Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/ynvsZ2BsfcXcjZ43QlwK38MvsE8.roa
File: ynvsZ2BsfcXcjZ43QlwK38MvsE8.roa (raw, json)
Hash identifier: rzygfoss6l23WbTrquP0X1bFPYQEanpZLXgLpgpFq7E=
Subject key identifier: CA:7B:EC:67:60:6C:7D:C5:DC:8D:9E:37:42:5C:0A:DF:C3:2F:B0:4F
Certificate issuer: /CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8
Certificate serial: 019FA4232799CF31F6A090076331C9C69DD6
Authority key identifier: 49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/ynvsZ2BsfcXcjZ43QlwK38MvsE8.roa
Signing time: Mon 27 Jul 2026 15:13:15 +0000
ROA not before: Mon 27 Jul 2026 15:13:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402475
IP address blocks: 2a04:ca80::/29 maxlen: 29
2a0c:b140::/29 maxlen: 29
2a11:2dc0::/29 maxlen: 29
2a12:200::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a4:23:27:99:cf:31:f6:a0:90:07:63:31:c9:c6:9d:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8
Validity
Not Before: Jul 27 15:13:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ca7bec67606c7dc5dc8d9e37425c0adfc32fb04f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9f:43:cf:b4:67:eb:22:17:84:80:0b:a0:6e:
f5:44:04:0a:98:05:7b:98:97:9f:50:43:83:57:a0:
be:19:ae:79:ea:65:3f:79:89:19:81:11:b4:03:79:
a9:1e:16:96:ae:ff:b1:2d:51:72:d1:2c:48:74:65:
ea:f0:92:0e:d0:15:5e:87:76:72:aa:58:de:85:7b:
c6:2f:6c:4c:b9:86:48:33:e4:bf:99:c1:64:5d:52:
3d:0c:15:8a:da:03:9d:0c:6d:47:6e:c8:60:e0:da:
75:5e:1c:af:cd:cf:23:09:45:cc:03:4a:16:0b:88:
1c:1a:d9:e9:2f:4b:a6:37:6c:8c:3a:68:26:23:ef:
b0:1e:30:82:9a:5a:07:9d:cc:53:11:93:8b:ef:c7:
b9:cf:44:20:7a:9d:d6:d9:c6:68:99:73:3a:df:bf:
89:b6:13:2b:55:94:fb:bf:5b:5d:d7:54:25:a6:3c:
04:e6:35:78:c6:04:fb:65:0b:41:51:0e:26:27:16:
4d:34:03:96:cb:41:4e:99:c5:d2:f1:9d:8f:33:bf:
51:96:61:0a:12:44:a4:ea:13:a1:42:99:e7:5c:df:
77:01:e2:1b:59:13:27:ee:c4:71:03:bb:73:6f:57:
da:c6:2f:93:80:7f:ab:a2:54:2f:2e:0c:ef:59:48:
2e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:7B:EC:67:60:6C:7D:C5:DC:8D:9E:37:42:5C:0A:DF:C3:2F:B0:4F
X509v3 Authority Key Identifier:
keyid:49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/ynvsZ2BsfcXcjZ43QlwK38MvsE8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:ca80::/29
2a0c:b140::/29
2a11:2dc0::/29
2a12:200::/29
Signature Algorithm: sha256WithRSAEncryption
a0:40:7d:a6:e8:7e:31:60:9f:38:ab:37:70:de:5d:0d:c4:ab:
04:a1:f2:02:ff:75:c3:c8:b0:9b:0b:d0:9d:cb:84:93:dd:d4:
4a:64:af:f1:b9:07:68:3e:47:a8:4c:c6:e3:9b:8b:0b:d0:f5:
c6:9f:5a:60:43:b7:99:ab:fa:38:bd:36:75:03:6f:0e:7d:4f:
9f:7d:c9:c3:96:83:3e:64:bc:04:c4:8d:86:95:9d:a6:87:24:
b0:39:37:53:cd:2a:2c:ab:54:eb:e2:58:86:e3:e3:02:f9:72:
e7:e3:d0:5d:ac:58:51:33:68:13:06:9b:86:84:53:ac:09:64:
47:bb:69:21:5c:68:e3:65:f2:63:8a:5d:33:a0:eb:0b:12:44:
35:f0:97:6d:bf:d1:b2:7b:b3:1e:bf:9c:2a:64:a7:90:35:6b:
e9:df:74:f5:10:7c:9c:ba:cb:07:cc:f9:3e:f7:49:c7:dc:52:
bb:12:b8:81:0a:69:1e:42:8e:a9:cc:45:44:0b:8f:45:2f:6e:
4f:eb:1a:4e:ce:b6:93:6d:80:d9:1d:f5:48:12:c9:82:7f:58:
57:ad:f4:d5:ca:9d:7e:f3:57:fd:9f:df:9a:af:ea:bd:60:4b:
9e:79:ed:c3:b1:39:fc:26:b6:7f:92:5f:64:7b:8c:d6:5c:ea:
70:5d:03:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:06:13 2026 by rpki-client