Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/RYsY-o2i4jJuo5LcGcM8XUCbb9c.roa
File: RYsY-o2i4jJuo5LcGcM8XUCbb9c.roa (raw, json)
Hash identifier: Dw7b6pkuG5rO21BY1jXBfmGu/ri7kYZ0iuN6r4DYx0Q=
Subject key identifier: 45:8B:18:FA:8D:A2:E2:32:6E:A3:92:DC:19:C3:3C:5D:40:9B:6F:D7
Certificate issuer: /CN=397245d0492eede59b045b5be1fd4eb9161bc417
Certificate serial: 019C7DF49530C306A9125F345627AEEA6908
Authority key identifier: 39:72:45:D0:49:2E:ED:E5:9B:04:5B:5B:E1:FD:4E:B9:16:1B:C4:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OXJF0Eku7eWbBFtb4f1OuRYbxBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/RYsY-o2i4jJuo5LcGcM8XUCbb9c.roa
Signing time: Sat 21 Feb 2026 02:08:26 +0000
ROA not before: Sat 21 Feb 2026 02:08:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 1054
IP address blocks: 2a0e:df80:a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/OXJF0Eku7eWbBFtb4f1OuRYbxBc.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/OXJF0Eku7eWbBFtb4f1OuRYbxBc.mft
rsync://rpki.ripe.net/repository/DEFAULT/OXJF0Eku7eWbBFtb4f1OuRYbxBc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:7d:f4:95:30:c3:06:a9:12:5f:34:56:27:ae:ea:69:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=397245d0492eede59b045b5be1fd4eb9161bc417
Validity
Not Before: Feb 21 02:08:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=458b18fa8da2e2326ea392dc19c33c5d409b6fd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:cb:6b:e0:fe:55:fc:40:b3:47:f9:e5:8b:6e:
19:7b:c3:b4:a0:64:16:65:9f:65:70:17:61:42:71:
47:e2:eb:2c:c7:4a:4a:10:43:5e:35:37:ab:3e:dc:
f8:c8:d6:e7:2f:5b:0a:6b:24:8c:0c:43:18:c8:b8:
17:74:2a:f1:a3:4c:9c:96:c6:10:05:8c:d3:ea:90:
8d:1e:13:f9:a6:fa:c7:98:44:38:18:c7:3e:ba:02:
cd:d9:f9:44:10:6d:6f:61:2b:4f:d4:a3:38:d7:a4:
ca:f5:fa:cb:11:72:85:6e:4d:9f:3a:c2:19:33:5a:
76:65:45:da:46:5c:6d:81:f9:9d:e1:17:b8:eb:34:
a8:e6:fb:f6:68:13:ef:29:6a:a8:75:24:06:31:a9:
27:75:f8:8d:83:70:12:49:51:3f:26:10:06:47:46:
ad:a5:44:d4:56:b5:0e:24:0f:f9:e7:21:d8:17:ba:
b5:80:c5:e1:a9:ca:47:a5:a9:45:cc:9a:c9:13:16:
c0:6f:ee:8d:07:4b:1a:28:28:4e:e9:33:5d:52:09:
4c:28:6b:d1:3c:48:72:71:04:03:c0:20:e5:f4:c3:
77:23:9b:1f:35:6b:19:8e:c8:b1:bb:1d:ea:3b:50:
8b:99:ec:8d:44:df:d4:ce:dc:4f:ab:be:8a:2d:e6:
08:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:8B:18:FA:8D:A2:E2:32:6E:A3:92:DC:19:C3:3C:5D:40:9B:6F:D7
X509v3 Authority Key Identifier:
keyid:39:72:45:D0:49:2E:ED:E5:9B:04:5B:5B:E1:FD:4E:B9:16:1B:C4:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXJF0Eku7eWbBFtb4f1OuRYbxBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/RYsY-o2i4jJuo5LcGcM8XUCbb9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/OXJF0Eku7eWbBFtb4f1OuRYbxBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:df80:a::/48
Signature Algorithm: sha256WithRSAEncryption
08:c7:8a:27:79:25:4a:7c:7c:c7:2c:75:ef:76:19:94:6e:1d:
8e:b3:b4:7b:b6:24:f0:e1:95:9c:8f:d6:77:14:19:3e:b1:c3:
33:20:c8:56:7e:51:53:58:cf:59:64:0b:4a:0b:72:8f:d2:21:
1f:1f:2e:00:01:0c:a2:24:3f:8b:3b:b0:61:ab:a2:b3:0e:17:
01:fa:00:91:3e:93:13:f8:ef:0c:72:4d:24:61:ce:ea:55:3a:
db:a6:82:2c:db:74:14:2f:56:41:07:51:27:08:dc:46:6b:bb:
f3:34:1a:31:11:50:10:98:35:c4:af:04:22:3c:34:30:f8:0e:
07:ac:ce:21:c4:91:b5:b0:3c:9b:d3:27:7a:f3:ee:3f:43:d8:
69:02:15:0b:b6:1b:39:9b:7f:44:e4:f6:c7:b1:ab:ef:a2:ce:
c2:44:78:54:94:4f:6f:b1:e7:09:85:0c:dc:f4:f5:46:bc:5a:
47:f8:81:84:9c:dd:4b:d0:3d:39:af:f2:61:b9:83:e3:b2:3b:
ae:5f:54:57:b7:7e:02:21:4f:50:a8:95:24:b9:91:77:26:ae:
d1:db:05:e9:f9:15:18:b9:60:98:1f:0d:34:a9:13:6a:ec:aa:
6c:f3:57:69:c3:50:e2:a8:4f:28:7c:1a:7d:4a:45:18:52:a8:
7a:4f:8f:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:17:28 2026 by rpki-client