Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/YMrDawlkPApNeFHwmzbSDf06YTU.roa
File: YMrDawlkPApNeFHwmzbSDf06YTU.roa (raw, json)
Hash identifier: /rrFvvsESXQsVBFf0C+xzcNOg6H9PT+bDyKHGp6uSgc=
Subject key identifier: 60:CA:C3:6B:09:64:3C:0A:4D:78:51:F0:9B:36:D2:0D:FD:3A:61:35
Certificate issuer: /CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Certificate serial: 01A130118DA35A61BBBF21F3B96AB6727E82
Authority key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/YMrDawlkPApNeFHwmzbSDf06YTU.roa
Signing time: Mon 12 Oct 2026 12:23:39 +0000
ROA not before: Mon 12 Oct 2026 12:23:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218464
IP address blocks: 2a0d:d940:201f::/48 maxlen: 48
2a0d:d940:a030::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 23:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:30:11:8d:a3:5a:61:bb:bf:21:f3:b9:6a:b6:72:7e:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Validity
Not Before: Oct 12 12:23:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=60cac36b09643c0a4d7851f09b36d20dfd3a6135
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:56:29:88:84:53:3e:0c:b1:98:08:a7:f6:95:
4e:3c:50:e5:c0:ca:85:f1:34:2a:10:5e:d7:01:ab:
51:04:19:59:0e:90:c2:b1:84:43:d4:d8:8d:43:c8:
26:0f:5e:81:2e:49:b4:80:25:4e:ad:bd:23:4d:b3:
cb:45:ca:2f:e4:a7:9a:67:bb:d3:45:98:03:ea:17:
c1:26:a9:65:7c:a3:48:b9:00:ba:fe:60:47:4f:e1:
45:31:a5:88:ef:a8:8d:7a:12:a8:d9:9b:c5:40:72:
1c:69:c9:9c:16:43:5e:f3:64:18:1c:b3:de:71:71:
70:0d:2e:e2:18:56:7e:6b:cc:2e:03:13:f2:bf:0e:
d1:9d:20:46:e8:da:85:1d:39:9a:0d:b4:8c:66:f8:
47:34:5f:e7:11:64:f5:ac:fe:63:44:8d:01:b4:80:
f4:b6:a1:d9:99:ce:f0:af:e5:1d:a1:13:31:20:a5:
9b:de:13:d8:d0:95:53:38:b1:2f:d0:07:72:35:ca:
92:a3:5d:73:5b:2a:48:76:45:c0:f4:b1:5e:fb:10:
09:36:52:71:7a:64:10:a5:17:de:8c:89:e2:e2:7c:
50:85:0f:88:b4:e9:40:a9:86:ba:41:38:78:eb:19:
4c:8d:28:5b:55:67:c3:69:42:0d:70:31:19:fc:b9:
e7:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:CA:C3:6B:09:64:3C:0A:4D:78:51:F0:9B:36:D2:0D:FD:3A:61:35
X509v3 Authority Key Identifier:
keyid:0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/YMrDawlkPApNeFHwmzbSDf06YTU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:d940:201f::/48
2a0d:d940:a030::/44
Signature Algorithm: sha256WithRSAEncryption
5e:18:f2:f1:cb:36:c0:f2:17:ea:df:96:63:29:90:b4:c4:a8:
2d:24:8f:f8:8d:f9:ba:a1:13:4c:c6:2f:e6:51:d7:2c:04:d9:
fb:3d:77:f0:f9:c0:35:4f:98:a7:5d:4c:72:26:2d:37:89:43:
d4:8b:84:21:68:dd:f3:0c:17:b2:2a:ea:ed:31:12:56:1f:e1:
48:45:6d:ca:77:3e:b6:32:1c:d6:57:ee:6e:85:d3:e1:dd:be:
f5:f5:23:b6:e7:16:03:51:a3:21:13:8c:b1:12:d7:32:01:1a:
5f:81:a9:d0:9a:a5:38:9f:56:73:9c:81:a7:cf:ba:63:87:63:
36:51:fd:42:20:b5:28:9e:e7:0f:ee:5e:bb:68:5a:01:41:16:
49:c4:d0:b8:4a:ad:39:ad:64:58:ac:e7:07:16:ec:81:30:ad:
2b:af:1c:f4:bc:04:9c:56:77:a1:9e:eb:38:fd:49:c3:11:be:
8c:d7:7b:d5:6b:7b:b8:b1:1a:d5:3e:8a:63:e9:ca:68:d9:7d:
bd:84:95:fe:b2:15:5f:19:3c:f9:90:2f:fb:6e:84:b4:e8:04:
7c:bf:4b:5b:ac:29:42:14:9e:ca:8f:b4:21:d6:ae:62:20:41:
59:e3:7f:53:f2:60:89:84:d0:a6:3e:94:48:58:aa:a5:63:3e:
b3:16:72:ff
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAaEwEY2jWmG7vyHzuWq2cn6CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiNGUzYjNiODQyNDIyNTg4NjMxNDJlZDNhMTk3OTJkOTdj
YmJjNzQwHhcNMjYxMDEyMTIyMzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MGNhYzM2YjA5NjQzYzBhNGQ3ODUxZjA5YjM2ZDIwZGZkM2E2MTM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAylYpiIRTPgyxmAin9pVOPFDlwMqF
8TQqEF7XAatRBBlZDpDCsYRD1NiNQ8gmD16BLkm0gCVOrb0jTbPLRcov5KeaZ7vT
RZgD6hfBJqllfKNIuQC6/mBHT+FFMaWI76iNehKo2ZvFQHIcacmcFkNe82QYHLPe
cXFwDS7iGFZ+a8wuAxPyvw7RnSBG6NqFHTmaDbSMZvhHNF/nEWT1rP5jRI0BtID0
tqHZmc7wr+UdoRMxIKWb3hPY0JVTOLEv0AdyNcqSo11zWypIdkXA9LFe+xAJNlJx
emQQpRfejIni4nxQhQ+ItOlAqYa6QTh46xlMjShbVWfDaUINcDEZ/LnnZQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFGDKw2sJZDwKTXhR8Js20g39OmE1MB8GA1UdIwQY
MBaAFAtOOzuEJCJYhjFC7ToZeS2Xy7x0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzA0N080UWtJbGlHTVVMdE9obDVMWmZMdkhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS83YmExYjEtNTU2Mi00YTMyLTlmNWQt
MTRkMjM4NTI3ODM1LzEvWU1yRGF3bGtQQXBOZUZId216YlNEZjA2WVRVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS83YmExYjEtNTU2Mi00YTMyLTlmNWQtMTRkMjM4NTI3ODM1
LzEvQzA0N080UWtJbGlHTVVMdE9obDVMWmZMdkhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKg3ZQCAf
AwcEKg3ZQKAwMA0GCSqGSIb3DQEBCwUAA4IBAQBeGPLxyzbA8hfq35ZjKZC0xKgt
JI/4jfm6oRNMxi/mUdcsBNn7PXfw+cA1T5inXUxyJi03iUPUi4QhaN3zDBeyKurt
MRJWH+FIRW3Kdz62MhzWV+5uhdPh3b719SO25xYDUaMhE4yxEtcyARpfganQmqU4
n1ZznIGnz7pjh2M2Uf1CILUonucP7l67aFoBQRZJxNC4Sq05rWRYrOcHFuyBMK0r
rxz0vAScVnehnus4/UnDEb6M13vVa3u4sRrVPopj6cpo2X29hJX+shVfGTz5kC/7
boS06AR8v0tbrClCFJ7Kj7Qh1q5iIEFZ439T8mCJhNCmPpRIWKqlYz6zFnL/
-----END CERTIFICATE-----
Generated at Wed Oct 14 07:54:12 2026 by rpki-client