Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/873dd0-af88-4be5-9861-fea5eff37724/1/YfYnV8dROfvt9YlNJZwwIzCuaVk.roa
File: YfYnV8dROfvt9YlNJZwwIzCuaVk.roa (raw, json)
Hash identifier: 8h9Qzp6OMQv/b+8I/FjbB7FBpfDNca2A4Lb8PfnMIP8=
Subject key identifier: 61:F6:27:57:C7:51:39:FB:ED:F5:89:4D:25:9C:30:23:30:AE:69:59
Certificate issuer: /CN=c6baf8e3088217e4b7c0c231718fab909b1881e4
Certificate serial: 019B7CEDCF9C53F94FED92C6950591D9AA00
Authority key identifier: C6:BA:F8:E3:08:82:17:E4:B7:C0:C2:31:71:8F:AB:90:9B:18:81:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xrr44wiCF-S3wMIxcY-rkJsYgeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/873dd0-af88-4be5-9861-fea5eff37724/1/YfYnV8dROfvt9YlNJZwwIzCuaVk.roa
Signing time: Fri 02 Jan 2026 04:18:38 +0000
ROA not before: Fri 02 Jan 2026 04:18:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215737
IP address blocks: 2001:67c:2924::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/873dd0-af88-4be5-9861-fea5eff37724/1/xrr44wiCF-S3wMIxcY-rkJsYgeQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/873dd0-af88-4be5-9861-fea5eff37724/1/xrr44wiCF-S3wMIxcY-rkJsYgeQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xrr44wiCF-S3wMIxcY-rkJsYgeQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:ed:cf:9c:53:f9:4f:ed:92:c6:95:05:91:d9:aa:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6baf8e3088217e4b7c0c231718fab909b1881e4
Validity
Not Before: Jan 2 04:18:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=61f62757c75139fbedf5894d259c302330ae6959
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:6d:02:85:38:ed:6b:70:f8:5a:96:8c:74:10:
21:d7:78:ad:d9:7d:76:9a:a0:01:f4:e4:75:18:d5:
96:aa:4f:f4:e6:8b:61:4c:f8:31:0e:3c:4e:dd:44:
f3:9f:54:70:8b:b7:f1:75:14:e7:26:31:87:cf:7c:
07:b8:3d:e3:27:a6:4a:47:a9:4c:2b:b0:0e:c5:17:
9c:79:5b:60:6e:0a:cd:25:70:65:4c:8e:b7:71:81:
36:10:1c:38:12:85:a5:b9:6e:40:f4:84:bf:14:e8:
9a:39:28:ae:f9:cf:f8:a0:55:8f:c0:52:98:10:d1:
8e:d0:6d:13:4e:5b:7a:9c:ee:49:bb:b7:8f:c6:7e:
76:a4:21:87:bf:76:70:67:d2:5b:8b:8e:4a:3f:c2:
19:a4:52:5b:c6:c2:57:85:21:9d:69:dc:f3:d5:6a:
f8:c3:5f:23:ec:6c:50:35:63:ee:d3:d8:bd:fa:5b:
69:d6:01:22:20:29:1b:cc:f7:1f:f1:3a:62:73:b7:
41:11:52:a8:fa:c0:ac:8e:de:0d:38:a9:95:d0:87:
7f:fc:59:5f:2e:4e:6c:8c:12:13:39:7c:ab:38:1c:
9d:a1:bc:65:dc:b2:c2:45:f7:b7:27:c3:d5:61:84:
bc:e6:e7:86:80:4e:01:fb:56:14:a7:38:30:77:57:
2d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:F6:27:57:C7:51:39:FB:ED:F5:89:4D:25:9C:30:23:30:AE:69:59
X509v3 Authority Key Identifier:
keyid:C6:BA:F8:E3:08:82:17:E4:B7:C0:C2:31:71:8F:AB:90:9B:18:81:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xrr44wiCF-S3wMIxcY-rkJsYgeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/873dd0-af88-4be5-9861-fea5eff37724/1/YfYnV8dROfvt9YlNJZwwIzCuaVk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/873dd0-af88-4be5-9861-fea5eff37724/1/xrr44wiCF-S3wMIxcY-rkJsYgeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2924::/48
Signature Algorithm: sha256WithRSAEncryption
5d:f2:3c:57:5d:b0:df:d8:e6:b6:d8:0e:ef:92:81:e3:7f:03:
ee:8c:69:87:85:ff:8c:a0:59:19:fb:b1:67:7b:69:1a:de:d3:
97:65:c3:71:4d:56:f5:5d:a2:c1:09:ad:9f:aa:3a:2b:fb:3f:
c5:9c:f4:e5:5d:5c:28:a9:b9:f1:1c:1a:a7:ef:29:9a:b7:6e:
cb:31:6a:c7:da:16:fc:39:24:2a:b1:44:a3:8f:79:e8:18:b5:
51:46:25:47:b3:7d:9d:be:b3:f1:f3:e6:36:69:e3:d7:18:92:
72:2b:22:c1:13:de:f5:3c:9f:a3:60:6a:5e:4a:47:ad:88:55:
7d:0d:d9:82:2b:aa:ea:2e:1e:e7:f9:b0:f7:d8:62:f5:24:c4:
81:de:eb:10:f9:1f:df:f2:2f:a4:26:61:94:bd:0c:42:de:04:
d3:c5:00:73:2d:63:de:7a:6b:52:5d:85:21:f2:97:95:b2:cc:
3d:ef:ed:8f:64:db:a0:4d:1f:2f:83:80:63:5b:c3:b5:09:4f:
6c:67:82:8f:e9:0a:b3:f4:50:ce:32:b0:f7:c8:80:a9:a8:f4:
19:f6:d7:8e:cc:80:f9:17:5c:c4:cd:dd:b8:93:da:38:ce:6e:
7e:1a:00:f3:1d:bc:fc:4a:5e:9e:ac:8f:14:26:9d:49:aa:77:
f0:a2:02:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:07:32 2026 by rpki-client