Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/yvYPv0ykRiBdjMwGabziJqeOXU4.roa
File: yvYPv0ykRiBdjMwGabziJqeOXU4.roa (raw, json)
Hash identifier: KKHBPGX0kHiJVFuZGjvEQD4GCNYkY+L8lCAAW4rk0Rc=
Subject key identifier: CA:F6:0F:BF:4C:A4:46:20:5D:8C:CC:06:69:BC:E2:26:A7:8E:5D:4E
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 01A17F55675DDDBD89E277686C73EDB9B38E
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/yvYPv0ykRiBdjMwGabziJqeOXU4.roa
Signing time: Tue 27 Oct 2026 21:47:45 +0000
ROA not before: Tue 27 Oct 2026 21:47:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218266
IP address blocks: 2a0c:9a40:e1b0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 03:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7f:55:67:5d:dd:bd:89:e2:77:68:6c:73:ed:b9:b3:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Oct 27 21:47:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=caf60fbf4ca446205d8ccc0669bce226a78e5d4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:48:f6:8a:39:ae:4a:a5:02:9d:81:e0:04:37:
6f:85:54:63:c3:8b:7a:01:3c:51:56:92:ff:77:36:
17:ac:4c:bf:d4:cc:0a:94:c6:fa:30:bf:1b:15:da:
54:64:1f:cb:73:c9:07:31:40:d2:df:ca:11:92:29:
5d:5d:44:f9:60:88:dc:85:09:7a:2c:64:36:85:46:
6a:6f:07:c6:46:6d:c0:2c:c0:f6:e0:92:1b:d5:89:
e4:bc:9f:b3:7a:5e:9e:f6:21:1c:ac:b3:54:a0:ff:
b4:12:1c:42:1f:77:5d:09:38:f5:d4:6f:23:5e:a6:
b2:7e:bd:78:01:b8:5c:41:14:fa:14:be:4d:f2:e4:
ca:a3:d3:d5:01:1e:b7:f8:98:a1:2f:fa:cc:a4:d2:
13:2b:f6:57:13:bd:5c:1a:78:22:35:26:e6:94:11:
b4:e2:e3:79:eb:50:a8:e3:23:98:44:92:4b:88:fa:
4c:27:24:5a:45:c9:dc:ca:30:4f:d4:3c:5f:76:f8:
7d:ee:0a:66:0e:d1:00:10:84:82:6b:4b:39:fd:45:
fe:d1:27:48:94:4a:4d:c9:61:17:33:46:82:bc:7f:
65:31:f7:bf:6c:c6:7d:2c:bd:e8:54:82:92:b7:66:
95:4b:26:25:fa:08:fa:b1:71:0a:d4:e9:43:4b:49:
43:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:F6:0F:BF:4C:A4:46:20:5D:8C:CC:06:69:BC:E2:26:A7:8E:5D:4E
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/yvYPv0ykRiBdjMwGabziJqeOXU4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:e1b0::/48
Signature Algorithm: sha256WithRSAEncryption
8c:46:e0:59:ec:07:12:bf:25:d1:d9:7f:8e:29:4f:08:d9:af:
23:72:22:5f:5b:67:a1:b5:be:be:bd:50:9c:03:07:41:78:33:
71:52:da:0b:3e:38:d0:de:1c:39:bd:fa:d0:a7:93:0e:14:71:
1c:36:03:2f:1f:0a:fb:be:55:81:dd:3e:32:ac:7e:cf:33:eb:
3d:b8:fe:fd:7c:94:54:76:1e:5b:e6:9c:90:94:d7:3d:14:ab:
f3:2a:28:3c:5b:d6:cb:13:65:c1:c3:05:d1:db:a3:13:5c:23:
9a:de:41:88:37:0d:af:18:23:44:a3:30:8a:da:34:b4:b2:3b:
c0:78:c0:ad:f0:91:ab:bf:f6:c4:15:0b:e6:0a:2e:82:ac:d8:
21:d0:88:cc:70:f7:7b:0f:30:bb:74:20:11:f2:2f:8e:82:b1:
38:8a:9e:f6:fc:b1:fa:c7:f6:90:14:c2:91:e3:1d:6b:5a:48:
7e:52:34:3e:42:25:95:60:44:9b:30:14:32:38:c5:d0:9e:52:
13:d8:00:69:20:b3:09:05:e8:f7:68:d5:24:f4:0c:64:67:d8:
75:a7:48:4c:c7:6b:08:fd:57:c6:56:55:17:a3:07:27:31:32:
34:fd:a8:78:94:67:5a:81:4e:06:e6:c7:ce:f1:10:9a:62:8c:
ea:2f:3e:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:35:52 2026 by rpki-client