Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/YuXGy4DeeKK817s02xmtLVstl_M.roa
File: YuXGy4DeeKK817s02xmtLVstl_M.roa (raw, json)
Hash identifier: 3pU1tPDQwQuNiKFX6sho9jHiT+VzWttOjYDmMxptk5w=
Subject key identifier: 62:E5:C6:CB:80:DE:78:A2:BC:D7:BB:34:DB:19:AD:2D:5B:2D:97:F3
Certificate issuer: /CN=4fd642102ebdd7f2268c14c27e3ebbf26b4cafeb
Certificate serial: 019E1BFA6B4C3531CB7DABD4C4F62D6BF689
Authority key identifier: 4F:D6:42:10:2E:BD:D7:F2:26:8C:14:C2:7E:3E:BB:F2:6B:4C:AF:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T9ZCEC691_ImjBTCfj678mtMr-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/YuXGy4DeeKK817s02xmtLVstl_M.roa
Signing time: Tue 12 May 2026 11:37:36 +0000
ROA not before: Tue 12 May 2026 11:37:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 2a07:e000:6::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/T9ZCEC691_ImjBTCfj678mtMr-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/T9ZCEC691_ImjBTCfj678mtMr-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/T9ZCEC691_ImjBTCfj678mtMr-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 05:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1b:fa:6b:4c:35:31:cb:7d:ab:d4:c4:f6:2d:6b:f6:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fd642102ebdd7f2268c14c27e3ebbf26b4cafeb
Validity
Not Before: May 12 11:37:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=62e5c6cb80de78a2bcd7bb34db19ad2d5b2d97f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a9:c0:24:6f:b5:89:c1:86:3a:a8:f8:37:bf:
41:8d:d2:02:2c:ea:1f:9c:51:60:7a:d8:71:14:0b:
c9:f2:27:51:b6:1b:4c:91:b3:7a:b4:75:1a:70:24:
5a:0b:e6:3b:94:3a:04:f6:14:f1:d8:6d:d4:fe:c9:
8b:33:02:91:8c:03:22:b9:13:37:88:8d:27:31:2f:
1f:00:88:f7:6f:43:f6:42:24:9e:37:b3:77:32:eb:
07:fc:55:b6:a0:14:3c:2b:fd:8a:96:3f:53:4f:11:
19:de:a7:c7:6c:16:01:45:67:94:0f:1e:d8:ef:ac:
7e:5e:4b:01:19:69:3c:d8:25:96:fe:cf:32:cd:38:
fd:a4:e8:96:56:8e:9b:6d:34:5f:fc:2d:67:8a:6d:
0e:56:52:bd:b2:db:5a:86:78:47:41:df:f1:7f:42:
8d:eb:0b:54:d1:63:82:e5:ec:4d:27:30:a2:ab:83:
e1:ca:5f:3d:f4:0b:2a:c9:e6:e1:1b:eb:37:39:d2:
65:65:81:ee:e7:87:50:c8:2d:c6:bd:2f:eb:dc:7e:
0f:83:de:3e:ad:d1:3a:5b:f7:57:e2:b8:ca:b4:78:
d2:32:4e:64:e7:65:f2:3e:19:2b:50:a2:33:7a:d3:
e1:03:eb:57:4c:9c:b1:4e:45:00:fd:fd:d3:ba:08:
b7:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:E5:C6:CB:80:DE:78:A2:BC:D7:BB:34:DB:19:AD:2D:5B:2D:97:F3
X509v3 Authority Key Identifier:
keyid:4F:D6:42:10:2E:BD:D7:F2:26:8C:14:C2:7E:3E:BB:F2:6B:4C:AF:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T9ZCEC691_ImjBTCfj678mtMr-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/YuXGy4DeeKK817s02xmtLVstl_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/T9ZCEC691_ImjBTCfj678mtMr-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:e000:6::/48
Signature Algorithm: sha256WithRSAEncryption
6b:11:9f:83:08:4e:fa:7e:cf:f5:54:e4:90:33:41:23:ea:0b:
22:a6:b5:53:13:a0:88:48:af:85:ba:8f:fd:4a:06:c6:d5:9b:
b1:14:07:50:a3:48:75:23:2e:06:c7:16:a1:06:03:64:62:b8:
b9:49:56:3e:14:13:61:d4:a2:8c:52:64:eb:c0:62:4f:76:fb:
51:f3:d3:1f:39:d6:b3:26:83:5d:bf:21:77:7e:9f:89:c1:ab:
52:0f:42:51:78:c6:ee:37:8f:2f:65:62:cf:fe:78:c9:77:0f:
fd:0d:67:e3:16:bd:c5:d7:54:d7:e5:ad:d0:4b:00:2e:5f:dd:
4c:d5:d0:4d:93:85:03:10:1e:32:fd:15:15:c2:53:98:85:33:
30:c0:d0:34:89:f3:7c:7a:7f:bd:1c:f4:81:86:76:92:00:6d:
a5:73:10:5c:64:f5:1f:ac:fa:42:4e:21:b9:f3:e8:4b:f3:5e:
0f:c2:7d:77:ad:f4:df:a4:2c:13:a3:de:cd:4e:ed:34:ee:d0:
11:ff:0e:19:b2:c8:6d:93:be:fd:52:e2:43:f9:57:14:75:ef:
ca:b4:d1:36:24:0b:20:0f:6f:c6:67:44:c2:20:c0:33:97:12:
57:e1:5f:a6:b3:3f:93:4e:40:e8:de:6b:76:e7:fd:70:d5:d6:
74:c4:96:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:09:26 2026 by rpki-client