Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/d27808-0ba7-47d0-90e5-9df59f44a3c5/1/yWQ8Y4v3PEg5DeHoWJUCs-F-6yQ.roa
File: yWQ8Y4v3PEg5DeHoWJUCs-F-6yQ.roa (raw, json)
Hash identifier: RGL/uaPbj1P9rnlKrXMsj0QrwOf5G6N6ob7tSgI7xu4=
Subject key identifier: C9:64:3C:63:8B:F7:3C:48:39:0D:E1:E8:58:95:02:B3:E1:7E:EB:24
Certificate issuer: /CN=65f699cb0a9fe1096e6d688b9b1365b2d3c14081
Certificate serial: 019F694E4C9C596522F4D6669E8878E8EDF7
Authority key identifier: 65:F6:99:CB:0A:9F:E1:09:6E:6D:68:8B:9B:13:65:B2:D3:C1:40:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZfaZywqf4QlubWiLmxNlstPBQIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/d27808-0ba7-47d0-90e5-9df59f44a3c5/1/yWQ8Y4v3PEg5DeHoWJUCs-F-6yQ.roa
Signing time: Thu 16 Jul 2026 05:02:46 +0000
ROA not before: Thu 16 Jul 2026 05:02:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219240
IP address blocks: 2001:67c:644::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/d27808-0ba7-47d0-90e5-9df59f44a3c5/1/ZfaZywqf4QlubWiLmxNlstPBQIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/d27808-0ba7-47d0-90e5-9df59f44a3c5/1/ZfaZywqf4QlubWiLmxNlstPBQIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZfaZywqf4QlubWiLmxNlstPBQIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:69:4e:4c:9c:59:65:22:f4:d6:66:9e:88:78:e8:ed:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65f699cb0a9fe1096e6d688b9b1365b2d3c14081
Validity
Not Before: Jul 16 05:02:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c9643c638bf73c48390de1e8589502b3e17eeb24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:95:bb:d7:ca:cd:8f:2f:4f:b1:19:46:80:79:
0f:42:26:3e:9c:09:27:b0:cc:01:4f:66:a8:ec:f7:
02:77:52:fa:d3:0b:9c:47:44:f7:e8:ee:23:55:2a:
dd:1a:bd:74:65:eb:50:2b:10:7a:3b:41:15:3d:de:
99:92:e9:91:2c:49:fb:aa:51:7c:fd:5c:65:dd:25:
9d:64:34:4a:23:e8:af:83:56:f2:a6:3c:c8:a3:bd:
bc:63:0f:fe:ba:e8:50:08:76:81:15:30:4c:11:ac:
98:ff:a7:05:bd:7d:b6:8a:18:95:ba:96:25:08:3f:
c4:0a:c1:87:74:1d:c7:88:25:ab:1b:5c:e7:52:62:
07:1f:30:68:e7:f0:29:5d:6e:b0:79:94:2b:55:23:
af:f3:7a:22:68:e5:39:7d:85:04:c1:a6:21:37:79:
00:59:83:77:fd:d3:74:8f:07:41:ba:f6:f7:15:4c:
53:df:9a:78:e2:d9:4a:28:5e:c2:e8:52:96:c2:77:
32:6b:b2:04:bd:a9:dd:a2:bc:87:1e:bf:f8:55:33:
7f:de:f1:19:9a:92:c9:ab:40:69:79:9c:14:8d:b2:
c8:bf:c4:77:82:78:b8:4d:c1:44:8a:c6:e8:b1:9e:
0f:05:ae:b9:7d:c1:b7:5f:ca:12:0b:ac:9c:17:72:
6e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:64:3C:63:8B:F7:3C:48:39:0D:E1:E8:58:95:02:B3:E1:7E:EB:24
X509v3 Authority Key Identifier:
keyid:65:F6:99:CB:0A:9F:E1:09:6E:6D:68:8B:9B:13:65:B2:D3:C1:40:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZfaZywqf4QlubWiLmxNlstPBQIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d27808-0ba7-47d0-90e5-9df59f44a3c5/1/yWQ8Y4v3PEg5DeHoWJUCs-F-6yQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d27808-0ba7-47d0-90e5-9df59f44a3c5/1/ZfaZywqf4QlubWiLmxNlstPBQIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:644::/48
Signature Algorithm: sha256WithRSAEncryption
05:b1:81:0e:a2:82:23:35:c9:8c:f2:8a:ea:21:61:92:5f:6c:
04:86:16:f1:6f:16:ec:e4:32:5a:f7:0c:94:93:bf:bf:51:02:
d7:3c:bd:d8:62:bc:4d:8c:6c:1a:9c:9b:84:8b:4e:ff:cb:51:
09:20:68:d5:c7:40:43:5e:f2:d2:87:1c:39:eb:db:92:85:0d:
c5:26:53:7a:1c:bf:17:3b:1e:65:57:e4:90:da:a3:62:ec:a2:
a5:c9:53:dc:af:1e:51:a4:53:ec:00:b6:f9:01:4f:0f:ec:d4:
ef:20:d5:47:89:3f:38:3e:2f:ff:70:08:9c:ec:e0:cf:f1:28:
cb:fb:df:fe:fd:ac:08:75:00:45:e0:22:38:52:82:9e:de:d2:
b9:31:e9:fd:7f:00:a0:b0:9c:06:6c:d5:50:b0:8f:e4:55:97:
8e:c0:61:0d:4d:b2:2a:4f:37:ce:2c:c9:0e:fe:b7:eb:8a:ce:
f3:84:8e:dd:5f:d6:28:68:bf:92:78:58:ab:76:3e:72:73:44:
42:f9:57:65:e2:ca:60:a7:21:8b:ef:80:b2:f9:a0:0a:ab:2f:
a3:d3:47:1e:f0:19:86:ae:20:8f:97:58:fa:81:f3:ee:1b:f2:
39:bf:4c:65:f6:bc:da:10:8b:11:95:20:6a:b9:ac:29:5c:99:
a1:93:e0:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:00:55 2026 by rpki-client