Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/YEaFeAYy33yjQlF6cDfbJsyQSUs.roa
File: YEaFeAYy33yjQlF6cDfbJsyQSUs.roa (raw, json)
Hash identifier: 8BLpKF+b6MUAXNnhL857qdiNgP62NCrdXAMmzOJAvx0=
Subject key identifier: 60:46:85:78:06:32:DF:7C:A3:42:51:7A:70:37:DB:26:CC:90:49:4B
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 01A0AF5B3FD82085D5EC5B5A0CA2A318B720
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/YEaFeAYy33yjQlF6cDfbJsyQSUs.roa
Signing time: Thu 17 Sep 2026 12:33:07 +0000
ROA not before: Thu 17 Sep 2026 12:33:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208743
IP address blocks: 2a06:9801:1564::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:af:5b:3f:d8:20:85:d5:ec:5b:5a:0c:a2:a3:18:b7:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Sep 17 12:33:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=604685780632df7ca342517a7037db26cc90494b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4f:33:8e:83:02:60:92:b9:12:fc:07:6c:8c:
65:16:ee:4d:32:c5:cb:0e:d0:c7:6b:a5:2d:10:f4:
c8:8c:3d:4f:6d:3a:7b:20:48:67:7c:73:46:26:69:
ef:40:c2:4c:8b:7d:09:81:86:02:f3:4e:1b:06:70:
25:96:b4:b8:4a:7c:60:c5:4d:17:90:80:18:4b:3d:
33:c4:e2:96:01:98:ef:2a:b4:0b:25:7e:fd:56:9d:
25:f9:9d:ae:c3:91:a2:71:2d:11:48:e3:23:55:5a:
bc:80:41:01:54:1f:de:d3:3b:32:21:bd:f0:78:8d:
57:04:ce:9d:ab:be:84:2a:a0:93:dd:9c:ae:5b:70:
10:0b:09:72:3b:97:28:e5:4d:9c:67:68:47:18:d1:
8d:c0:8c:d9:d0:d2:ff:d6:73:b7:05:9d:17:c5:46:
02:c8:4a:d6:cb:8b:4a:f4:a2:6d:d5:c6:e1:a6:0c:
07:b6:89:52:e0:6d:9d:72:80:c0:92:da:f5:02:91:
cd:38:6b:f9:2b:b4:00:54:ea:a1:fe:a6:24:f9:9b:
d3:45:67:ab:e8:fa:54:35:56:ca:17:41:42:9e:44:
c0:56:2c:86:8f:f7:83:83:4f:a1:64:24:08:b6:59:
84:95:3f:89:e6:3f:9c:2a:6c:7a:d5:7a:e5:d8:fe:
74:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:46:85:78:06:32:DF:7C:A3:42:51:7A:70:37:DB:26:CC:90:49:4B
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/YEaFeAYy33yjQlF6cDfbJsyQSUs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:1564::/48
Signature Algorithm: sha256WithRSAEncryption
13:21:8a:8e:6d:c0:f8:34:e5:fb:be:e8:b1:2d:2c:1f:b4:8b:
60:ad:82:bd:95:5b:4b:77:aa:d6:b8:07:43:54:86:00:09:fc:
9d:05:01:fa:97:d8:0a:c8:8e:b1:75:62:be:01:2b:99:c2:56:
d5:80:08:48:95:08:91:9b:f7:24:73:44:6f:b9:c3:90:02:dd:
66:24:64:c4:94:06:5d:62:19:c4:d6:7b:41:3d:98:4e:2b:9e:
5e:84:9a:c8:0b:5f:51:be:5c:ea:b4:77:8e:b2:6d:81:68:48:
18:38:67:0f:5c:54:60:08:84:66:68:cd:3e:92:32:37:f8:10:
5b:5f:4b:e6:92:06:ce:0f:62:b4:14:2f:e6:36:5e:92:61:13:
7a:22:54:70:7d:9e:d9:66:60:ec:b2:80:ad:0a:bd:41:5c:23:
db:c1:79:e5:3b:06:b1:23:ef:b5:d5:3d:d2:1f:fe:72:56:d3:
40:e4:96:3c:b5:6d:af:e7:1a:1d:a7:0e:ec:59:a2:cf:08:f3:
01:93:64:cd:9d:e1:ce:93:b1:4c:c2:7d:81:fb:55:fb:3a:0e:
e7:b1:6d:8b:e1:8c:50:62:8f:3e:6c:5b:d4:1c:6a:92:fa:09:
d8:71:34:46:39:70:62:eb:ff:93:de:53:a7:6f:bb:67:c6:38:
38:13:a6:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 21:07:52 2026 by rpki-client