Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/2tyK3XxM5bFNdyhWTdsQ-KHZKgY.roa
File: 2tyK3XxM5bFNdyhWTdsQ-KHZKgY.roa (raw, json)
Hash identifier: 7g2yMNDEh/3UCmJMu0HEy/ij+vuN812wmv5+67aeiXQ=
Subject key identifier: DA:DC:8A:DD:7C:4C:E5:B1:4D:77:28:56:4D:DB:10:F8:A1:D9:2A:06
Certificate issuer: /CN=c65a1da1cb1c920ae2f9b748270fded8737a9184
Certificate serial: 019C532CD56A8A135528F7497DA07D2C0010
Authority key identifier: C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/2tyK3XxM5bFNdyhWTdsQ-KHZKgY.roa
Signing time: Thu 12 Feb 2026 18:46:13 +0000
ROA not before: Thu 12 Feb 2026 18:46:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 64494
IP address blocks: 2a0f:4042::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:53:2c:d5:6a:8a:13:55:28:f7:49:7d:a0:7d:2c:00:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c65a1da1cb1c920ae2f9b748270fded8737a9184
Validity
Not Before: Feb 12 18:46:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dadc8add7c4ce5b14d7728564ddb10f8a1d92a06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4d:d5:83:ff:f8:f7:c2:a1:ab:c7:3d:75:f9:
1d:9d:0a:db:f7:1b:a5:37:14:b6:b9:6f:4f:f3:0e:
95:7e:75:0b:b6:cc:2a:26:7d:2a:ab:72:88:4a:8d:
97:30:41:92:f4:76:3c:4a:1e:97:8d:3a:09:3e:ad:
57:c8:d3:ca:d0:f5:4b:1d:c5:00:6a:af:3e:9e:fe:
a9:16:e8:b8:32:72:19:f4:e0:a0:08:a1:1f:5a:15:
dd:cf:5f:a7:bb:f5:4c:0e:74:3b:6e:4f:4f:a4:d1:
8e:f4:07:2f:1c:58:9d:dd:54:36:ba:f0:03:fa:7d:
12:71:3d:69:0c:ac:6e:11:19:82:2c:b2:ee:37:2e:
c9:ef:d8:2c:48:37:c1:d1:6d:96:12:ef:c3:4a:f0:
93:1a:a1:ca:50:b9:23:8f:af:fc:12:6e:11:c7:2b:
40:cd:47:02:ec:9a:a7:29:6c:74:8f:74:b0:b9:c9:
d3:85:86:c3:e1:4e:40:59:ec:fd:11:7d:10:73:d2:
4e:f0:49:77:20:21:ec:34:4c:71:bb:aa:7e:a3:7e:
e0:f9:9c:97:86:88:44:66:73:51:3d:2a:be:59:a4:
76:e1:69:c4:36:74:14:f1:37:d1:f5:5a:f5:84:2a:
d1:9b:f1:d5:a0:e8:eb:b0:18:c9:d8:ed:3c:29:cf:
e6:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:DC:8A:DD:7C:4C:E5:B1:4D:77:28:56:4D:DB:10:F8:A1:D9:2A:06
X509v3 Authority Key Identifier:
keyid:C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/2tyK3XxM5bFNdyhWTdsQ-KHZKgY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:4042::/32
Signature Algorithm: sha256WithRSAEncryption
a4:3d:ce:61:f2:dd:74:fd:d7:f1:a4:23:59:41:2e:47:ff:40:
c4:44:11:c7:a5:e8:b2:84:03:64:aa:57:d4:8b:cd:c9:88:8b:
eb:c0:98:cc:13:87:af:ce:54:da:4c:f9:5e:de:31:3d:3d:88:
e3:e7:3c:a7:02:a4:39:53:0d:04:1b:cb:de:81:86:d1:b0:c0:
e4:be:06:e2:c4:9e:29:35:44:9b:ea:4f:e7:cd:4f:48:2d:39:
e0:c8:5e:4f:4b:2c:46:3f:28:0c:36:87:5d:ab:d1:63:95:2a:
2d:82:6c:7d:bc:6b:44:94:1a:68:0b:09:17:64:77:1b:97:a9:
a8:30:6c:f7:df:29:6c:23:ff:48:6e:ea:db:0b:7e:5c:8c:4a:
cc:92:28:8c:62:07:db:ca:6c:9f:09:8f:d6:f3:61:0f:56:af:
45:5d:5b:48:46:4a:5c:84:2d:38:92:3d:b9:8a:aa:e6:7e:ee:
31:cb:f9:88:a6:3a:11:6e:0b:a3:8b:ed:db:ff:59:b1:44:c5:
8c:19:d6:87:52:d6:2f:71:fe:c4:b4:bd:c3:06:fb:76:21:6c:
b9:ec:09:11:ef:1b:4e:ba:66:32:ca:12:75:cc:11:5a:89:5d:
50:d4:ec:ea:61:57:15:e5:07:b5:34:f8:f7:4d:69:17:cb:6d:
b0:c0:6c:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:56:56 2026 by rpki-client