Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/675399-81be-4fec-9f86-55131cc1efea/1/yOLIkYkij4lfgAP24UayKikeBzk.roa
File: yOLIkYkij4lfgAP24UayKikeBzk.roa (raw, json)
Hash identifier: 7gmVoPjBYJzfEDhfSMctp0lOvJ+CyhzzxGbFh2ljSD4=
Subject key identifier: C8:E2:C8:91:89:22:8F:89:5F:80:03:F6:E1:46:B2:2A:29:1E:07:39
Certificate issuer: /CN=ef1f01881b73c8e9b5d92239229a6e512eca4e7c
Certificate serial: 019F66FC1F2AEF5E79AC7B3535945C69C2C0
Authority key identifier: EF:1F:01:88:1B:73:C8:E9:B5:D9:22:39:22:9A:6E:51:2E:CA:4E:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7x8BiBtzyOm12SI5IppuUS7KTnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/675399-81be-4fec-9f86-55131cc1efea/1/yOLIkYkij4lfgAP24UayKikeBzk.roa
Signing time: Wed 15 Jul 2026 18:13:46 +0000
ROA not before: Wed 15 Jul 2026 18:13:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 54113
IP address blocks: 2a00:8c40:f000::/44 maxlen: 44
2a00:8c40:f010::/44 maxlen: 44
2a00:8c40:f020::/44 maxlen: 44
2a00:8c40:f030::/44 maxlen: 44
2a00:8c40:f040::/44 maxlen: 44
2a00:8c40:f050::/44 maxlen: 44
2a00:8c40:f060::/44 maxlen: 44
2a00:8c40:f070::/44 maxlen: 44
2a00:8c40:f080::/44 maxlen: 44
2a00:8c40:f090::/44 maxlen: 44
2a00:8c40:f0a0::/44 maxlen: 44
2a00:8c40:f0b0::/44 maxlen: 44
2a00:8c40:f0c0::/44 maxlen: 44
2a00:8c40:f0d0::/44 maxlen: 44
2a00:8c40:f0e0::/44 maxlen: 44
2a00:8c40:f0f0::/44 maxlen: 44
2a00:8c40:f100::/44 maxlen: 44
2a00:8c40:f110::/44 maxlen: 44
2a00:8c40:f120::/44 maxlen: 44
2a00:8c40:f130::/44 maxlen: 44
2a00:8c40:f140::/44 maxlen: 44
2a00:8c40:f150::/44 maxlen: 44
2a00:8c40:f160::/44 maxlen: 44
2a00:8c40:f170::/44 maxlen: 44
2a00:8c40:f180::/44 maxlen: 44
2a00:8c40:f190::/44 maxlen: 44
2a00:8c40:f1a0::/44 maxlen: 44
2a00:8c40:f1b0::/44 maxlen: 44
2a00:8c40:f1c0::/44 maxlen: 44
2a00:8c40:f1d0::/44 maxlen: 44
2a00:8c40:f1e0::/44 maxlen: 44
2a00:8c40:f1f0::/44 maxlen: 44
2a00:8c40:f200::/44 maxlen: 44
2a00:8c40:f210::/44 maxlen: 44
2a00:8c40:f220::/44 maxlen: 44
2a00:8c40:f230::/44 maxlen: 44
2a00:8c40:f240::/44 maxlen: 44
2a00:8c40:f250::/44 maxlen: 44
2a00:8c40:f260::/44 maxlen: 44
2a00:8c40:f270::/44 maxlen: 44
2a00:8c40:f280::/44 maxlen: 44
2a00:8c40:f290::/44 maxlen: 44
2a00:8c40:f2a0::/44 maxlen: 44
2a00:8c40:f2b0::/44 maxlen: 44
2a00:8c40:f2c0::/44 maxlen: 44
2a00:8c40:f2d0::/44 maxlen: 44
2a00:8c40:f2e0::/44 maxlen: 44
2a00:8c40:f2f0::/44 maxlen: 44
2a00:8c40:f300::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/675399-81be-4fec-9f86-55131cc1efea/1/7x8BiBtzyOm12SI5IppuUS7KTnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/675399-81be-4fec-9f86-55131cc1efea/1/7x8BiBtzyOm12SI5IppuUS7KTnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/7x8BiBtzyOm12SI5IppuUS7KTnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:66:fc:1f:2a:ef:5e:79:ac:7b:35:35:94:5c:69:c2:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef1f01881b73c8e9b5d92239229a6e512eca4e7c
Validity
Not Before: Jul 15 18:13:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c8e2c89189228f895f8003f6e146b22a291e0739
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b9:bc:64:ee:e8:07:57:8c:8d:47:6c:b2:7a:
c7:f9:66:71:ca:11:f4:38:18:85:2f:5d:ac:f9:c8:
32:e9:ef:27:33:0f:78:20:ca:9c:18:bf:56:f6:38:
ab:67:8f:50:ee:ab:10:a0:4d:91:88:b2:39:a3:81:
90:e3:9e:4e:92:bc:3f:ae:2b:4a:9c:d1:64:06:3b:
7d:f4:77:f4:0e:d9:c8:b6:eb:1e:09:f7:11:21:07:
f9:b1:51:79:2c:c1:ef:50:98:a8:41:e8:46:68:b9:
dd:61:82:e9:e2:a6:7f:64:ec:24:e2:89:18:f1:4f:
60:70:84:f2:a6:4d:3f:a8:27:5a:8b:a3:9f:89:08:
36:38:81:13:c8:44:a5:f1:96:51:2f:87:d5:b7:6a:
05:c4:05:8d:43:3e:e8:d9:05:96:79:5c:77:10:9b:
d4:ef:a7:0b:a1:ee:2d:1f:54:87:d8:69:eb:a3:78:
ba:d5:95:e4:47:6e:64:65:6d:76:df:fe:92:cb:22:
72:1c:e7:37:d8:cb:e5:c0:d3:e3:ae:8b:59:ce:9f:
b4:06:f8:e4:93:04:b1:35:8a:cc:49:a4:d3:44:0e:
ad:01:37:9a:62:d4:d4:91:23:8c:38:01:3f:37:9d:
3f:92:7a:d1:e5:12:31:8a:dc:02:b8:04:b7:c9:37:
4e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:E2:C8:91:89:22:8F:89:5F:80:03:F6:E1:46:B2:2A:29:1E:07:39
X509v3 Authority Key Identifier:
keyid:EF:1F:01:88:1B:73:C8:E9:B5:D9:22:39:22:9A:6E:51:2E:CA:4E:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7x8BiBtzyOm12SI5IppuUS7KTnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/675399-81be-4fec-9f86-55131cc1efea/1/yOLIkYkij4lfgAP24UayKikeBzk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/675399-81be-4fec-9f86-55131cc1efea/1/7x8BiBtzyOm12SI5IppuUS7KTnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:8c40:f000::-2a00:8c40:f30f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
36:f7:39:b5:80:db:00:5e:d4:94:a2:26:13:da:0b:90:1d:60:
82:7e:d1:c0:89:e4:2f:f9:9f:08:f4:ad:7c:31:5c:5a:9a:77:
9b:e1:55:34:ef:64:91:82:39:8a:b5:42:a1:c7:49:a9:40:ef:
fb:59:b9:33:6c:d9:04:de:66:0a:f5:2e:de:71:a9:6a:2d:b7:
37:82:62:e7:f3:a6:1f:53:1b:d3:81:ff:d0:63:1b:d6:6b:2f:
60:b1:e4:3f:74:b7:e7:74:88:10:06:55:cd:25:af:bd:06:86:
81:93:f6:0a:c3:1a:02:3b:f3:25:50:2c:a9:d6:cd:81:f3:92:
14:71:55:cf:fc:c6:51:9b:e6:79:cb:35:15:53:07:3f:f6:db:
cf:c4:f7:2f:b1:9c:1f:80:93:cd:bd:fa:39:b5:6c:06:58:d3:
98:7f:fa:fb:84:82:f2:ce:56:23:d1:f8:f3:a7:ab:b2:19:c8:
52:b8:3b:28:6a:0f:38:01:26:bf:60:aa:0a:6c:bb:bf:52:9d:
86:a2:e5:a1:6f:c8:2f:85:ac:98:f6:55:50:d1:89:f5:7d:75:
e9:a3:33:6d:a0:b8:86:90:aa:ea:a7:49:c3:28:f2:0c:98:2b:
a0:8f:74:59:28:65:dd:e6:9d:17:20:0d:67:14:4d:6f:1b:0f:
2b:d5:4c:c3
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:46:57 2026 by rpki-client