Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/0cdc65-c5ca-4949-aabd-de946541cdcb/1/4Ymkv_Ino49ll3TxCeRrFSB03b8.roa
File: 4Ymkv_Ino49ll3TxCeRrFSB03b8.roa (raw, json)
Hash identifier: EC6epXR7lNi/qPuSWHGUkvfRI6ulV/puQ8edzleZuv8=
Subject key identifier: E1:89:A4:BF:F2:27:A3:8F:65:97:74:F1:09:E4:6B:15:20:74:DD:BF
Certificate issuer: /CN=718f17e4cfb33821621f1cd1b1007ab52d1372e9
Certificate serial: 01A056F723F6C8DF93BC6E36D23C8A19F5F2
Authority key identifier: 71:8F:17:E4:CF:B3:38:21:62:1F:1C:D1:B1:00:7A:B5:2D:13:72:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cY8X5M-zOCFiHxzRsQB6tS0Tcuk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/0cdc65-c5ca-4949-aabd-de946541cdcb/1/4Ymkv_Ino49ll3TxCeRrFSB03b8.roa
Signing time: Mon 31 Aug 2026 08:37:12 +0000
ROA not before: Mon 31 Aug 2026 08:37:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219127
IP address blocks: 2a0b:5040::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/0cdc65-c5ca-4949-aabd-de946541cdcb/1/cY8X5M-zOCFiHxzRsQB6tS0Tcuk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/0cdc65-c5ca-4949-aabd-de946541cdcb/1/cY8X5M-zOCFiHxzRsQB6tS0Tcuk.mft
rsync://rpki.ripe.net/repository/DEFAULT/cY8X5M-zOCFiHxzRsQB6tS0Tcuk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 17:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:56:f7:23:f6:c8:df:93:bc:6e:36:d2:3c:8a:19:f5:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=718f17e4cfb33821621f1cd1b1007ab52d1372e9
Validity
Not Before: Aug 31 08:37:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e189a4bff227a38f659774f109e46b152074ddbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:1f:0b:15:f3:92:09:6a:41:5e:cd:cb:9b:31:
c7:12:76:c1:96:3b:12:b8:66:08:01:c5:c4:e6:7d:
e3:76:33:0a:7a:05:8f:3c:cf:6f:e6:ae:bb:66:04:
8f:9e:dd:a9:0a:bb:82:43:14:82:17:e8:51:9e:ff:
03:80:32:53:2a:29:81:89:28:04:97:33:6c:db:d4:
87:83:35:d0:ec:1d:78:3f:ba:a0:04:63:59:a6:b1:
3b:15:a8:79:86:03:1a:94:18:f0:09:71:10:95:83:
88:fa:a6:05:f1:d4:ef:3a:84:37:d9:ed:55:e9:fb:
4c:db:14:5b:e5:a0:84:39:4f:64:14:f7:17:ba:34:
51:51:ec:9c:dc:85:81:b7:b9:d1:6b:b1:16:d2:af:
75:73:c4:09:58:c5:ef:d5:4a:9c:b1:45:d0:43:f3:
1c:fd:8e:09:96:89:b2:c1:a5:8a:ca:6e:4a:97:6b:
fc:55:14:68:1f:81:49:9f:e6:9d:38:4d:3a:dd:a9:
7d:18:78:65:44:98:75:2e:b1:de:72:5b:68:e3:1b:
df:fa:fb:a3:a3:8c:51:ec:e1:32:ea:90:5b:4f:9c:
ef:8e:09:3f:ae:93:29:b4:9e:37:59:3f:f0:98:ef:
88:6d:52:96:af:21:7c:98:e6:9d:5a:f4:b1:64:17:
23:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:89:A4:BF:F2:27:A3:8F:65:97:74:F1:09:E4:6B:15:20:74:DD:BF
X509v3 Authority Key Identifier:
keyid:71:8F:17:E4:CF:B3:38:21:62:1F:1C:D1:B1:00:7A:B5:2D:13:72:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cY8X5M-zOCFiHxzRsQB6tS0Tcuk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/0cdc65-c5ca-4949-aabd-de946541cdcb/1/4Ymkv_Ino49ll3TxCeRrFSB03b8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/0cdc65-c5ca-4949-aabd-de946541cdcb/1/cY8X5M-zOCFiHxzRsQB6tS0Tcuk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:5040::/29
Signature Algorithm: sha256WithRSAEncryption
b0:9d:0c:08:a6:7f:23:84:c1:29:5b:c3:bf:61:92:2e:7d:0e:
6f:be:0a:64:d8:a1:22:1e:9c:38:16:23:5f:b1:62:38:b0:f8:
fb:58:d6:26:34:8b:ff:63:42:0c:de:cc:8c:30:fe:a9:7c:1b:
06:42:25:89:8f:84:da:69:2c:58:ba:39:01:b6:48:33:b3:18:
9b:85:93:98:47:5c:69:6f:5f:2f:cf:87:d0:65:21:d6:7e:00:
3c:ec:d7:d1:f6:96:7a:be:ca:d8:27:ee:70:4e:27:92:51:6a:
81:a3:c1:f2:52:6b:eb:d8:ac:2f:43:f4:8f:1a:f4:c7:de:e9:
af:34:a6:76:ce:cd:53:36:96:32:07:c2:5c:2b:f7:82:be:1f:
2b:a7:2d:50:de:c3:54:68:4f:b6:8d:29:1f:53:40:8e:00:0d:
06:95:1e:3e:83:7f:20:26:30:8c:2f:4b:56:20:c7:2a:4a:5a:
c5:e5:d6:34:0d:b2:3f:5b:8c:55:45:72:ba:ba:5c:5b:5f:87:
89:91:c1:b3:64:1c:db:74:5f:33:73:01:d8:af:4d:ed:fa:6d:
33:97:15:51:0e:7b:6b:1e:4b:23:e9:17:37:10:4b:76:a3:c8:
c4:74:cb:ab:ff:81:42:eb:f6:fd:d6:84:2b:b1:c4:25:ad:e0:
08:8a:b6:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 04:30:57 2026 by rpki-client