Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/qZQ4AZYsxF6nR_3l8wSrubDT0FQ.roa
File: qZQ4AZYsxF6nR_3l8wSrubDT0FQ.roa (raw, json)
Hash identifier: iG07LxWdVeTPTXXdfu0niltW9XCVcsajADipn/jxG54=
Subject key identifier: A9:94:38:01:96:2C:C4:5E:A7:47:FD:E5:F3:04:AB:B9:B0:D3:D0:54
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019E04255F6D4975AAD6F8A88A5F4B8B1CDC
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/qZQ4AZYsxF6nR_3l8wSrubDT0FQ.roa
Signing time: Thu 07 May 2026 20:33:38 +0000
ROA not before: Thu 07 May 2026 20:33:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199297
IP address blocks: 2a0e:97c0:170::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:04:25:5f:6d:49:75:aa:d6:f8:a8:8a:5f:4b:8b:1c:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: May 7 20:33:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a9943801962cc45ea747fde5f304abb9b0d3d054
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d2:64:42:9e:78:07:a8:b6:9d:e2:01:3f:c9:
a3:11:ca:21:25:40:e5:00:b6:05:26:9c:87:62:9b:
6d:1b:55:a5:55:02:53:aa:32:4f:fa:6e:a6:06:32:
78:28:7e:c8:dc:c7:6d:2c:0b:c3:54:e2:9a:b4:7d:
09:c3:3f:83:8e:70:40:bd:bd:bb:6d:cd:1e:e8:dd:
6b:1c:79:f8:e2:3c:fb:13:fc:ee:3d:f0:91:f4:84:
ca:6d:a9:99:90:b8:55:27:ea:13:59:28:8a:1f:7e:
51:67:5f:39:cc:51:c7:94:e5:94:59:92:86:c6:ec:
09:79:46:ce:07:fb:20:96:21:0e:e4:79:11:62:c3:
2b:79:5f:a2:ff:49:72:de:13:70:1a:85:c4:cc:61:
d6:37:95:b2:93:a5:af:13:dc:76:34:c4:5c:65:51:
d1:37:00:ed:58:79:3c:3d:02:e1:e5:c6:d3:46:54:
82:01:b6:52:c2:89:98:66:0f:7b:1b:f4:0d:16:15:
65:d9:01:7e:c0:ae:51:cf:dc:36:c6:c3:31:28:c8:
cf:eb:f8:08:6d:ca:23:f9:ba:ea:58:98:ed:8b:a3:
95:4c:7e:2f:1e:e3:31:9d:96:98:2a:5e:db:18:79:
41:d9:16:51:ac:3f:60:17:54:7d:9f:85:b4:2e:b1:
0d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:94:38:01:96:2C:C4:5E:A7:47:FD:E5:F3:04:AB:B9:B0:D3:D0:54
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/qZQ4AZYsxF6nR_3l8wSrubDT0FQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:170::/44
Signature Algorithm: sha256WithRSAEncryption
4c:a5:94:ab:ef:b3:ac:ba:b5:09:37:f8:f1:30:07:26:9f:66:
87:3a:ea:4f:e9:cf:93:1b:61:f3:00:24:10:58:f6:23:80:3d:
25:a2:03:be:ff:d4:12:93:83:f6:72:fa:a1:53:ff:2f:d2:60:
3b:16:68:6c:c3:2c:62:d9:68:02:79:44:16:7f:5b:52:3b:3e:
b6:65:10:0c:34:f3:0c:58:b8:41:13:66:14:7d:c3:51:13:a9:
a5:cf:6d:c2:d2:f6:5e:ff:da:ca:15:eb:9d:b4:0e:13:99:29:
af:93:77:e4:b8:c1:d7:f8:d0:87:26:ac:13:72:6d:89:52:f7:
a8:49:bd:1e:23:f5:43:f9:37:30:3f:b1:c1:62:11:1c:6d:a3:
84:80:92:7b:d2:f0:7a:c8:2f:75:73:7a:4d:b0:dc:75:d0:67:
78:d3:1d:91:84:a2:4a:a0:16:4e:b8:e6:1e:03:75:17:6c:55:
26:b6:8e:9d:58:98:10:83:d6:f2:e1:5a:f1:58:cf:97:20:fe:
bb:51:5d:e3:fa:57:b9:1a:3b:6f:53:70:d3:a9:cf:84:de:f9:
36:1b:17:f4:c4:9e:3c:82:1b:b4:21:c1:7a:c0:35:9f:e3:08:
2c:24:47:4e:a8:1f:ca:ce:d4:69:bb:59:06:e0:47:3b:f2:9e:
41:6c:b5:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:42:58 2026 by rpki-client