Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/y7KOIjLt-WYG3x1Gi2htFENC7RY.roa
File: y7KOIjLt-WYG3x1Gi2htFENC7RY.roa (raw, json)
Hash identifier: txMFoaksq5apTzjovGBFQKHzJEy5pLr1wrdu92vI+sw=
Subject key identifier: CB:B2:8E:22:32:ED:F9:66:06:DF:1D:46:8B:68:6D:14:43:42:ED:16
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 019C1E25AA709E421206AC58C7C2A3572BDE
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/y7KOIjLt-WYG3x1Gi2htFENC7RY.roa
Signing time: Mon 02 Feb 2026 11:38:30 +0000
ROA not before: Mon 02 Feb 2026 11:38:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214828
IP address blocks: 2a12:bec4:10e0::/44 maxlen: 44
2a12:bec4:1130::/44 maxlen: 44
2a12:bec4:12b0::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 14:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:1e:25:aa:70:9e:42:12:06:ac:58:c7:c2:a3:57:2b:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Feb 2 11:38:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cbb28e2232edf96606df1d468b686d144342ed16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4c:7d:a1:1e:4b:0f:c1:e3:23:8d:68:6a:4e:
6b:bf:50:6e:a0:16:c4:8c:85:c5:98:9e:23:6d:68:
ea:99:85:59:1c:08:a3:65:98:39:98:14:f4:a7:b8:
9c:84:0d:03:69:21:63:47:75:0b:42:a2:a9:a5:86:
a6:34:e1:10:b6:be:fd:88:cd:ea:28:0f:bb:98:92:
59:6d:32:1a:6a:7f:5d:3b:53:df:ff:36:30:8f:ee:
b0:be:58:fc:6c:18:22:bc:0a:31:7c:2d:77:5f:c3:
3b:da:73:ca:bb:72:80:be:62:f1:e2:07:7c:04:4b:
4b:9c:e7:61:83:9f:29:45:cc:c2:2c:31:9e:3b:dc:
78:77:c3:66:c6:c4:fe:5d:e1:d1:12:f9:fa:34:38:
8c:7a:ca:0e:89:36:0a:63:43:7c:57:6a:b1:c1:52:
0b:d4:f3:d8:45:60:fb:cd:8a:52:2b:00:52:a0:58:
07:c8:2a:d7:78:27:8e:99:ba:f3:f9:cd:8d:0e:3e:
0f:7f:b6:f7:cc:8e:50:a5:73:8c:19:7d:58:16:4a:
a5:79:d0:88:f9:e6:31:65:4d:6e:b3:7b:e4:e6:7a:
b7:63:af:c2:23:83:45:1b:6b:18:7b:19:74:30:8b:
da:35:82:29:27:0c:1b:da:24:67:ec:23:02:61:80:
e8:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:B2:8E:22:32:ED:F9:66:06:DF:1D:46:8B:68:6D:14:43:42:ED:16
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/y7KOIjLt-WYG3x1Gi2htFENC7RY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec4:10e0::/44
2a12:bec4:1130::/44
2a12:bec4:12b0::/44
Signature Algorithm: sha256WithRSAEncryption
8e:49:ae:01:a5:97:a5:7b:a6:6c:0d:31:90:47:d7:9a:23:c9:
d5:7c:ce:95:49:eb:4c:27:07:9f:dd:51:04:d2:41:ac:47:5a:
63:da:96:d2:e4:b7:6c:2c:8e:f4:bb:31:72:4d:83:e6:da:e2:
ba:80:a8:6f:63:8e:04:69:ff:9b:47:ef:7a:d0:65:29:43:40:
5b:be:ae:53:4f:d8:2b:12:cc:82:b4:8f:0a:6d:7d:a3:34:0c:
36:39:ea:dd:48:37:60:c9:ac:cc:b6:00:10:a1:32:e3:6f:dc:
5c:5b:9d:49:a2:e8:d4:02:d6:3c:57:3a:e6:c3:1b:13:d0:64:
69:c8:b6:77:5a:37:96:ac:1c:69:75:7f:e8:7e:57:31:bf:59:
58:f2:d3:12:21:f6:80:de:27:8d:32:5b:8d:da:f4:51:5b:5c:
68:58:c5:25:a2:4b:54:fe:c2:f4:77:fd:58:e0:52:dd:76:7d:
ac:b1:53:e4:a9:dd:93:a6:ba:34:43:f6:a0:61:da:9a:09:6f:
0c:df:ac:0c:87:ea:a8:02:d5:34:b6:55:40:76:c3:55:6e:11:
a2:4a:ec:16:a2:f8:ee:e8:0f:f4:47:85:f3:51:db:85:b0:f1:
d0:ca:42:35:dc:1e:2e:17:92:75:b8:48:39:b7:c8:d2:21:84:
04:3b:82:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:57:31 2026 by rpki-client