Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/y_FCqy7P7gN_dqUlYOs7ITZzZm0.roa
File: y_FCqy7P7gN_dqUlYOs7ITZzZm0.roa (raw, json)
Hash identifier: iKfJV06hDO3bUGR/X++44B2zKvdsDsdX0WIZV7QDd4A=
Subject key identifier: CB:F1:42:AB:2E:CF:EE:03:7F:76:A5:25:60:EB:3B:21:36:73:66:6D
Certificate issuer: /CN=367160181739568e578e1b5f57976a60398062e6
Certificate serial: 019FA3F7340B660EF82B2A648CE254F5206B
Authority key identifier: 36:71:60:18:17:39:56:8E:57:8E:1B:5F:57:97:6A:60:39:80:62:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/y_FCqy7P7gN_dqUlYOs7ITZzZm0.roa
Signing time: Mon 27 Jul 2026 14:25:14 +0000
ROA not before: Mon 27 Jul 2026 14:25:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219443
IP address blocks: 2a09:3f00:3600::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:35:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:f7:34:0b:66:0e:f8:2b:2a:64:8c:e2:54:f5:20:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=367160181739568e578e1b5f57976a60398062e6
Validity
Not Before: Jul 27 14:25:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cbf142ab2ecfee037f76a52560eb3b213673666d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:08:00:42:cc:39:ca:d0:a5:21:18:ca:04:68:
1f:7e:40:21:5c:85:8f:f5:ea:3d:e9:d7:74:24:79:
30:89:d4:51:a9:2a:ee:cb:e5:bc:94:7b:18:56:19:
55:5b:6d:67:1f:37:df:9c:dc:78:c4:e2:cf:70:ef:
9b:5b:0b:21:af:cc:2b:5b:a7:98:79:5e:5c:5f:56:
e2:05:ef:b1:6d:c3:a5:4f:00:0c:e2:96:d7:fd:fe:
19:24:f3:ed:c0:fa:99:ab:a2:5d:0f:dd:df:7f:d0:
5c:ac:e4:ab:af:5b:32:a2:88:56:c2:33:27:1b:cf:
f8:15:0d:f2:6f:ca:72:b6:40:78:ce:cd:a9:f1:e9:
de:71:0f:ef:3e:ff:28:7f:d0:ef:a2:2f:c8:5a:e2:
f5:6a:07:a7:ab:40:c0:fa:20:d8:fd:cf:8e:57:9b:
7e:cc:8c:34:ea:29:dd:e7:c9:7a:65:c1:33:4e:17:
92:49:0c:32:eb:48:cf:91:67:96:f7:4d:a0:14:47:
86:2e:f6:d6:fc:ee:5c:d1:5d:b6:05:da:20:6f:6e:
b8:a3:01:bc:a3:f4:4f:a9:b3:66:0e:ae:7f:88:03:
f9:82:2d:2a:67:24:e5:11:e2:f1:8d:35:e0:94:a5:
c0:9e:11:74:62:b3:ff:5c:5a:c2:82:37:41:1a:8c:
e0:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:F1:42:AB:2E:CF:EE:03:7F:76:A5:25:60:EB:3B:21:36:73:66:6D
X509v3 Authority Key Identifier:
keyid:36:71:60:18:17:39:56:8E:57:8E:1B:5F:57:97:6A:60:39:80:62:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/y_FCqy7P7gN_dqUlYOs7ITZzZm0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:3f00:3600::/40
Signature Algorithm: sha256WithRSAEncryption
05:4b:b7:c4:44:11:77:4c:13:70:5d:35:bf:3a:8e:e8:09:b5:
b4:42:d4:5b:c8:b5:98:86:5a:e3:e5:56:85:45:ae:ba:94:03:
8c:aa:81:71:e8:b5:43:44:41:10:69:8d:64:db:ec:22:9b:dc:
99:ca:00:88:ec:da:30:1f:7f:b3:e7:07:13:31:9f:6e:44:97:
97:ba:b1:a6:8b:96:94:ec:5c:70:29:35:7f:f8:33:36:9c:43:
8d:72:22:71:64:3d:a3:b0:99:2b:20:de:5a:56:58:b1:0f:0f:
5f:d0:2a:8c:7b:17:b0:8b:85:05:74:13:93:25:2c:fa:27:51:
5a:ff:78:8c:6f:fb:5f:67:c7:03:ae:7f:22:d4:28:04:8b:be:
61:23:32:f0:4f:91:53:53:d3:1b:c8:d5:e1:4f:93:fa:5f:e2:
6b:76:7c:03:b1:a6:21:1d:7f:2f:ae:d7:16:cf:16:b5:a0:8d:
4d:79:6a:95:4c:1a:61:64:6c:19:f3:b9:6d:fc:5f:2a:20:88:
38:db:08:59:b3:d1:a7:29:86:3f:4c:24:1e:60:17:b0:aa:e1:
2f:2d:db:e8:3a:c7:c2:2d:d2:a0:99:f5:00:be:5f:7f:63:b5:
99:38:a3:ea:7d:04:c3:5b:e5:41:e4:f9:48:45:8f:24:c8:4c:
ce:7e:2d:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:57:04 2026 by rpki-client