Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/YPfuRkTgnJf0mW0FpNkvVPNS8RQ.roa
File: YPfuRkTgnJf0mW0FpNkvVPNS8RQ.roa (raw, json)
Hash identifier: paVGX+E91uT2+A9iHUixNqfj4PoBmhTXUi+0RH12uAA=
Subject key identifier: 60:F7:EE:46:44:E0:9C:97:F4:99:6D:05:A4:D9:2F:54:F3:52:F1:14
Certificate issuer: /CN=02a962c1fe8e2e12a35576fd62987a0cbba463d4
Certificate serial: 01A0A579F1BDA18B26A202F869167EC42BB4
Authority key identifier: 02:A9:62:C1:FE:8E:2E:12:A3:55:76:FD:62:98:7A:0C:BB:A4:63:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Aqliwf6OLhKjVXb9Yph6DLukY9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/YPfuRkTgnJf0mW0FpNkvVPNS8RQ.roa
Signing time: Tue 15 Sep 2026 14:30:27 +0000
ROA not before: Tue 15 Sep 2026 14:30:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219329
IP address blocks: 2a0e:bfc7:1402::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Aqliwf6OLhKjVXb9Yph6DLukY9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 09:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a5:79:f1:bd:a1:8b:26:a2:02:f8:69:16:7e:c4:2b:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02a962c1fe8e2e12a35576fd62987a0cbba463d4
Validity
Not Before: Sep 15 14:30:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=60f7ee4644e09c97f4996d05a4d92f54f352f114
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f7:22:50:8a:08:7a:61:75:d7:58:c6:a3:6e:
87:90:b0:18:09:bb:c4:84:2f:8c:b3:11:89:1e:a2:
d6:d6:31:cd:b0:28:ca:4c:27:02:c7:34:d5:5e:7a:
f0:82:2e:96:1f:1a:29:ae:a1:f6:f8:e3:e3:c6:96:
97:08:58:5f:cb:b4:2c:23:05:d8:ca:2a:5d:08:4c:
8b:f7:f6:87:3f:cf:63:09:67:8e:63:11:a0:55:9c:
c9:9f:38:0e:5d:b7:cb:7d:36:e1:bc:24:05:3e:83:
68:61:4c:f3:e9:08:64:3c:37:13:e1:29:11:85:48:
bf:40:55:cd:cb:0e:0d:ae:0f:f9:56:d3:d9:11:48:
28:17:e0:cf:a3:3f:a3:5d:29:d9:75:51:bf:bf:55:
3f:26:2a:ac:50:13:86:5c:d0:0d:95:84:8f:11:f1:
a9:3c:27:56:11:fc:ca:fb:aa:74:e2:56:5a:00:9f:
05:7f:bd:2b:fe:45:da:a7:40:b4:f9:65:fb:e2:6a:
c1:bb:a4:0a:9b:d2:8a:27:34:09:2e:aa:43:b8:e4:
ac:d7:55:7f:f0:f2:30:14:13:dd:be:76:6a:f1:9c:
81:77:39:ca:90:3b:ef:a7:97:89:cc:3a:14:82:b6:
86:e9:d3:90:f2:7a:96:db:bc:7b:86:08:68:5a:a4:
d9:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:F7:EE:46:44:E0:9C:97:F4:99:6D:05:A4:D9:2F:54:F3:52:F1:14
X509v3 Authority Key Identifier:
keyid:02:A9:62:C1:FE:8E:2E:12:A3:55:76:FD:62:98:7A:0C:BB:A4:63:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Aqliwf6OLhKjVXb9Yph6DLukY9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/YPfuRkTgnJf0mW0FpNkvVPNS8RQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:bfc7:1402::/48
Signature Algorithm: sha256WithRSAEncryption
83:4a:79:9d:89:91:95:1b:76:1e:bb:08:8b:6a:d4:76:e6:0c:
8c:68:cf:68:77:c5:10:2d:67:91:21:46:fc:dd:3e:ee:98:70:
4c:50:a4:a1:04:1a:b1:14:c9:7a:d6:86:bb:67:8f:ff:2a:d9:
b4:15:1c:57:a8:ea:ff:2c:b7:91:59:a5:9f:12:e5:dd:32:ba:
c0:42:88:82:c0:af:3d:d7:db:0c:36:c5:ee:f2:a7:c6:b7:a5:
97:8b:e9:d9:b8:36:6c:df:55:19:e5:34:81:09:88:a3:74:4f:
bc:3d:2a:a1:7c:da:b8:f1:79:d3:0e:5c:f6:22:43:0c:a6:ce:
2c:3a:16:61:b9:3f:de:29:fd:09:a7:8d:67:6a:71:ab:d1:94:
7a:e8:84:46:2c:9b:df:3b:3e:15:ae:2e:26:e1:f6:b9:2b:09:
e5:fa:ee:08:39:b7:88:f7:41:8d:80:fa:99:15:86:7c:2c:90:
59:b6:27:33:64:73:27:b6:13:fc:d4:24:3a:28:46:5f:5a:49:
88:dd:aa:ba:6e:6b:9c:fc:f6:e4:92:9d:5a:52:7d:b4:9b:ad:
71:70:02:ed:a7:f6:eb:22:30:37:5d:0e:9d:71:29:22:c1:ba:
38:a4:dd:ac:13:8c:68:bb:06:cf:d5:00:f9:ac:a9:37:a6:a5:
85:f2:05:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 17:08:06 2026 by rpki-client