Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/YpnQtn6oBy2ndRHXx0ROEOpszs4.roa
File: YpnQtn6oBy2ndRHXx0ROEOpszs4.roa (raw, json)
Hash identifier: 0ylhf8Tj/zXOcXY4S7nhcihe3yPs+rYnLljFvnGLeho=
Subject key identifier: 62:99:D0:B6:7E:A8:07:2D:A7:75:11:D7:C7:44:4E:10:EA:6C:CE:CE
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019D7DF941C163A52A2EB7F365DBB74E664D
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/YpnQtn6oBy2ndRHXx0ROEOpszs4.roa
Signing time: Sat 11 Apr 2026 19:16:20 +0000
ROA not before: Sat 11 Apr 2026 19:16:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198831
IP address blocks: 2a0a:2d06:101::/48 maxlen: 48
2a0c:7886:100::/48 maxlen: 48
2a0e:f600:2c::/48 maxlen: 48
2a0f:1584:77::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:7d:f9:41:c1:63:a5:2a:2e:b7:f3:65:db:b7:4e:66:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Apr 11 19:16:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6299d0b67ea8072da77511d7c7444e10ea6ccece
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:78:de:36:d6:4f:3b:e9:d1:35:84:2c:58:29:
17:50:52:25:66:b7:d2:57:98:93:17:28:5d:9e:d2:
6f:72:e1:72:40:f3:95:03:6b:52:c6:12:cf:20:85:
8c:21:53:85:1c:e2:d0:19:81:d3:ff:b7:9c:9f:a2:
64:de:dd:af:03:cb:d5:bd:7a:f4:62:50:7f:9f:92:
e1:75:cc:9d:79:90:07:f2:56:5d:dd:c4:1c:2c:ac:
7d:ec:f1:a2:2d:bf:1e:5d:24:d0:81:b5:b7:a4:cb:
f9:1f:03:00:2f:6b:79:5c:82:fa:69:b8:c9:2f:2b:
cb:48:83:cf:ed:6d:02:c6:b4:1e:be:f1:2b:8b:b6:
b7:c4:89:ce:94:08:fb:3a:be:4e:86:93:4b:55:9c:
ea:45:8f:95:bb:b7:bb:ce:30:d3:85:9c:4d:6a:17:
20:96:91:8d:34:49:dd:b2:7e:0c:34:8c:e7:37:e1:
66:2c:67:c9:e2:3d:f7:54:cf:bc:26:2f:fb:34:37:
f4:72:b3:2d:e7:3d:a4:d4:d9:82:20:26:35:e7:a2:
a0:1e:03:fd:c0:44:5b:f9:77:e3:b1:b4:a0:da:7b:
c6:e9:65:4a:99:c5:9a:4e:f3:12:e5:c9:ad:f3:8f:
44:71:9c:f1:aa:ff:cc:70:ab:43:81:33:dc:f0:55:
be:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:99:D0:B6:7E:A8:07:2D:A7:75:11:D7:C7:44:4E:10:EA:6C:CE:CE
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/YpnQtn6oBy2ndRHXx0ROEOpszs4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:2d06:101::/48
2a0c:7886:100::/48
2a0e:f600:2c::/48
2a0f:1584:77::/48
Signature Algorithm: sha256WithRSAEncryption
10:6a:ea:c4:52:2e:be:3a:6f:dd:c3:e8:38:f4:13:60:c7:1b:
8a:9c:73:c3:20:fe:7d:a0:10:e3:88:b7:16:ea:49:41:73:af:
83:d2:53:01:1b:a7:d3:1c:50:3c:d4:08:1a:93:20:f2:09:c3:
a4:73:1a:05:dc:6c:1d:4a:10:ce:8c:8b:73:c6:14:3d:b4:e5:
9f:de:a0:5b:16:f6:93:12:9c:02:2b:2f:a6:0e:33:65:dd:d7:
57:6c:0b:53:43:3b:e4:43:69:ca:21:62:9c:f8:37:ed:79:8c:
99:69:f0:59:92:1d:7c:13:e3:e7:d5:c5:1c:4b:90:a8:31:c5:
da:53:3a:14:b8:fa:a3:5a:80:49:3d:52:09:40:86:34:a6:14:
2e:95:6d:4d:95:92:cc:4e:47:a4:12:e4:49:24:2f:dd:a3:70:
d8:b8:7c:99:6c:c0:1e:a2:53:40:cf:0e:37:19:fb:84:14:bd:
76:56:8b:cc:d3:65:38:00:e7:18:c6:5a:2e:c4:72:d0:01:f8:
34:0c:1d:2b:99:d9:b0:84:56:a3:c1:ec:f3:a0:9d:7e:64:82:
6f:06:e1:ce:63:d7:7c:af:f1:96:98:15:8e:77:7c:c1:ef:38:
46:b1:25:8b:a6:70:a4:67:0e:3c:88:18:b9:33:ed:d2:77:eb:
1b:a8:9f:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:01:15 2026 by rpki-client