Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/s1yfQXoTQTWaUrIC69ycZa-Pe9I.roa
File: s1yfQXoTQTWaUrIC69ycZa-Pe9I.roa (raw, json)
Hash identifier: UFzPy4wkMJRCu14IuB2niiJ0Zm42M2kPHj///TfSyE4=
Subject key identifier: B3:5C:9F:41:7A:13:41:35:9A:52:B2:02:EB:DC:9C:65:AF:8F:7B:D2
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 019C959DB85905671C60A9EECE0AEDA72061
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/s1yfQXoTQTWaUrIC69ycZa-Pe9I.roa
Signing time: Wed 25 Feb 2026 16:24:27 +0000
ROA not before: Wed 25 Feb 2026 16:24:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44364
IP address blocks: 2a00:48a0::/29 maxlen: 48
2a09:cc0::/29 maxlen: 48
2a09:1240::/29 maxlen: 48
2a09:4740::/29 maxlen: 48
2a09:47c0::/29 maxlen: 48
2a09:7700::/29 maxlen: 48
2a09:9cc0::/29 maxlen: 48
2a09:9d40::/29 maxlen: 48
2a09:9dc0::/29 maxlen: 48
2a09:9e40::/29 maxlen: 48
2a09:a080::/29 maxlen: 48
2a0a:dd80::/29 maxlen: 48
2a0c:8140::/29 maxlen: 48
2a0c:fa80::/29 maxlen: 48
2a0d:5e40::/29 maxlen: 48
2a0e:83c0::/29 maxlen: 48
2a10:3cc0::/29 maxlen: 48
2a10:51c0::/29 maxlen: 48
2a10:7880::/29 maxlen: 48
2a11:9080::/29 maxlen: 48
2a11:9180::/29 maxlen: 48
2a11:9280::/29 maxlen: 48
2a11:9680::/29 maxlen: 48
2a11:a780::/29 maxlen: 48
2a11:a880::/29 maxlen: 48
2a11:a980::/29 maxlen: 48
2a11:b280::/29 maxlen: 48
2a11:b380::/29 maxlen: 48
2a11:b480::/29 maxlen: 48
2a11:d800::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:95:9d:b8:59:05:67:1c:60:a9:ee:ce:0a:ed:a7:20:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Feb 25 16:24:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b35c9f417a1341359a52b202ebdc9c65af8f7bd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:87:ef:4a:65:9c:f1:e5:16:89:4a:8e:d0:58:
c2:ac:18:8a:f9:c4:00:a7:5f:e1:46:1d:ef:07:8d:
ec:8f:45:d5:72:47:5b:da:72:a5:d9:45:fc:a2:9a:
25:7e:1b:a0:67:fd:66:e4:c4:de:10:0f:d1:1c:15:
02:fd:7c:09:68:01:4b:ff:4c:44:03:37:81:43:99:
1d:00:9c:01:2b:bf:ed:db:80:7f:ce:87:74:95:93:
80:ae:4a:09:a6:15:9d:11:06:e7:c7:00:ef:74:30:
c7:cb:fe:2c:2a:a3:23:36:45:37:ab:04:1e:9e:ec:
55:41:6b:26:e3:e9:89:15:bb:2e:52:8f:ec:6f:29:
68:97:e0:6c:61:67:3f:ac:cb:72:b6:0f:76:76:0e:
71:56:6c:97:d8:c1:9d:dd:bb:b8:b6:ab:8f:5f:ad:
e9:06:8f:23:19:c8:7a:65:2a:2d:57:9c:a7:80:d5:
80:43:9b:12:37:9c:ac:25:d2:68:a3:c4:dd:d4:c5:
f0:e2:22:ce:f5:23:ef:0c:b9:d8:e3:64:28:10:b6:
63:3a:5a:b5:34:04:d3:a1:f7:b8:b1:24:24:b4:fe:
53:86:d2:af:f1:c5:85:ac:87:bc:e4:09:19:0c:0f:
61:d3:df:0a:6a:1a:bb:b0:6d:55:b5:e2:a5:4d:49:
38:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:5C:9F:41:7A:13:41:35:9A:52:B2:02:EB:DC:9C:65:AF:8F:7B:D2
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/s1yfQXoTQTWaUrIC69ycZa-Pe9I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:48a0::/29
2a09:cc0::/29
2a09:1240::/29
2a09:4740::/29
2a09:47c0::/29
2a09:7700::/29
2a09:9cc0::/29
2a09:9d40::/29
2a09:9dc0::/29
2a09:9e40::/29
2a09:a080::/29
2a0a:dd80::/29
2a0c:8140::/29
2a0c:fa80::/29
2a0d:5e40::/29
2a0e:83c0::/29
2a10:3cc0::/29
2a10:51c0::/29
2a10:7880::/29
2a11:9080::/29
2a11:9180::/29
2a11:9280::/29
2a11:9680::/29
2a11:a780::/29
2a11:a880::/29
2a11:a980::/29
2a11:b280::/29
2a11:b380::/29
2a11:b480::/29
2a11:d800::/29
Signature Algorithm: sha256WithRSAEncryption
54:a8:6a:8f:8f:b2:bf:90:6a:a0:91:85:0a:3f:5d:73:1b:5a:
80:b2:67:b6:e6:8c:ee:dd:36:fc:1e:40:04:03:09:e4:26:09:
79:93:c4:07:06:85:36:f7:1b:1c:6e:5c:44:c7:92:0c:24:ba:
5a:cb:8b:f1:62:43:6e:49:94:1d:60:8d:64:84:8f:a0:29:f3:
a9:50:05:0f:3e:70:9d:bd:15:c3:93:7e:f0:9d:b4:d0:09:ee:
c6:c6:a0:00:c7:48:0b:41:6a:e6:f5:a1:b2:4f:6f:c1:22:a5:
82:f1:cc:cb:2e:dd:c2:a6:83:ea:2a:4d:cf:2c:f9:96:ef:02:
2d:59:23:86:ce:70:12:e6:9d:0e:de:76:e3:c2:a6:a4:84:fa:
97:c4:a3:2b:ef:2c:48:b2:a4:cc:c7:5d:8d:11:83:48:ef:e6:
3a:b1:22:88:18:70:a4:ae:cc:86:e5:55:53:b2:b5:06:2e:22:
15:58:32:86:b1:3f:8f:35:3f:0d:6a:34:ea:b6:f4:24:70:4a:
f1:86:0d:c0:34:9a:4a:ac:7d:54:7d:53:83:b8:3c:d3:a3:e0:
c8:17:48:08:4a:85:63:f0:4f:6c:93:30:70:9f:f7:1c:6c:a6:
b0:13:b1:1b:19:91:4d:20:f7:49:6d:a8:1e:3c:60:91:9c:d6:
7d:38:44:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:19:54 2026 by rpki-client