Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/y0DhZbi8rRMMUcat7ugkKJd5KV8.roa
File: y0DhZbi8rRMMUcat7ugkKJd5KV8.roa (raw, json)
Hash identifier: r9crMvauPUCxmIu1iA9EwVkrgUAsI0f/ezkE3JK6i1I=
Subject key identifier: CB:40:E1:65:B8:BC:AD:13:0C:51:C6:AD:EE:E8:24:28:97:79:29:5F
Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Certificate serial: 01A1C5000C58E0161247E77E69415DC3F1BE
Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/y0DhZbi8rRMMUcat7ugkKJd5KV8.roa
Signing time: Tue 10 Nov 2026 10:27:57 +0000
ROA not before: Tue 10 Nov 2026 10:27:57 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13335
IP address blocks: 2a0a:79c0:1700:af0::/64 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 10:37:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c5:00:0c:58:e0:16:12:47:e7:7e:69:41:5d:c3:f1:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Validity
Not Before: Nov 10 10:27:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cb40e165b8bcad130c51c6adeee824289779295f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:05:9b:45:22:d8:53:bd:76:2e:0e:97:28:a5:
6d:e8:2a:d3:03:df:09:d2:75:7a:df:89:5c:2a:55:
21:2c:c6:07:d0:05:b0:75:9c:77:e8:9b:ce:f9:5b:
6e:b2:41:dc:c3:d3:5c:86:8c:83:55:05:60:92:d1:
0b:c8:bb:d3:54:a9:d0:d3:82:a8:67:83:32:8f:ff:
12:de:08:19:23:8a:0d:eb:1c:08:45:d8:7e:a8:19:
5c:72:32:ac:ac:02:24:14:53:12:9c:43:42:fd:f0:
ba:9c:6c:e4:50:cc:78:fe:15:b4:f0:ab:ac:a0:40:
41:99:d9:74:b3:3d:a5:7f:c0:0f:60:5a:7e:34:8b:
b0:2e:a1:c5:42:39:cd:5c:ad:87:40:d2:31:c0:d2:
16:3f:98:83:56:ff:76:6a:5b:c1:e9:4b:77:02:6a:
bf:2d:6b:82:b8:48:61:42:ce:37:82:c2:e3:12:3b:
78:24:cb:8b:97:1a:05:74:91:10:8f:34:a3:cb:21:
02:e9:d0:f7:01:cd:69:3f:e1:28:5a:96:be:73:5f:
68:31:62:03:3c:04:da:09:be:99:cb:46:9b:ba:fa:
a4:48:20:5a:c0:59:73:a1:17:f9:53:78:49:12:b8:
30:f0:ac:41:a9:ff:20:a9:09:7c:64:6e:b0:f0:99:
9c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:40:E1:65:B8:BC:AD:13:0C:51:C6:AD:EE:E8:24:28:97:79:29:5F
X509v3 Authority Key Identifier:
keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/y0DhZbi8rRMMUcat7ugkKJd5KV8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:79c0:1700:af0::/64
Signature Algorithm: sha256WithRSAEncryption
cc:0d:27:aa:e1:4a:cc:8c:4c:78:36:ba:9e:fa:7a:76:80:77:
15:8e:59:0f:62:bb:6a:e8:c6:f9:0e:b2:5c:89:68:b0:aa:25:
70:d8:f5:7c:45:c5:46:b5:55:c2:57:80:7e:07:09:07:71:69:
5e:92:02:fc:db:d3:18:95:56:4e:ee:c5:fd:29:3b:1e:f6:d7:
4d:97:e5:68:99:a6:b8:a3:74:b0:47:56:50:7f:d7:2e:4f:fa:
37:02:aa:57:b7:c6:28:75:f2:ef:23:bc:ad:cd:c6:2f:91:a5:
43:83:1a:bc:bd:0b:6d:82:da:12:69:05:8c:58:27:ab:6d:af:
ef:17:ad:a4:26:90:5e:db:b0:a6:97:ea:e2:c9:f1:7e:d2:65:
13:b6:06:7e:c9:95:1a:43:60:84:a0:d3:8d:25:3a:4b:b8:7a:
c6:d4:96:9d:4b:c0:86:ca:b4:ea:24:83:7c:09:b8:b4:5a:4a:
f4:ef:b5:13:56:56:0f:4a:a3:de:8e:92:8a:7e:a4:bf:b0:cf:
6c:bd:b1:36:35:4d:d3:f4:91:8d:98:d0:e3:f8:f6:68:d8:d4:
51:32:fe:63:b8:23:84:e1:95:a3:e0:f6:88:78:e2:54:2b:29:
16:2a:87:4a:82:ca:63:bc:e8:99:cc:bf:50:f2:39:3c:6b:d4:
a6:a5:f1:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 20:42:48 2026 by rpki-client