Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/96dcd6-0a8c-4e54-abe8-4a3e1fb9aae9/1/yGP7KHN5i6r4CM3VtuiDVwZbygU.roa
File: yGP7KHN5i6r4CM3VtuiDVwZbygU.roa (raw, json)
Hash identifier: nCK2wB6Dr/unpkoAYydpAEc9XrgdXrIMJdbTLv5g6hA=
Subject key identifier: C8:63:FB:28:73:79:8B:AA:F8:08:CD:D5:B6:E8:83:57:06:5B:CA:05
Certificate issuer: /CN=cb6a9ef810edaaf52453d28373ef0f79b09bd63d
Certificate serial: 01A08153FEE47B61FC9D2E402298B4D0CA8C
Authority key identifier: CB:6A:9E:F8:10:ED:AA:F5:24:53:D2:83:73:EF:0F:79:B0:9B:D6:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y2qe-BDtqvUkU9KDc-8PebCb1j0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/96dcd6-0a8c-4e54-abe8-4a3e1fb9aae9/1/yGP7KHN5i6r4CM3VtuiDVwZbygU.roa
Signing time: Tue 08 Sep 2026 14:02:40 +0000
ROA not before: Tue 08 Sep 2026 14:02:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201439
IP address blocks: 2001:67c:9a4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/96dcd6-0a8c-4e54-abe8-4a3e1fb9aae9/1/y2qe-BDtqvUkU9KDc-8PebCb1j0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/96dcd6-0a8c-4e54-abe8-4a3e1fb9aae9/1/y2qe-BDtqvUkU9KDc-8PebCb1j0.mft
rsync://rpki.ripe.net/repository/DEFAULT/y2qe-BDtqvUkU9KDc-8PebCb1j0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:81:53:fe:e4:7b:61:fc:9d:2e:40:22:98:b4:d0:ca:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb6a9ef810edaaf52453d28373ef0f79b09bd63d
Validity
Not Before: Sep 8 14:02:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c863fb2873798baaf808cdd5b6e88357065bca05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:60:86:e8:fa:7e:01:a2:95:af:49:e5:dc:15:
70:7e:b7:ee:0b:1f:bb:be:34:71:82:10:20:50:8c:
8c:88:95:71:4d:59:fa:eb:c1:86:c3:cb:2b:98:5f:
8a:53:e4:2f:2c:01:1c:32:53:4b:c8:a0:ad:14:9b:
2e:c2:94:c0:c7:57:8c:64:8f:11:d8:45:25:b3:eb:
52:01:82:2e:40:56:52:5c:cf:33:f9:e2:f8:c7:ea:
44:97:4a:d6:30:6e:3f:ed:19:01:61:ae:92:9f:bb:
88:19:0c:dd:d9:2e:cc:b9:1c:5c:54:d3:ec:3c:18:
42:3a:14:dd:5d:a1:ca:8d:0d:37:aa:85:a6:d1:26:
02:10:5c:2e:0b:f4:d5:2a:ef:af:84:db:a3:be:91:
3a:d2:25:e9:2d:e3:09:58:ed:60:0a:3d:07:74:5a:
17:16:4e:39:2f:26:1c:83:fa:d5:4c:1e:e4:2e:47:
a4:f6:01:69:d6:06:03:49:20:02:40:16:8b:3a:72:
d4:1f:ee:23:50:cb:9c:b4:d5:39:ec:99:ac:96:84:
61:b6:0c:8a:23:43:39:e1:9c:00:79:ea:c9:86:7a:
bf:80:04:ea:93:93:da:9c:e2:d7:7e:9f:cd:5b:12:
fa:dc:5f:a0:ee:3f:f6:14:1c:4e:ae:5c:0c:89:42:
88:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:63:FB:28:73:79:8B:AA:F8:08:CD:D5:B6:E8:83:57:06:5B:CA:05
X509v3 Authority Key Identifier:
keyid:CB:6A:9E:F8:10:ED:AA:F5:24:53:D2:83:73:EF:0F:79:B0:9B:D6:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y2qe-BDtqvUkU9KDc-8PebCb1j0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/96dcd6-0a8c-4e54-abe8-4a3e1fb9aae9/1/yGP7KHN5i6r4CM3VtuiDVwZbygU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/96dcd6-0a8c-4e54-abe8-4a3e1fb9aae9/1/y2qe-BDtqvUkU9KDc-8PebCb1j0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:9a4::/48
Signature Algorithm: sha256WithRSAEncryption
be:0c:9a:d8:2d:b0:18:90:3b:4f:48:31:ac:18:d9:06:2d:f8:
2e:44:0d:c8:c9:24:e9:28:96:34:69:2c:ae:26:d8:7b:8f:5e:
7b:b4:84:44:4a:55:18:1f:03:2f:60:b7:50:6d:7d:7d:f9:d5:
de:a7:91:c1:f8:de:37:63:b6:f4:66:35:fb:bf:c4:3f:52:17:
c9:bf:3c:6e:87:6d:95:a4:03:b7:be:c7:e5:29:ef:00:5f:82:
6c:de:34:12:d7:e5:93:ed:cc:e0:cc:dc:5e:e7:89:30:70:6b:
65:59:28:e3:94:75:1a:cf:4c:03:5d:e6:93:5d:6c:60:42:65:
16:c5:26:4b:89:72:3d:25:a3:2d:72:3b:3d:dc:bf:c5:b3:20:
d6:f9:87:c8:f6:0d:74:4a:e4:36:b9:cc:3c:e1:78:3d:a8:a5:
4d:9e:89:0e:5f:e8:1b:cd:e8:ad:bf:30:53:cf:45:83:b8:a7:
1c:ae:07:0b:e3:c9:18:90:21:00:1c:2e:5a:22:e6:ac:97:0b:
18:28:9e:0f:c9:95:71:62:04:db:cb:72:9b:0c:16:40:b9:8e:
ab:c1:3a:3a:b4:96:a6:96:7f:9a:ac:99:ab:18:8b:e3:56:ab:
ea:79:b7:2b:3a:62:db:97:62:c6:ee:4a:cd:80:27:60:f2:5e:
72:d1:bd:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 06:08:41 2026 by rpki-client