Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/2a714e-c7d3-47b5-8c57-caa7d5b482c5/1/yIsBfsc2HhU6jpxl4oaMk-Clsu8.roa
File: yIsBfsc2HhU6jpxl4oaMk-Clsu8.roa (raw, json)
Hash identifier: JjYsnsu3j2TdcMo1wC/RUITe8k4/U7ZhlqVPNZaaVSE=
Subject key identifier: C8:8B:01:7E:C7:36:1E:15:3A:8E:9C:65:E2:86:8C:93:E0:A5:B2:EF
Certificate issuer: /CN=2ca61567cb1099855117008fd1d36aa8ada96faf
Certificate serial: 019B76EACDA92CF3605C13DF6EA884D6A331
Authority key identifier: 2C:A6:15:67:CB:10:99:85:51:17:00:8F:D1:D3:6A:A8:AD:A9:6F:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LKYVZ8sQmYVRFwCP0dNqqK2pb68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/2a714e-c7d3-47b5-8c57-caa7d5b482c5/1/yIsBfsc2HhU6jpxl4oaMk-Clsu8.roa
Signing time: Thu 01 Jan 2026 00:17:38 +0000
ROA not before: Thu 01 Jan 2026 00:17:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211931
IP address blocks: 2a01:f100::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/2a714e-c7d3-47b5-8c57-caa7d5b482c5/1/LKYVZ8sQmYVRFwCP0dNqqK2pb68.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/2a714e-c7d3-47b5-8c57-caa7d5b482c5/1/LKYVZ8sQmYVRFwCP0dNqqK2pb68.mft
rsync://rpki.ripe.net/repository/DEFAULT/LKYVZ8sQmYVRFwCP0dNqqK2pb68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:76:ea:cd:a9:2c:f3:60:5c:13:df:6e:a8:84:d6:a3:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ca61567cb1099855117008fd1d36aa8ada96faf
Validity
Not Before: Jan 1 00:17:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c88b017ec7361e153a8e9c65e2868c93e0a5b2ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:61:af:f0:22:28:87:d7:39:03:fb:9a:75:55:
90:a1:9c:06:61:ba:26:a7:7c:cf:cd:de:9e:48:59:
f2:29:b3:87:e9:41:7c:ee:5c:9e:85:dc:a7:24:8f:
9c:ed:18:1d:e1:83:71:5a:70:2e:34:4b:9b:91:80:
90:b9:e1:31:27:9e:de:ef:60:6d:8b:63:75:4d:39:
60:9e:92:b9:3d:02:b0:df:52:a1:07:10:34:21:b8:
3e:78:d0:89:e8:24:19:8d:10:ef:42:d6:0e:af:ed:
ad:29:52:27:b4:4b:ed:23:d3:59:00:44:41:e7:df:
b3:c1:f2:fe:c7:5c:f4:e1:2c:8b:2a:56:da:d5:45:
70:f2:45:cf:46:91:df:35:c4:00:2b:1e:3a:f8:b3:
33:00:a2:66:b1:e3:bc:d5:dd:dc:f7:34:30:b3:ec:
65:8a:99:5d:7e:5f:ed:3a:1c:9b:52:12:68:b6:aa:
d7:af:13:0c:8b:89:1a:91:de:ab:9f:fa:56:88:48:
53:d1:7c:6a:8e:2e:4f:fe:e1:55:7e:4a:a4:db:ef:
95:d9:06:ad:03:dd:d2:ac:bf:41:ff:78:e6:82:46:
44:ba:7a:fe:e8:bd:07:db:f0:42:5b:82:db:a4:72:
27:07:4b:62:5c:5d:e2:6b:99:b0:97:83:61:f2:9c:
5d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:8B:01:7E:C7:36:1E:15:3A:8E:9C:65:E2:86:8C:93:E0:A5:B2:EF
X509v3 Authority Key Identifier:
keyid:2C:A6:15:67:CB:10:99:85:51:17:00:8F:D1:D3:6A:A8:AD:A9:6F:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LKYVZ8sQmYVRFwCP0dNqqK2pb68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2a714e-c7d3-47b5-8c57-caa7d5b482c5/1/yIsBfsc2HhU6jpxl4oaMk-Clsu8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2a714e-c7d3-47b5-8c57-caa7d5b482c5/1/LKYVZ8sQmYVRFwCP0dNqqK2pb68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:f100::/44
Signature Algorithm: sha256WithRSAEncryption
98:16:59:03:9c:d9:da:f9:c4:db:94:28:46:0f:ef:9d:93:3c:
85:74:85:1d:02:e0:25:0e:38:35:83:0a:ec:fd:ed:d4:a5:ce:
50:1b:1c:14:1a:cf:7a:ea:10:74:49:ae:89:60:44:54:26:fe:
de:3e:29:4b:2e:b0:75:96:39:b8:28:58:85:b6:b8:66:c6:10:
2e:4c:cb:0e:b5:82:21:ba:e3:79:aa:51:a7:37:81:77:2d:41:
c2:30:74:be:75:53:f9:53:48:0b:64:a0:7b:d0:de:7e:34:fb:
cd:35:66:41:96:5c:e4:51:15:82:9d:39:95:61:09:69:4d:19:
63:a1:ae:be:68:fd:85:a9:2e:2a:85:4c:b2:fc:ea:70:71:a7:
68:27:87:23:2d:fe:ea:62:38:bc:f7:ea:be:ab:d3:b0:f9:72:
6d:01:8c:23:6d:da:ca:fb:07:0f:81:d8:4a:dc:68:64:79:69:
82:cb:4d:be:18:9a:6e:d4:ef:9e:92:45:e7:50:a5:24:08:58:
11:6b:34:67:b7:85:1a:32:c1:95:e4:2a:72:3c:1d:ff:4d:b5:
f9:cf:4c:5f:f9:34:42:6e:d8:47:54:78:ab:a9:da:ec:51:20:
53:9a:f0:f8:0e:bf:c6:36:cc:4e:5e:03:9b:4b:cd:51:79:c2:
ea:f3:5b:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:38:15 2026 by rpki-client