Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/yuCq5r_LvnOCBC-d-Ncg_gzv64g.roa
File: yuCq5r_LvnOCBC-d-Ncg_gzv64g.roa (raw, json)
Hash identifier: sf+ixIeWU8jIubcM1lTOXiYAsVO30eUaZb+h8kJGeGE=
Subject key identifier: CA:E0:AA:E6:BF:CB:BE:73:82:04:2F:9D:F8:D7:20:FE:0C:EF:EB:88
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 019CF64D0CEF882D23C92DA8EE9D768A305D
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/yuCq5r_LvnOCBC-d-Ncg_gzv64g.roa
Signing time: Mon 16 Mar 2026 10:59:30 +0000
ROA not before: Mon 16 Mar 2026 10:59:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216402
IP address blocks: 2a12:bec4:14a0::/48 maxlen: 48
2a12:bec4:14a1::/48 maxlen: 48
2a12:bec4:14a2::/48 maxlen: 48
2a12:bec4:14a3::/48 maxlen: 48
2a12:bec4:14a4::/48 maxlen: 48
2a12:bec4:14a5::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f6:4d:0c:ef:88:2d:23:c9:2d:a8:ee:9d:76:8a:30:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Mar 16 10:59:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cae0aae6bfcbbe7382042f9df8d720fe0cefeb88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8b:8e:3d:a6:31:6f:71:d7:fb:d6:3b:82:26:
cc:a8:43:e9:ca:45:10:b4:9f:e1:e8:53:65:27:68:
60:aa:02:d9:12:d3:b8:d4:7a:ac:aa:b6:7a:a1:ac:
d1:4f:2d:c4:b9:97:d8:95:67:2d:d8:35:de:60:d5:
b3:fe:15:47:b3:a4:d5:e2:6f:43:9a:90:cb:94:a6:
03:dc:66:4c:1a:cb:34:48:70:ec:06:12:49:da:a8:
ac:64:73:1d:c5:e2:67:0e:f4:4a:5a:44:78:9c:3a:
64:47:b5:9b:8c:eb:07:ba:c3:c5:37:8d:86:c0:d1:
db:66:a5:dd:73:53:c7:5f:e0:74:75:27:fa:03:dd:
76:8c:79:36:de:b6:dc:b8:42:3d:95:19:10:35:2d:
e9:47:e2:12:c8:23:a6:02:d2:e1:84:47:f1:6a:ed:
89:ff:7d:ce:74:ef:c6:16:e0:75:2d:4e:ec:71:88:
f7:0b:9f:ab:78:89:2e:3b:56:72:c0:81:a7:7a:d5:
b8:50:5f:ee:5d:1f:f0:2a:71:52:a5:32:00:26:28:
b9:f1:89:83:e1:84:78:6d:bc:66:f8:35:81:eb:18:
77:9b:8b:b9:05:a4:9b:6a:5f:83:84:b9:8c:5b:44:
fd:7b:6b:2a:68:2e:b9:cb:d4:e3:72:37:41:23:7e:
37:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:E0:AA:E6:BF:CB:BE:73:82:04:2F:9D:F8:D7:20:FE:0C:EF:EB:88
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/yuCq5r_LvnOCBC-d-Ncg_gzv64g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec4:14a0::-2a12:bec4:14a5:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
0c:c1:8c:e4:c5:8e:4e:ab:41:e9:67:5d:aa:0d:fa:3f:31:cd:
e0:f3:d1:7f:23:e9:8b:77:d1:87:7c:73:51:26:33:17:ae:46:
03:0b:af:23:59:98:a0:ed:ba:20:e4:f6:94:c1:a7:98:e5:0c:
5e:3d:a8:e7:98:56:cc:69:db:01:6f:00:b2:1c:be:de:5f:db:
17:02:43:1f:6c:8b:19:99:a3:e0:09:17:52:2e:e6:e6:e2:42:
7b:1e:a9:13:87:a4:63:4c:b9:26:fa:d2:ab:52:76:00:d6:54:
ee:15:d3:3d:c5:e5:7f:fd:73:97:ee:3b:31:10:f8:fe:18:34:
ee:f1:eb:5b:a2:0a:30:f4:f7:3f:63:04:23:68:6c:00:5b:c1:
5b:71:d0:ce:18:dc:21:4b:d8:a1:79:db:b4:60:ef:a3:9b:38:
4f:af:88:ec:55:2b:14:79:02:e6:7d:d1:b6:fc:a6:d8:83:f9:
19:0f:09:c5:fa:83:4d:7c:8d:68:d6:c8:3f:e9:97:45:f0:61:
01:68:5a:f5:43:a5:82:24:0d:36:fc:03:03:72:01:0b:19:b3:
e7:38:4c:22:4f:42:4d:d7:b3:af:58:2c:1c:30:f6:f5:ad:15:
32:47:b5:c9:2e:97:07:60:4e:32:34:3e:38:3f:2d:f4:00:c5:
e2:38:d6:dd
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Mar 27 00:19:06 2026 by rpki-client