Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/YM_5gOu8BYAd5jg4_FpShhUcJiQ.roa
File: YM_5gOu8BYAd5jg4_FpShhUcJiQ.roa (raw, json)
Hash identifier: HZ245IywcEsMn/j76i9OE5a8MhkV76mtJ3Hyb+Mgyp4=
Subject key identifier: 60:CF:F9:80:EB:BC:05:80:1D:E6:38:38:FC:5A:52:86:15:1C:26:24
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 019F94DE46C37E935D0154B9005A3A601E94
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/YM_5gOu8BYAd5jg4_FpShhUcJiQ.roa
Signing time: Fri 24 Jul 2026 16:03:42 +0000
ROA not before: Fri 24 Jul 2026 16:03:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48274
IP address blocks: 2a12:9f00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:de:46:c3:7e:93:5d:01:54:b9:00:5a:3a:60:1e:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Jul 24 16:03:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=60cff980ebbc05801de63838fc5a5286151c2624
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6f:fc:06:51:88:35:d1:95:6c:b1:d8:22:1b:
f5:28:ee:0a:6d:8d:35:02:ca:2c:6b:50:30:17:45:
62:09:13:b4:02:ab:45:4f:d7:02:3b:9b:e4:19:cb:
f3:cf:b0:e3:a2:6f:a7:02:f6:81:a9:bc:fc:85:3c:
1a:41:0a:db:d0:1a:04:7f:77:08:70:55:60:8f:dd:
a5:9f:48:91:6c:1c:ad:32:4e:ca:d2:e8:b0:c0:e9:
be:1c:54:af:86:ec:30:0d:25:1b:ac:71:09:b2:fb:
47:70:17:d4:63:8b:ad:c8:6d:b9:c5:f1:06:6c:04:
83:57:1d:b9:a5:a9:6b:c4:03:c9:d6:c6:93:3f:3a:
2d:76:03:63:25:2f:cd:c1:a7:dd:19:bb:a6:1f:d0:
5c:7b:76:52:3b:32:49:fc:6f:14:ef:23:4b:bb:25:
35:1f:67:0b:5f:32:1c:f5:51:de:95:fa:7a:28:a4:
b4:8c:6f:6c:ec:6f:5f:4c:74:4a:0a:d3:6f:bf:59:
72:f0:94:42:df:1b:a3:d5:3f:20:af:31:a2:38:6f:
1b:60:3e:48:07:f6:16:d3:c9:ff:c3:2c:a0:b2:10:
17:df:e2:a3:87:f8:1a:f4:61:a4:10:0d:5f:a1:0a:
60:2c:5b:72:6e:56:4f:25:a9:d4:5c:e9:4c:da:31:
af:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:CF:F9:80:EB:BC:05:80:1D:E6:38:38:FC:5A:52:86:15:1C:26:24
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/YM_5gOu8BYAd5jg4_FpShhUcJiQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:9f00::/29
Signature Algorithm: sha256WithRSAEncryption
0f:6d:d0:bd:70:be:51:bf:4e:2b:72:bb:e2:7d:24:93:07:3e:
f7:fd:33:44:95:3d:24:d7:46:f0:42:0d:94:4a:3b:3f:9e:c1:
00:23:f2:cc:23:2d:c5:c8:93:e9:3c:e6:b1:cc:de:f2:55:f7:
e2:a2:c1:73:a4:3b:6d:68:6f:76:a0:49:fd:de:61:46:20:53:
65:2a:59:09:8c:23:7c:cb:10:51:b7:77:c9:4a:2b:77:ac:d4:
5f:89:1b:3d:20:a6:92:87:5f:a8:d9:a6:dc:b1:78:80:24:60:
10:11:7d:54:48:d8:bb:21:65:0f:a9:cf:71:b9:15:2f:5a:16:
64:68:94:85:3e:5b:0b:52:3f:b6:64:41:fe:fa:59:3b:8f:ec:
5c:00:06:21:5e:4b:e1:2e:a0:e5:1f:be:c8:53:25:b9:9f:16:
0e:7a:a2:c6:30:83:5f:44:75:7b:fe:ee:58:3c:51:b0:de:06:
a6:22:d0:ea:60:7d:95:6e:8f:f1:79:ab:d6:c7:15:8c:0c:55:
3d:16:50:c8:39:37:97:51:2a:2d:83:d6:18:53:18:04:19:75:
1c:cd:3a:01:b7:83:c1:58:ff:72:af:f6:de:38:c3:89:c3:ac:
66:a0:c4:bc:ff:11:7c:8d:bf:05:b2:49:1d:b5:e8:b2:f4:a3:
ab:02:5c:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 03:06:15 2026 by rpki-client