Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/a9206e-c1e1-4c15-9533-ace3d675d3cd/1/yxG_U6JQIIcrFpALA3Q0FlRxRRM.roa
File: yxG_U6JQIIcrFpALA3Q0FlRxRRM.roa (raw, json)
Hash identifier: sCR0T+FP+eVmMckcKFXbsL8e1kdYc/sg61tKHkiV1Sk=
Subject key identifier: CB:11:BF:53:A2:50:20:87:2B:16:90:0B:03:74:34:16:54:71:45:13
Certificate issuer: /CN=f98a02d20c6b7de357125f38b1735ca1b91f87b3
Certificate serial: 019F360B1508A578F4E24D7F074EDB4442AC
Authority key identifier: F9:8A:02:D2:0C:6B:7D:E3:57:12:5F:38:B1:73:5C:A1:B9:1F:87:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-YoC0gxrfeNXEl84sXNcobkfh7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/a9206e-c1e1-4c15-9533-ace3d675d3cd/1/yxG_U6JQIIcrFpALA3Q0FlRxRRM.roa
Signing time: Mon 06 Jul 2026 06:08:43 +0000
ROA not before: Mon 06 Jul 2026 06:08:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210022
IP address blocks: 2a04:2dc0:1d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/a9206e-c1e1-4c15-9533-ace3d675d3cd/1/1-YoC0gxrfeNXEl84sXNcobkfh7M.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/a9206e-c1e1-4c15-9533-ace3d675d3cd/1/1-YoC0gxrfeNXEl84sXNcobkfh7M.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-YoC0gxrfeNXEl84sXNcobkfh7M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:36:0b:15:08:a5:78:f4:e2:4d:7f:07:4e:db:44:42:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f98a02d20c6b7de357125f38b1735ca1b91f87b3
Validity
Not Before: Jul 6 06:08:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cb11bf53a25020872b16900b0374341654714513
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e4:25:eb:91:c9:55:0a:cd:12:f9:d8:34:ac:
f2:7c:55:c2:13:87:b1:3e:a2:c3:24:ae:cf:ca:b7:
d5:89:30:36:d1:75:0d:3f:b7:e5:34:3c:be:35:e2:
a2:0c:71:ee:bd:2e:b1:bf:b8:be:86:c0:08:93:0d:
10:bf:61:fa:d4:66:c5:3c:1c:64:62:8a:11:b8:10:
98:81:60:f4:3e:a9:65:88:00:07:71:45:5e:79:60:
7c:97:fa:9c:92:61:3d:04:b6:72:9e:1a:64:23:cb:
69:a2:80:e8:a3:15:27:2d:15:30:86:28:9b:6f:b4:
dc:f9:8b:c1:f9:6e:fd:8b:23:fa:72:e2:a7:78:6a:
ec:44:28:e8:e9:99:6a:36:d0:87:14:c6:94:7e:15:
2e:4b:fa:bb:46:13:19:d3:eb:d1:1d:eb:eb:c9:b2:
04:83:56:63:dc:55:79:93:83:fd:06:6c:61:7c:46:
d9:f8:b7:8a:0e:04:0a:16:dc:c4:84:41:10:3f:94:
14:05:60:c4:a8:40:e2:79:63:51:bf:6d:84:5e:50:
3f:00:3c:bf:98:60:18:24:13:52:46:67:f0:85:bd:
10:74:21:1d:f5:0f:0a:df:c1:a3:d7:91:8d:5a:6d:
08:d5:20:4e:9f:38:18:23:67:91:26:5f:63:84:c5:
2f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:11:BF:53:A2:50:20:87:2B:16:90:0B:03:74:34:16:54:71:45:13
X509v3 Authority Key Identifier:
keyid:F9:8A:02:D2:0C:6B:7D:E3:57:12:5F:38:B1:73:5C:A1:B9:1F:87:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-YoC0gxrfeNXEl84sXNcobkfh7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a9206e-c1e1-4c15-9533-ace3d675d3cd/1/yxG_U6JQIIcrFpALA3Q0FlRxRRM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a9206e-c1e1-4c15-9533-ace3d675d3cd/1/1-YoC0gxrfeNXEl84sXNcobkfh7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:2dc0:1d::/48
Signature Algorithm: sha256WithRSAEncryption
10:c9:b2:38:b4:05:1c:0d:23:1b:ab:5a:d4:04:f6:ce:a0:cf:
40:5f:3e:ff:a4:c8:8b:ce:5f:92:61:9b:3b:40:5a:d7:0e:52:
f6:c7:a5:39:79:51:fd:a6:82:84:5e:d8:1a:69:37:9e:d4:42:
02:68:4e:64:ec:30:f1:b1:7f:47:9e:c5:9e:c2:5c:ce:1c:38:
c0:93:ea:45:0f:42:89:24:dc:36:7b:ea:73:45:30:5c:55:9f:
d0:2b:99:88:65:d8:70:68:c8:4c:b4:42:07:df:6e:f8:0d:21:
1f:43:9c:0a:05:2c:be:8c:89:af:6d:24:ae:26:48:33:a5:e1:
9c:c0:1e:8e:2c:e4:60:3d:9a:ee:2d:26:8e:42:50:36:0c:0e:
a6:aa:f0:46:a9:5a:31:c9:33:c6:a3:3f:1c:40:23:f8:1a:bc:
6d:6f:9e:d3:b8:ed:de:99:ab:39:ae:c4:6b:38:a1:2d:92:d0:
fc:0d:63:3e:0c:71:d6:5c:92:35:11:cf:a2:aa:fb:eb:09:b8:
30:e4:cd:9d:8f:13:78:74:22:fe:cf:6c:8f:3a:c2:0a:60:b4:
23:da:25:62:4e:00:1c:3b:e7:62:dd:19:15:63:a7:a4:7b:df:
00:b0:2e:4f:2f:6a:05:1c:75:ec:75:72:75:88:56:02:9b:91:
78:5d:22:04
-----BEGIN CERTIFICATE-----
MIIFAjCCA+qgAwIBAgISAZ82CxUIpXj04k1/B07bREKsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5OGEwMmQyMGM2YjdkZTM1NzEyNWYzOGIxNzM1Y2ExYjkx
Zjg3YjMwHhcNMjYwNzA2MDYwODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYjExYmY1M2EyNTAyMDg3MmIxNjkwMGIwMzc0MzQxNjU0NzE0NTEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+Ql65HJVQrNEvnYNKzyfFXCE4ex
PqLDJK7PyrfViTA20XUNP7flNDy+NeKiDHHuvS6xv7i+hsAIkw0Qv2H61GbFPBxk
YooRuBCYgWD0PqlliAAHcUVeeWB8l/qckmE9BLZynhpkI8tpooDooxUnLRUwhiib
b7Tc+YvB+W79iyP6cuKneGrsRCjo6ZlqNtCHFMaUfhUuS/q7RhMZ0+vRHevrybIE
g1Zj3FV5k4P9BmxhfEbZ+LeKDgQKFtzEhEEQP5QUBWDEqEDieWNRv22EXlA/ADy/
mGAYJBNSRmfwhb0QdCEd9Q8K38Gj15GNWm0I1SBOnzgYI2eRJl9jhMUv7wIDAQAB
o4ICDjCCAgowHQYDVR0OBBYEFMsRv1OiUCCHKxaQCwN0NBZUcUUTMB8GA1UdIwQY
MBaAFPmKAtIMa33jVxJfOLFzXKG5H4ezMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1Zb0MwZ3hyZmVOWEVsODRzWE5jb2JrZmg3TS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2IvYTkyMDZlLWMxZTEtNGMxNS05NTMz
LWFjZTNkNjc1ZDNjZC8xL3l4R19VNkpRSUljckZwQUxBM1EwRmxSeFJSTS5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvN2IvYTkyMDZlLWMxZTEtNGMxNS05NTMzLWFjZTNkNjc1ZDNj
ZC8xLzEtWW9DMGd4cmZlTlhFbDg0c1hOY29ia2ZoN00uY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqBC3A
AB0wDQYJKoZIhvcNAQELBQADggEBABDJsji0BRwNIxurWtQE9s6gz0BfPv+kyIvO
X5JhmztAWtcOUvbHpTl5Uf2mgoRe2BppN57UQgJoTmTsMPGxf0eexZ7CXM4cOMCT
6kUPQokk3DZ76nNFMFxVn9ArmYhl2HBoyEy0QgffbvgNIR9DnAoFLL6Mia9tJK4m
SDOl4ZzAHo4s5GA9mu4tJo5CUDYMDqaq8EapWjHJM8ajPxxAI/gavG1vntO47d6Z
qzmuxGs4oS2S0PwNYz4McdZckjURz6Kq++sJuDDkzZ2PE3h0Iv7PbI86wgpgtCPa
JWJOABw752LdGRVjp6R73wCwLk8vagUcdex1cnWIVgKbkXhdIgQ=
-----END CERTIFICATE-----
Generated at Fri Jul 24 07:30:03 2026 by rpki-client