Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dYbDdMuBsyQvL7kdUhtnVt9Qq4Q.roa
File: dYbDdMuBsyQvL7kdUhtnVt9Qq4Q.roa (raw, json)
Hash identifier: Uc1pM7+13084KA3rRz3NbQmC1rtfcHSF9LSKdQS99oU=
Subject key identifier: 75:86:C3:74:CB:81:B3:24:2F:2F:B9:1D:52:1B:67:56:DF:50:AB:84
Certificate issuer: /CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Certificate serial: 019F47F5E151A3C07DA8478B85AF6A0EA041
Authority key identifier: 76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dYbDdMuBsyQvL7kdUhtnVt9Qq4Q.roa
Signing time: Thu 09 Jul 2026 17:38:43 +0000
ROA not before: Thu 09 Jul 2026 17:38:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214483
IP address blocks: 2a11:4ec0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:47:f5:e1:51:a3:c0:7d:a8:47:8b:85:af:6a:0e:a0:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Validity
Not Before: Jul 9 17:38:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7586c374cb81b3242f2fb91d521b6756df50ab84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:19:68:45:54:52:d0:62:a0:13:78:a7:42:73:
7d:3f:3d:49:b5:26:16:d1:ed:22:b7:81:ee:0d:02:
1a:e1:28:f8:18:f9:2e:8d:64:10:50:af:b1:20:4e:
5d:25:ae:eb:88:ad:ae:3c:ac:68:3e:40:7a:7b:5f:
67:6d:c7:10:33:95:3a:8c:d8:f3:38:14:2a:c4:db:
6e:4b:f4:73:26:19:8a:5c:cc:7a:3c:6b:33:1d:40:
d1:96:68:e1:c6:27:36:b7:d0:f5:ea:c8:bc:7b:8b:
e3:15:22:db:73:00:17:75:65:f7:25:bb:5f:4b:30:
24:5a:36:f1:a9:33:6c:6b:bf:e2:10:a0:28:d1:19:
cc:7c:d9:23:5d:a0:a4:60:e8:54:87:40:7a:5d:b1:
85:e4:ec:0b:1d:48:07:0e:bc:7e:d9:9d:3a:ed:67:
8b:93:47:f2:5b:cd:25:46:3b:5c:ba:4a:58:fc:b8:
25:5c:5c:3d:48:3d:c2:d4:34:46:1a:8e:21:0c:fd:
e7:e8:b9:58:a0:9b:0d:89:d5:4e:88:da:af:54:a8:
4a:fe:f0:cb:82:65:04:50:9c:af:08:84:b1:bf:88:
ba:87:01:db:bd:6b:4a:5b:f2:98:91:e7:53:91:ab:
c1:fe:0e:d8:41:bc:51:7c:c6:95:34:61:26:0c:d8:
7d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:86:C3:74:CB:81:B3:24:2F:2F:B9:1D:52:1B:67:56:DF:50:AB:84
X509v3 Authority Key Identifier:
keyid:76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dYbDdMuBsyQvL7kdUhtnVt9Qq4Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:4ec0::/29
Signature Algorithm: sha256WithRSAEncryption
a5:0a:c4:a0:a5:f7:88:68:2e:16:72:6c:64:93:a7:3b:f1:f3:
3f:06:6f:e0:88:40:dd:83:b2:fa:79:58:8b:7d:21:b5:a3:68:
b1:28:f6:a7:0f:09:8d:ba:40:6f:6c:42:e7:e6:25:5d:6a:94:
60:8b:bf:a5:68:0f:37:6f:24:f1:f8:97:59:8d:9d:e6:ec:04:
7b:f2:6d:9f:5f:27:91:0b:8f:de:52:dc:81:26:03:1c:a4:c6:
2a:84:87:20:06:3b:b1:0d:61:e3:7a:e2:08:ee:c3:68:3f:37:
22:52:ab:99:08:50:62:31:e7:61:42:71:b8:fa:ae:3f:b0:82:
e8:6e:ec:00:77:0d:78:68:ec:9f:95:81:67:51:05:da:80:86:
74:8d:10:6d:45:03:60:04:03:73:46:d1:d2:02:bc:d6:bb:69:
8a:40:51:9b:fe:a1:a5:8d:40:b5:01:5e:fa:e7:35:6e:37:55:
e0:5e:da:35:fb:96:64:e1:30:9a:46:18:ed:f6:39:4d:64:03:
7d:b0:a8:ac:7b:4b:4a:02:10:f8:07:f1:42:32:35:74:3b:bc:
16:d5:8f:f6:11:7d:32:31:71:ae:cb:cd:01:ff:6e:1c:2c:5e:
0a:e1:1b:1b:15:79:39:3f:27:bc:7f:64:25:87:90:88:26:73:
37:12:01:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:38:04 2026 by rpki-client