Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/YYoRkH1yisXLz0Yf3F9vOkyegYg.roa
File: YYoRkH1yisXLz0Yf3F9vOkyegYg.roa (raw, json)
Hash identifier: wPq/VHCAyS0VREsDJBR+syWLYxpGfHxDSx0G5ZTb4MI=
Subject key identifier: 61:8A:11:90:7D:72:8A:C5:CB:CF:46:1F:DC:5F:6F:3A:4C:9E:81:88
Certificate issuer: /CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Certificate serial: 019F9CEB9C665B7559E8E8A4CED0AFFD43AE
Authority key identifier: 56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/YYoRkH1yisXLz0Yf3F9vOkyegYg.roa
Signing time: Sun 26 Jul 2026 05:35:14 +0000
ROA not before: Sun 26 Jul 2026 05:35:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8075
IP address blocks: 2a10:fa80:e::/48 maxlen: 48
2a10:fa81:580::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9c:eb:9c:66:5b:75:59:e8:e8:a4:ce:d0:af:fd:43:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Validity
Not Before: Jul 26 05:35:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=618a11907d728ac5cbcf461fdc5f6f3a4c9e8188
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4d:ea:5d:20:18:da:fd:1c:10:a4:3a:a2:39:
70:f8:4f:c1:08:59:5b:f4:88:96:fc:5b:02:26:0e:
24:ed:0c:7a:c7:dc:d9:fd:44:be:e6:d9:a2:42:c2:
16:f4:7a:19:a7:68:0d:0f:2a:0b:70:08:27:00:f1:
1d:82:4b:d4:18:59:d3:0d:85:cc:37:ae:58:5b:d6:
2f:f7:3d:d3:40:d0:b4:bf:0a:cd:6e:69:00:57:45:
79:21:0d:2e:50:3f:ea:dc:17:08:55:35:26:d7:91:
cd:b7:ec:6d:5d:de:ab:f4:25:7c:2f:42:cb:44:eb:
c3:d2:f7:cc:10:27:56:6b:4c:04:5b:30:09:81:61:
63:e9:93:58:2d:e7:58:ff:64:c7:d7:d3:8f:13:5a:
86:6c:36:c7:22:fb:57:50:e7:bb:2b:c8:8b:f9:e5:
c8:ef:8b:69:34:df:79:85:d0:2e:83:ef:25:de:70:
1a:ed:57:7b:01:a8:65:0a:53:9f:16:1f:b5:5f:60:
91:ae:38:4a:d5:63:80:19:b7:a4:25:bb:e8:72:13:
25:38:59:1a:78:c8:a3:09:07:6c:d9:44:27:a4:8c:
ae:b3:07:43:ec:2d:82:35:6b:9e:5f:8d:66:ba:85:
2a:c7:67:01:2e:cf:0e:a7:96:7e:1e:1c:7a:f5:32:
4b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:8A:11:90:7D:72:8A:C5:CB:CF:46:1F:DC:5F:6F:3A:4C:9E:81:88
X509v3 Authority Key Identifier:
keyid:56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/YYoRkH1yisXLz0Yf3F9vOkyegYg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:fa80:e::/48
2a10:fa81:580::/48
Signature Algorithm: sha256WithRSAEncryption
80:7f:7b:85:ca:c1:82:9d:46:e1:eb:76:e2:d4:98:b1:05:e5:
be:72:8d:e7:53:7e:16:9d:d2:b8:b8:9d:23:8a:46:11:c0:c1:
51:08:f8:01:62:ec:79:d1:a0:7c:bf:b0:c9:01:19:a8:e1:76:
18:12:53:36:43:01:b4:32:1d:46:02:56:27:9c:82:b0:f8:06:
3d:5e:25:52:b4:7f:d1:44:c1:77:e3:77:14:91:87:13:1e:cc:
98:b2:e9:8d:7b:12:10:cb:4b:f5:4c:76:81:94:42:e0:04:21:
34:9b:23:fe:50:93:13:f5:c8:c7:f5:2a:ab:6c:32:42:a9:22:
f4:5f:50:59:62:86:c1:e9:d1:aa:d9:ba:c2:06:62:a1:66:41:
67:7a:61:35:26:07:77:4c:ed:67:07:d5:84:9a:ab:3f:37:c8:
a1:d2:18:02:ae:92:0b:03:fd:4b:ce:90:26:77:0a:c6:41:8d:
7d:6d:d0:61:d7:5e:59:b0:d0:32:c5:d7:ba:88:d9:21:d7:01:
ac:30:af:88:86:75:17:ff:99:8c:68:77:ef:5c:7c:46:98:70:
fc:3f:2c:db:fe:fd:ce:64:71:d1:63:09:d4:d8:1f:91:be:14:
2a:c3:5d:ca:d0:b1:61:d6:d8:0f:b3:44:a3:79:3d:fb:da:78:
73:d5:75:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:05:10 2026 by rpki-client