Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/YZXApj6QUS3CiLWeSfNX02QYUOs.roa
File: YZXApj6QUS3CiLWeSfNX02QYUOs.roa (raw, json)
Hash identifier: 1qkJvuuZU9XKokuviBmRgCJJwm6wE+PzhQNk54//6vs=
Subject key identifier: 61:95:C0:A6:3E:90:51:2D:C2:88:B5:9E:49:F3:57:D3:64:18:50:EB
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 019DB45AE000D75C41621D6C75B619DCB35A
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/YZXApj6QUS3CiLWeSfNX02QYUOs.roa
Signing time: Wed 22 Apr 2026 08:42:27 +0000
ROA not before: Wed 22 Apr 2026 08:42:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198689
IP address blocks: 2a0c:9a40:8ed0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:28:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b4:5a:e0:00:d7:5c:41:62:1d:6c:75:b6:19:dc:b3:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Apr 22 08:42:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6195c0a63e90512dc288b59e49f357d3641850eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:53:79:32:04:ad:cb:70:af:13:ad:14:ca:fd:
5d:a9:1f:44:57:70:8f:57:19:81:7a:ae:05:90:08:
f4:e3:22:09:0f:0f:3b:ed:64:67:96:bc:0b:45:4b:
5a:a2:79:1c:c0:d8:e0:cd:fc:92:c7:36:6d:21:b1:
78:18:fa:0e:5d:09:fb:dc:b8:40:54:5c:4b:61:08:
2d:0e:7a:4c:24:18:f9:79:16:e4:c9:0e:04:30:40:
c9:67:26:8c:24:54:5f:37:1e:01:71:b7:b5:22:7f:
7c:65:93:f5:c3:a6:d9:85:8f:86:a4:2a:1b:1c:67:
5e:f6:26:51:0e:6d:8c:f1:b8:c4:8f:72:f3:c4:8f:
2f:89:8c:16:51:fa:b8:dc:e2:7f:9b:f8:05:c6:76:
67:43:99:4f:31:c3:cf:2b:d6:75:ed:ac:65:44:85:
c7:b7:db:66:e4:2c:94:19:fa:10:b7:25:96:7d:15:
e5:fd:6b:79:f5:3f:e2:52:31:96:65:45:c5:6f:c6:
7b:10:59:47:a5:5c:5d:d9:15:5c:62:2b:1e:61:54:
2b:92:0e:7e:78:6c:34:da:b2:ff:0c:e1:21:bf:1a:
f7:e4:21:90:c9:86:cf:99:5b:d0:30:a5:d9:3d:d0:
87:15:57:94:e1:c7:c6:ed:ae:97:52:74:a2:21:ac:
69:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:95:C0:A6:3E:90:51:2D:C2:88:B5:9E:49:F3:57:D3:64:18:50:EB
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/YZXApj6QUS3CiLWeSfNX02QYUOs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8ed0::/48
Signature Algorithm: sha256WithRSAEncryption
6d:8a:a0:f9:fa:3f:21:cc:b9:9b:57:24:18:86:95:6c:75:68:
e4:16:fb:89:47:51:7c:10:8a:e9:7c:c5:2c:fd:1e:f4:5d:ee:
7d:c3:84:f6:8d:b7:5c:29:76:fe:14:34:f7:a5:79:9e:6c:12:
b8:0b:30:05:c6:05:89:e1:26:f1:dd:57:27:15:a2:d8:33:22:
0b:72:bf:1b:34:75:07:0f:c5:1b:b7:1e:12:c1:10:62:0c:40:
50:2f:3a:c1:c0:5c:23:a7:0c:6a:7d:cb:f3:ab:b6:00:3e:2d:
e2:1c:58:48:88:08:ac:0c:9e:e0:63:fa:6c:0a:00:6a:bd:d1:
9a:54:fd:55:6e:e1:06:84:51:94:b6:e6:de:d5:20:2c:7f:f9:
d1:cf:a3:55:37:5d:68:65:fa:af:e5:06:39:c6:ce:bf:84:60:
8c:88:65:05:6f:9c:7f:38:80:68:32:60:b6:bf:6a:62:25:ef:
f9:38:5f:5e:53:ba:7d:d5:95:8c:eb:9e:33:c3:a0:79:17:17:
16:c1:e5:2b:3a:69:79:92:68:15:b6:58:a5:9c:c3:01:4a:6c:
08:7a:34:12:9f:ea:77:0b:16:96:c6:6a:79:f1:2d:ea:12:65:
c7:c3:a3:d7:e5:7f:2b:af:7c:b9:ae:56:91:b6:d5:70:18:44:
0b:fb:c8:15
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZ20WuAA11xBYh1sdbYZ3LNaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl
NDgwMDgwHhcNMjYwNDIyMDg0MjI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MTk1YzBhNjNlOTA1MTJkYzI4OGI1OWU0OWYzNTdkMzY0MTg1MGViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1N5MgSty3CvE60Uyv1dqR9EV3CP
VxmBeq4FkAj04yIJDw877WRnlrwLRUtaonkcwNjgzfySxzZtIbF4GPoOXQn73LhA
VFxLYQgtDnpMJBj5eRbkyQ4EMEDJZyaMJFRfNx4Bcbe1In98ZZP1w6bZhY+GpCob
HGde9iZRDm2M8bjEj3LzxI8viYwWUfq43OJ/m/gFxnZnQ5lPMcPPK9Z17axlRIXH
t9tm5CyUGfoQtyWWfRXl/Wt59T/iUjGWZUXFb8Z7EFlHpVxd2RVcYiseYVQrkg5+
eGw02rL/DOEhvxr35CGQyYbPmVvQMKXZPdCHFVeU4cfG7a6XUnSiIaxpKQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFGGVwKY+kFEtwoi1nknzV9NkGFDrMB8GA1UdIwQY
MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt
YmY0ZTUyN2I5ZmE4LzEvWVpYQXBqNlFVUzNDaUxXZVNmTlgwMlFZVU9zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4
LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgyaQI7Q
MA0GCSqGSIb3DQEBCwUAA4IBAQBtiqD5+j8hzLmbVyQYhpVsdWjkFvuJR1F8EIrp
fMUs/R70Xe59w4T2jbdcKXb+FDT3pXmebBK4CzAFxgWJ4Sbx3VcnFaLYMyILcr8b
NHUHD8Ubtx4SwRBiDEBQLzrBwFwjpwxqfcvzq7YAPi3iHFhIiAisDJ7gY/psCgBq
vdGaVP1VbuEGhFGUtube1SAsf/nRz6NVN11oZfqv5QY5xs6/hGCMiGUFb5x/OIBo
MmC2v2piJe/5OF9eU7p91ZWM654zw6B5FxcWweUrOml5kmgVtlilnMMBSmwIejQS
n+p3CxaWxmp58S3qEmXHw6PX5X8rr3y5rlaRttVwGEQL+8gV
-----END CERTIFICATE-----
Generated at Wed May 13 05:56:16 2026 by rpki-client