Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/55cca6-27d0-451c-bf75-62be34bac632/1/YeVLRWZskfx_IZGiLmT84waZsq0.roa
File: YeVLRWZskfx_IZGiLmT84waZsq0.roa (raw, json)
Hash identifier: hRBrTkDkDF9xPGZibtinblYHrG8tk7wxZI+ehCaks0s=
Subject key identifier: 61:E5:4B:45:66:6C:91:FC:7F:21:91:A2:2E:64:FC:E3:06:99:B2:AD
Certificate issuer: /CN=33a34724945da76930fe791f60896c96dffcec84
Certificate serial: 019D2A29D46C632E1A42E2E20E8C5817A58E
Authority key identifier: 33:A3:47:24:94:5D:A7:69:30:FE:79:1F:60:89:6C:96:DF:FC:EC:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M6NHJJRdp2kw_nkfYIlslt_87IQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/55cca6-27d0-451c-bf75-62be34bac632/1/YeVLRWZskfx_IZGiLmT84waZsq0.roa
Signing time: Thu 26 Mar 2026 12:41:17 +0000
ROA not before: Thu 26 Mar 2026 12:41:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210599
IP address blocks: 2a14:f280::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/55cca6-27d0-451c-bf75-62be34bac632/1/M6NHJJRdp2kw_nkfYIlslt_87IQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/55cca6-27d0-451c-bf75-62be34bac632/1/M6NHJJRdp2kw_nkfYIlslt_87IQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/M6NHJJRdp2kw_nkfYIlslt_87IQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:29:d4:6c:63:2e:1a:42:e2:e2:0e:8c:58:17:a5:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33a34724945da76930fe791f60896c96dffcec84
Validity
Not Before: Mar 26 12:41:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=61e54b45666c91fc7f2191a22e64fce30699b2ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:78:89:6f:1d:c5:e0:b2:30:51:44:14:39:6a:
7a:4e:a2:83:7d:8c:bd:dd:80:d9:86:1f:35:4d:6e:
f1:c9:79:cc:d5:8a:14:2f:9f:19:99:50:67:c1:7b:
c5:a9:f7:6d:8b:69:d5:32:6d:6a:95:42:21:15:71:
eb:cd:b8:80:35:e9:bb:ad:d8:83:b4:d8:7d:5c:b3:
86:6e:ef:b9:d1:71:0a:90:ee:5a:95:5e:c3:0b:32:
65:c8:15:65:0d:b5:2c:b4:77:0e:0b:46:0a:f8:27:
a6:0b:82:4f:02:f9:35:39:1c:48:22:a3:7e:07:bc:
e4:d0:d9:04:7d:77:f9:dd:0a:a0:72:37:a4:8f:55:
6c:0f:71:41:59:05:ac:4c:db:63:ec:44:a9:9e:a2:
83:0a:b0:f3:c8:77:a7:c9:b3:43:a5:c1:a0:52:da:
0a:de:e3:7d:3c:79:4d:48:91:ff:2f:00:48:f8:dc:
62:32:62:5a:f9:3c:c7:06:8d:fd:05:33:37:7a:15:
54:f3:28:1f:2e:5c:b3:d8:f6:09:c3:7f:7d:52:56:
dd:15:28:35:1c:e0:fb:ab:8d:00:a5:b1:18:e1:ac:
f9:52:da:02:4d:d6:8e:55:5a:6b:58:4b:f6:bd:78:
0a:75:87:9d:31:91:be:28:38:09:22:5e:55:04:b6:
43:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:E5:4B:45:66:6C:91:FC:7F:21:91:A2:2E:64:FC:E3:06:99:B2:AD
X509v3 Authority Key Identifier:
keyid:33:A3:47:24:94:5D:A7:69:30:FE:79:1F:60:89:6C:96:DF:FC:EC:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M6NHJJRdp2kw_nkfYIlslt_87IQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/55cca6-27d0-451c-bf75-62be34bac632/1/YeVLRWZskfx_IZGiLmT84waZsq0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/55cca6-27d0-451c-bf75-62be34bac632/1/M6NHJJRdp2kw_nkfYIlslt_87IQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:f280::/32
Signature Algorithm: sha256WithRSAEncryption
67:f8:ab:9e:d9:21:05:08:0c:5e:95:67:81:f8:35:e0:f2:0c:
a0:16:2e:91:93:6f:14:96:bb:02:8a:14:ae:b1:c5:c5:01:27:
6a:6c:a3:ef:e2:38:59:cc:56:af:64:35:c1:e6:25:00:ce:f7:
c5:cf:e9:2d:02:78:b1:13:15:71:b8:f2:fd:fb:c9:0b:e2:12:
ac:06:e5:95:83:93:0a:db:30:4b:e6:cd:eb:5a:5f:df:5b:c2:
60:39:02:ce:85:72:e1:58:75:19:f9:06:82:e0:90:48:37:42:
a1:47:65:89:ba:12:90:e5:ea:e5:2f:60:8f:49:b0:c6:42:41:
15:6a:4f:59:ad:03:5d:5d:13:ae:a8:bc:64:8f:37:cb:00:a1:
94:74:1d:90:da:48:48:47:54:05:42:1e:51:95:2f:6e:0e:44:
67:78:28:49:68:63:b4:e0:52:ce:e3:53:93:cc:08:55:52:1b:
1f:eb:80:e1:df:fb:2d:4c:a6:35:f3:49:f5:5a:09:29:c2:7b:
37:ca:8e:8c:b6:7b:38:f2:fb:7f:52:8f:9d:06:72:ad:a7:33:
43:48:03:90:e9:fe:cc:5b:ee:83:80:a6:a1:a5:54:c0:dc:1e:
3f:65:ab:10:73:64:6a:45:ca:8f:17:12:63:55:d8:09:5c:b9:
5d:64:a5:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 13:36:39 2026 by rpki-client