Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/d073f1-96ed-4b35-a3f4-f8307779945b/1/bYlwrMMouNe0wX8geEjx6w5BJcQ.roa
File: bYlwrMMouNe0wX8geEjx6w5BJcQ.roa (raw, json)
Hash identifier: L0irFgfGqAy5AaADSGRWA2XK+/VEh5b8QXvaP7jtIlM=
Subject key identifier: 6D:89:70:AC:C3:28:B8:D7:B4:C1:7F:20:78:48:F1:EB:0E:41:25:C4
Certificate issuer: /CN=a0419d46092e4498c8980f72741dc80812958913
Certificate serial: 019F2368B0F4853048FE84069E5324F89613
Authority key identifier: A0:41:9D:46:09:2E:44:98:C8:98:0F:72:74:1D:C8:08:12:95:89:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oEGdRgkuRJjImA9ydB3ICBKViRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/d073f1-96ed-4b35-a3f4-f8307779945b/1/bYlwrMMouNe0wX8geEjx6w5BJcQ.roa
Signing time: Thu 02 Jul 2026 15:18:11 +0000
ROA not before: Thu 02 Jul 2026 15:18:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12792
IP address blocks: 2a0a:e140::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/d073f1-96ed-4b35-a3f4-f8307779945b/1/oEGdRgkuRJjImA9ydB3ICBKViRM.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/d073f1-96ed-4b35-a3f4-f8307779945b/1/oEGdRgkuRJjImA9ydB3ICBKViRM.mft
rsync://rpki.ripe.net/repository/DEFAULT/oEGdRgkuRJjImA9ydB3ICBKViRM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:b0:f4:85:30:48:fe:84:06:9e:53:24:f8:96:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0419d46092e4498c8980f72741dc80812958913
Validity
Not Before: Jul 2 15:18:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6d8970acc328b8d7b4c17f207848f1eb0e4125c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c3:2b:9b:59:5e:6d:3e:52:f3:0c:0e:66:70:
20:73:72:72:9c:aa:80:39:e4:85:d7:89:0f:f9:96:
7d:d1:b3:75:22:b1:c8:a0:2e:83:1b:6d:9a:9a:31:
56:e9:76:36:92:01:e4:cd:a7:e2:29:a0:a3:12:bf:
06:21:3b:55:ed:5b:d7:bd:ae:5e:cd:fd:2c:99:3a:
36:68:97:85:9b:25:8b:44:81:35:99:ad:b8:a5:03:
dd:64:8a:94:77:5b:f8:d8:17:25:9e:97:75:07:59:
31:ca:3e:2f:d3:a4:d6:37:e1:79:2a:5e:c2:46:3e:
cb:95:a0:7c:f7:55:39:3a:98:9b:15:fd:0f:b9:17:
10:d5:96:7d:f4:83:3d:9f:94:af:c0:27:ab:65:55:
c8:0c:9b:be:6e:4f:22:a1:3b:ab:13:76:67:b0:4b:
90:e8:52:f2:7d:b1:8a:20:10:75:00:c6:35:c4:37:
99:26:35:16:8e:fb:2e:fa:61:27:3b:26:b1:38:99:
af:40:5a:b9:08:00:e2:05:63:36:3b:77:e3:8a:4c:
47:d7:a1:99:c7:c6:15:83:38:6e:7e:19:a0:94:2d:
a4:3f:4b:52:b7:15:e1:44:af:d3:dd:41:7d:be:3f:
1d:78:69:20:1b:5b:68:9e:6a:4c:58:92:75:7c:84:
c8:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:89:70:AC:C3:28:B8:D7:B4:C1:7F:20:78:48:F1:EB:0E:41:25:C4
X509v3 Authority Key Identifier:
keyid:A0:41:9D:46:09:2E:44:98:C8:98:0F:72:74:1D:C8:08:12:95:89:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oEGdRgkuRJjImA9ydB3ICBKViRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d073f1-96ed-4b35-a3f4-f8307779945b/1/bYlwrMMouNe0wX8geEjx6w5BJcQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d073f1-96ed-4b35-a3f4-f8307779945b/1/oEGdRgkuRJjImA9ydB3ICBKViRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:e140::/29
Signature Algorithm: sha256WithRSAEncryption
1b:4f:4e:90:97:a7:3d:d6:56:2a:38:3d:bc:7e:fa:05:59:1f:
8f:f2:10:a1:b3:cd:53:63:be:9a:af:5d:6e:1d:ee:2a:b6:8c:
d1:54:62:12:41:9f:38:af:80:19:42:72:26:d3:b2:d7:85:cf:
71:49:05:12:7f:9b:c1:39:ea:71:77:7a:3e:10:05:9f:64:4e:
3f:84:55:bb:7f:c0:62:bc:0a:54:0d:c2:24:77:6b:22:85:71:
6e:78:85:d8:ae:91:3c:a3:4a:45:23:59:20:3c:38:0b:ec:73:
74:a7:59:d3:ab:1e:6f:9d:69:f8:0f:48:a9:54:68:8f:00:c0:
62:4e:0b:4c:5e:de:e3:a0:18:19:63:3c:83:ae:5a:ce:0a:b9:
56:09:e9:36:72:f6:28:76:8f:6b:bc:f3:58:7e:b9:92:2f:84:
9f:ee:70:6c:44:02:fd:eb:8a:02:96:30:48:41:e2:f5:e7:42:
83:6d:03:a3:b4:cd:ad:4a:9c:e5:48:8b:08:75:70:af:21:38:
59:54:f8:90:0d:76:b3:4d:bf:1a:5f:89:8e:51:38:a7:91:e1:
97:9d:12:f9:13:18:ee:a5:4a:54:f2:9e:f1:22:ef:be:11:a4:
07:d8:53:aa:f8:76:67:2b:03:19:57:ad:21:cb:44:75:d4:7f:
4b:03:8a:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:14:39 2026 by rpki-client