Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/2wyh_QhMgMqC_O4n1IvcnhHRGBk.roa
File: 2wyh_QhMgMqC_O4n1IvcnhHRGBk.roa (raw, json)
Hash identifier: ao/nwpiJU1qsY5iD/g3xyfwFgyAPEV6fkSVForiTS1k=
Subject key identifier: DB:0C:A1:FD:08:4C:80:CA:82:FC:EE:27:D4:8B:DC:9E:11:D1:18:19
Certificate issuer: /CN=ed30a131718560a34ab3493884e858ec431f6ad1
Certificate serial: 019C1D3A484D6C28624CA34045337B792E9F
Authority key identifier: ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/2wyh_QhMgMqC_O4n1IvcnhHRGBk.roa
Signing time: Mon 02 Feb 2026 07:21:24 +0000
ROA not before: Mon 02 Feb 2026 07:21:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47285
IP address blocks: 2a10:ab00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 10:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:1d:3a:48:4d:6c:28:62:4c:a3:40:45:33:7b:79:2e:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed30a131718560a34ab3493884e858ec431f6ad1
Validity
Not Before: Feb 2 07:21:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=db0ca1fd084c80ca82fcee27d48bdc9e11d11819
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:60:3e:1b:8e:b4:6c:51:05:17:03:7e:dc:5d:
1c:78:1c:f1:92:bd:93:e5:00:cc:d6:6c:b4:8b:b6:
fb:ee:a0:f7:3d:43:27:6b:6e:a4:e6:23:b7:3c:f1:
f6:aa:93:21:3d:d2:99:bc:75:21:44:9b:ae:7c:12:
45:cd:0f:e6:e4:4e:e8:8b:96:6d:c6:04:f1:a9:69:
97:9c:a6:49:bb:58:62:39:38:c2:78:49:7a:77:e5:
24:3a:1f:13:f3:84:37:d0:c3:84:8f:e0:dc:09:50:
e3:35:d2:84:43:92:d5:89:ba:73:c7:8e:00:d1:d8:
72:2a:7f:6d:5e:17:43:0b:e7:27:4b:53:71:e5:b3:
9b:27:bb:5d:a1:67:14:b8:a3:99:70:17:ab:86:16:
f7:ca:8f:2d:3e:64:ce:76:03:23:aa:95:be:30:53:
5f:e5:73:26:7a:1c:3b:52:e3:8a:2e:9a:2f:69:2c:
cc:33:07:56:56:ba:b3:ed:12:28:67:83:08:97:f0:
d6:42:9b:c9:3b:7a:5f:83:fc:6e:f3:fd:4f:6e:d3:
e2:00:6b:dc:18:5d:86:9b:1e:73:c3:98:e0:e6:6b:
91:52:7b:64:89:cf:1e:e7:c9:54:65:86:88:99:0b:
f2:20:92:c1:ac:e4:3e:a4:1f:6d:f6:ab:38:e0:f9:
2e:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:0C:A1:FD:08:4C:80:CA:82:FC:EE:27:D4:8B:DC:9E:11:D1:18:19
X509v3 Authority Key Identifier:
keyid:ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/2wyh_QhMgMqC_O4n1IvcnhHRGBk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:ab00::/29
Signature Algorithm: sha256WithRSAEncryption
14:ce:e7:39:29:29:a4:8d:30:b2:44:89:1d:be:9f:d9:af:db:
f2:a0:2c:65:ed:e6:ae:53:15:50:f2:26:ff:63:b2:bf:7f:c6:
9a:97:ad:9e:01:f8:3a:28:41:dc:7c:3b:c2:41:4a:f2:0b:9e:
c1:8e:22:37:12:84:42:cc:2a:68:e2:07:ed:5c:55:45:53:bf:
30:f9:04:5f:73:55:42:43:fd:b0:a1:3a:bc:b1:42:c6:cf:8d:
50:5b:97:67:93:88:53:e4:10:7a:36:e3:85:83:0c:89:fe:a6:
f2:97:fa:34:c6:d9:7e:81:2f:1d:a3:ac:fa:c3:17:3c:bb:7e:
40:56:cf:7f:dd:8c:8d:56:ce:87:78:41:81:93:b4:16:5e:5b:
43:ad:93:fb:18:49:13:37:d2:ca:cf:a8:70:70:51:b3:e8:98:
e7:e1:82:c2:65:00:9a:f3:d6:f2:97:2f:81:51:cb:95:b8:8b:
a0:e0:40:fe:ce:4d:d8:89:ae:90:a3:83:14:72:55:39:95:4b:
47:0d:fc:6c:07:46:a4:81:ec:c9:34:21:a8:50:f5:04:67:45:
23:6d:81:4a:82:f6:52:20:64:4b:d3:c8:69:4f:9c:b1:e6:fa:
73:f5:7c:a1:c5:e0:56:3d:9e:f0:9f:50:24:01:49:bb:a1:6d:
8d:9a:30:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:00:04 2026 by rpki-client