Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/ySmZ_a2A7H_6gno0H7wjg02M4JM.roa
File: ySmZ_a2A7H_6gno0H7wjg02M4JM.roa (raw, json)
Hash identifier: uwDwyqNRbSgN0PwisidZN92TNVIQMLmk66GJutsF9PI=
Subject key identifier: C9:29:99:FD:AD:80:EC:7F:FA:82:7A:34:1F:BC:23:83:4D:8C:E0:93
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 01A19E5EF03731CDF3DBC14B1646BD4CC030
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/ySmZ_a2A7H_6gno0H7wjg02M4JM.roa
Signing time: Mon 02 Nov 2026 22:26:24 +0000
ROA not before: Mon 02 Nov 2026 22:26:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218215
IP address blocks: 2a0c:9a40:e0a0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 03:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9e:5e:f0:37:31:cd:f3:db:c1:4b:16:46:bd:4c:c0:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Nov 2 22:26:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c92999fdad80ec7ffa827a341fbc23834d8ce093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:41:e6:e3:45:2d:b3:f1:f6:be:93:cb:b0:ea:
ac:dd:c0:ec:8d:ca:79:96:42:33:43:6e:72:6c:e5:
26:2b:13:f4:4f:d8:f6:38:33:77:8f:b7:df:68:b7:
02:4b:d2:7e:28:e1:48:e5:21:44:a9:c0:ab:b1:e0:
22:01:16:a6:cf:e3:d9:6e:ee:40:a3:3a:c3:93:87:
e0:29:4e:06:8a:52:10:34:55:1a:b5:35:80:46:f1:
c7:83:6c:3c:fd:ac:8a:77:fe:c1:d4:46:69:84:5b:
7c:6f:94:90:25:b1:e0:8e:dd:44:6a:6d:cc:91:13:
19:36:c5:10:cf:34:36:23:2f:66:a6:c5:1a:1a:0e:
f3:07:e4:25:21:fb:12:37:fd:d9:24:3a:10:e6:eb:
d3:32:06:a0:9c:10:b1:79:b0:1f:47:e2:cd:e5:96:
89:dd:b0:d2:5e:ab:69:32:74:8b:be:0f:92:93:0c:
80:cd:f6:50:58:09:15:83:aa:5e:7b:28:a9:40:b7:
fc:12:35:74:d9:17:70:bf:31:e2:e2:13:e8:0e:53:
f1:b7:c2:a9:ea:c6:62:9f:05:d5:1a:06:24:83:41:
03:a3:6f:bc:90:9b:27:b0:de:61:c7:b4:4a:3b:2b:
69:f0:03:9e:90:89:b1:92:4e:b7:94:69:c6:52:e9:
d5:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:29:99:FD:AD:80:EC:7F:FA:82:7A:34:1F:BC:23:83:4D:8C:E0:93
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/ySmZ_a2A7H_6gno0H7wjg02M4JM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:e0a0::/44
Signature Algorithm: sha256WithRSAEncryption
1d:86:fa:32:db:21:95:ef:ac:37:59:2f:44:e3:1a:94:66:4e:
49:69:f2:dd:c9:9a:f0:4a:2f:4a:5b:cd:fa:5b:14:e4:08:a4:
5b:32:30:d3:8f:af:60:43:e9:e6:16:78:c6:07:0e:9c:19:34:
14:22:96:46:68:e4:b6:ec:e9:65:1b:da:4a:b3:28:d6:5e:e2:
67:a4:76:2f:c1:ad:9f:ba:9e:0c:ce:bd:e5:4c:31:86:75:66:
1e:65:fb:21:06:93:63:c8:6a:6b:a4:f2:2a:38:e6:66:0f:54:
65:22:2d:8d:7c:99:8d:7b:8b:b9:9e:f1:ba:a4:c3:71:7e:e5:
c5:cf:de:80:4c:50:b6:9f:68:42:d5:f3:e4:69:b4:73:f2:51:
b7:a5:0a:18:39:20:fe:16:7d:9b:80:c4:61:99:45:33:8e:63:
3d:98:ec:89:2c:fc:91:d4:00:8a:34:03:0d:b4:f4:d2:d5:ba:
6c:17:26:aa:74:d7:17:81:49:f8:1e:02:84:75:66:3f:eb:13:
2c:e7:58:39:e6:d2:9f:2e:9e:3e:54:9e:50:e4:d0:21:5c:d2:
0f:d2:9e:e3:f8:fb:a7:29:73:17:82:aa:8c:39:6c:c4:8e:21:
b0:2d:ae:c7:27:cd:2c:6f:59:de:29:c1:50:dd:50:62:fa:51:
72:5a:e4:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 08:37:45 2026 by rpki-client