Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/322ec7-2131-4db4-8755-8b8b2ac56c9b/1/YShuNOXQFvKeOXSwyuWSycCUmwc.roa
File: YShuNOXQFvKeOXSwyuWSycCUmwc.roa (raw, json)
Hash identifier: MI6CjCX0eXRFyaP7CBwJIslsMJG5es9eXVUd90Gski0=
Subject key identifier: 61:28:6E:34:E5:D0:16:F2:9E:39:74:B0:CA:E5:92:C9:C0:94:9B:07
Certificate issuer: /CN=7cc8bacbe73a40ce818a4bafa393a85297c19c0d
Certificate serial: 019F615DC753DCA0C45BD67C32ECB35F1D7F
Authority key identifier: 7C:C8:BA:CB:E7:3A:40:CE:81:8A:4B:AF:A3:93:A8:52:97:C1:9C:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fMi6y-c6QM6Bikuvo5OoUpfBnA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/322ec7-2131-4db4-8755-8b8b2ac56c9b/1/YShuNOXQFvKeOXSwyuWSycCUmwc.roa
Signing time: Tue 14 Jul 2026 16:02:43 +0000
ROA not before: Tue 14 Jul 2026 16:02:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56718
IP address blocks: 2a05:9780::/32 maxlen: 32
2a05:9780::/40 maxlen: 40
2a05:9780:200::/40 maxlen: 40
2a05:9786::/32 maxlen: 32
2a05:9787::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/322ec7-2131-4db4-8755-8b8b2ac56c9b/1/fMi6y-c6QM6Bikuvo5OoUpfBnA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/322ec7-2131-4db4-8755-8b8b2ac56c9b/1/fMi6y-c6QM6Bikuvo5OoUpfBnA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/fMi6y-c6QM6Bikuvo5OoUpfBnA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:61:5d:c7:53:dc:a0:c4:5b:d6:7c:32:ec:b3:5f:1d:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cc8bacbe73a40ce818a4bafa393a85297c19c0d
Validity
Not Before: Jul 14 16:02:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=61286e34e5d016f29e3974b0cae592c9c0949b07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:17:a8:7a:e7:ef:2c:a5:2c:c7:c1:89:6f:be:
38:ba:63:0b:1e:f9:df:50:9d:44:c3:73:31:6c:82:
59:f9:4e:79:62:3c:86:f1:79:ee:32:ac:c4:9a:26:
52:2f:29:ad:fc:70:04:27:4c:d7:16:9b:f1:82:29:
47:b4:76:ac:c5:02:1a:cc:1c:73:cb:ca:bc:4d:eb:
58:9e:7d:cc:7a:f4:bd:c1:d4:a9:aa:7c:61:b2:c1:
8d:6e:22:b3:a3:fe:1e:ef:c6:52:72:6a:4a:03:72:
5f:0d:00:96:2a:4a:ff:d4:55:82:fd:5a:27:cc:f3:
f9:2a:71:88:40:8a:7f:91:14:53:51:67:06:05:ff:
4f:c8:46:69:86:0c:c8:05:c9:e5:a8:70:94:05:15:
58:3f:70:29:19:22:b3:db:03:04:9e:7f:a1:e2:1a:
66:04:a4:23:01:d2:cc:fc:a7:b7:4d:07:04:ce:ae:
46:fa:a1:26:c1:04:e6:bd:8d:c4:43:69:13:c9:75:
f9:a0:05:dc:5d:f9:ff:85:a6:55:3e:d1:3d:3e:ad:
01:95:a8:ad:6a:32:07:c5:81:ac:c9:c4:a7:8b:71:
e2:b3:67:b7:ea:23:3b:17:ba:37:37:f0:16:91:19:
b7:4b:95:e4:c6:34:db:e7:01:d1:b2:0a:0d:61:fe:
f6:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:28:6E:34:E5:D0:16:F2:9E:39:74:B0:CA:E5:92:C9:C0:94:9B:07
X509v3 Authority Key Identifier:
keyid:7C:C8:BA:CB:E7:3A:40:CE:81:8A:4B:AF:A3:93:A8:52:97:C1:9C:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fMi6y-c6QM6Bikuvo5OoUpfBnA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/322ec7-2131-4db4-8755-8b8b2ac56c9b/1/YShuNOXQFvKeOXSwyuWSycCUmwc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/322ec7-2131-4db4-8755-8b8b2ac56c9b/1/fMi6y-c6QM6Bikuvo5OoUpfBnA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:9780::/32
2a05:9786::/31
Signature Algorithm: sha256WithRSAEncryption
a6:98:65:db:77:e7:87:95:15:d6:5e:8f:19:72:6b:94:9d:c2:
4e:76:16:84:cb:2f:72:9d:04:a4:cc:19:ec:19:9e:35:6d:23:
75:04:c8:50:00:4b:85:87:8f:e7:5b:34:7b:5a:a3:28:46:53:
70:2d:0b:6b:69:f9:37:59:2f:4e:80:64:09:a0:24:2d:71:92:
92:78:be:55:85:96:73:3b:8e:f2:ce:23:46:a6:08:8c:15:df:
a5:19:16:2c:cb:f3:b3:e5:92:9e:e5:f6:50:a6:c9:c5:36:36:
e4:9c:6d:36:68:d5:a8:7a:b8:68:92:e1:da:45:7b:2c:3a:88:
4d:c9:06:af:8a:62:b6:c8:a5:35:d3:96:b3:70:b6:d9:41:31:
ff:e6:81:ad:bb:f0:ff:67:09:c8:2f:b1:aa:65:de:d0:a7:af:
93:7d:6b:89:95:32:90:de:4f:b8:ac:76:99:9b:37:05:04:1e:
5d:e7:81:6c:08:c5:5a:86:f2:89:8a:49:7c:fb:7a:98:df:c0:
b1:90:cd:0e:1c:95:7c:2d:d9:ba:30:35:ed:c9:0d:3f:59:b1:
18:5e:e4:65:ef:7b:13:de:99:7b:9c:f3:c1:17:55:7e:49:8f:
47:f9:68:7a:f7:08:d5:38:37:88:90:a9:50:ad:72:d7:83:14:
42:41:ee:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:17:02 2026 by rpki-client