9:28:df:4b:54:34:70:cc:c6:f0:12:
97:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:9D:57:77:E1:27:53:46:04:DF:06:8F:95:9A:A7:0C:B3:FA:BB:53
X509v3 Authority Key Identifier:
keyid:C9:9E:E9:50:F5:B2:D8:53:D1:96:03:B2:7F:35:E3:61:CB:A8:68:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yZ7pUPWy2FPRlgOyfzXjYcuoaJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/751881-6e00-4da8-badf-136dd2760d25/1/V51Xd-EnU0YE3waPlZqnDLP6u1M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/751881-6e00-4da8-badf-136dd2760d25/1/yZ7pUPWy2FPRlgOyfzXjYcuoaJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:6ec0::/29
Signature Algorithm: sha256WithRSAEncryption
1b:db:a5:7d:7d:2f:a1:68:63:b6:a6:aa:16:2a:2a:b9:87:eb:
29:a6:1c:d0:29:33:aa:be:60:b1:17:c1:1d:6b:27:8f:6d:b2:
63:bf:7c:a7:41:5f:a9:5d:68:35:4a:32:72:72:a7:a1:ff:15:
a1:fc:27:ad:aa:2b:12:3e:5d:54:fc:46:97:32:7a:62:c2:a8:
23:20:f0:6c:cb:1a:b8:0a:b6:2f:f4:71:c8:82:ec:f8:76:85:
9a:f5:76:39:58:f5:61:47:92:84:96:bd:d9:79:67:b5:35:79:
0a:a8:a4:70:ae:13:4c:28:54:38:ab:36:ab:cf:ed:5f:e6:e0:
7a:64:3d:d8:76:8b:9f:5e:6d:77:ea:20:06:31:7c:24:0f:99:
94:b1:54:fd:4b:70:ef:fb:e8:9b:32:22:5f:c6:bf:77:2d:a7:
44:fd:61:de:7b:a3:59:dd:26:3d:62:03:74:e5:ee:65:a4:db:
04:23:f3:a2:01:27:06:95:3b:17:ee:17:cd:4c:c1:51:4e:47:
c1:c5:93:ca:35:b5:d9:60:72:69:da:bb:42:e7:e5:fb:c5:2f:
2c:e0:da:4c:57:8a:d1:54:38:55:48:76:1f:3d:4d:6b:2e:e1:
80:6f:ad:cf:78:99:2c:dc:20:27:61:ce:d6:fa:ed:7d:8f:73:
99:2f:56:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 03:04:30 2026 by rpki-client