Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/b8e5c4-38eb-445f-b036-c37790e6d482/1/8yi1LBcjZuFqYFbdgC_s2aSxkWc.roa
File: 8yi1LBcjZuFqYFbdgC_s2aSxkWc.roa (raw, json)
Hash identifier: iWLx5N8cPN2G1zQ0siO1bQR7tW0bfENSaMdy9lql9Uk=
Subject key identifier: F3:28:B5:2C:17:23:66:E1:6A:60:56:DD:80:2F:EC:D9:A4:B1:91:67
Certificate issuer: /CN=4eef6aae6fba5c61a61739afcab55a62266e89ee
Certificate serial: 019D01624163D9864873072936AFF5389895
Authority key identifier: 4E:EF:6A:AE:6F:BA:5C:61:A6:17:39:AF:CA:B5:5A:62:26:6E:89:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tu9qrm-6XGGmFzmvyrVaYiZuie4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e5c4-38eb-445f-b036-c37790e6d482/1/8yi1LBcjZuFqYFbdgC_s2aSxkWc.roa
Signing time: Wed 18 Mar 2026 14:38:29 +0000
ROA not before: Wed 18 Mar 2026 14:38:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212461
IP address blocks: 2a0b:6903:1ad::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e5c4-38eb-445f-b036-c37790e6d482/1/Tu9qrm-6XGGmFzmvyrVaYiZuie4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e5c4-38eb-445f-b036-c37790e6d482/1/Tu9qrm-6XGGmFzmvyrVaYiZuie4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tu9qrm-6XGGmFzmvyrVaYiZuie4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:01:62:41:63:d9:86:48:73:07:29:36:af:f5:38:98:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4eef6aae6fba5c61a61739afcab55a62266e89ee
Validity
Not Before: Mar 18 14:38:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f328b52c172366e16a6056dd802fecd9a4b19167
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7f:79:60:25:fc:21:2a:cc:1d:9c:a0:9b:82:
d6:f0:55:ad:59:28:92:90:a2:b9:d2:71:92:7d:9c:
7e:d8:6a:13:58:9e:c6:97:6c:2d:b1:7b:60:b0:1a:
41:9d:39:f1:42:e6:ec:a9:d9:8f:d0:03:19:e1:01:
55:cf:ce:6e:93:f1:1e:68:7c:62:45:b2:d5:2c:a2:
e4:8f:38:33:46:c1:7b:c0:14:4e:4d:78:e4:b8:3a:
ae:0b:c8:64:90:34:db:03:28:54:64:6b:5a:2f:44:
c5:d2:c6:5a:6c:12:37:2b:e2:e2:75:a7:89:e1:f2:
15:d5:da:34:86:c2:e3:5e:2f:2f:69:9e:2c:22:5c:
82:ca:46:9b:12:f2:d5:28:a2:01:a0:50:70:eb:92:
81:7a:31:b1:2d:02:db:09:cb:29:17:13:84:1e:ef:
ef:6d:be:2e:03:03:53:a3:31:1a:e4:71:5e:5d:14:
12:d0:74:7e:a7:85:18:f1:4b:3e:2e:d7:78:fd:91:
2c:11:0f:ca:80:25:53:f1:a6:8a:46:23:51:de:d5:
15:cd:88:44:05:b2:33:00:f4:5d:ee:dd:90:31:6a:
89:9d:a0:01:6e:b9:f2:d9:7d:6c:6d:52:34:bd:83:
12:ff:15:23:34:cc:0c:73:95:8c:ec:8d:7f:2a:fd:
84:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:28:B5:2C:17:23:66:E1:6A:60:56:DD:80:2F:EC:D9:A4:B1:91:67
X509v3 Authority Key Identifier:
keyid:4E:EF:6A:AE:6F:BA:5C:61:A6:17:39:AF:CA:B5:5A:62:26:6E:89:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tu9qrm-6XGGmFzmvyrVaYiZuie4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e5c4-38eb-445f-b036-c37790e6d482/1/8yi1LBcjZuFqYFbdgC_s2aSxkWc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e5c4-38eb-445f-b036-c37790e6d482/1/Tu9qrm-6XGGmFzmvyrVaYiZuie4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:6903:1ad::/48
Signature Algorithm: sha256WithRSAEncryption
03:25:3b:1b:f2:ca:df:9d:54:29:f5:d0:63:3a:75:94:49:32:
e2:95:58:9c:af:63:d0:2f:d5:bd:44:42:4f:f9:ba:0b:10:ae:
79:59:e4:aa:da:da:72:5b:54:d8:24:e6:e0:54:a1:22:79:b0:
3b:a6:e0:4e:99:98:11:e0:e4:a2:08:bc:5d:c8:1d:73:bb:f5:
86:69:c0:d5:4d:f3:a7:27:a6:8a:72:4e:9d:b4:c9:2c:3b:16:
72:c6:2d:54:a8:d6:fc:c1:5b:23:8e:99:77:ce:84:eb:39:c8:
a3:72:04:f1:f1:74:58:dd:9a:da:fb:3e:d2:df:b2:0f:5a:98:
84:2c:c2:84:df:a5:de:f6:4f:8e:1f:34:05:06:39:45:57:ad:
10:ed:5e:88:f4:94:12:60:2a:bd:5c:f8:08:87:a2:2c:40:a2:
1b:69:32:af:e9:ff:7f:64:ac:bf:72:0e:18:b2:5e:db:8f:e3:
1c:ef:6f:93:44:8a:f5:0d:6b:18:93:6b:99:6a:ee:4f:3a:0e:
dd:80:6d:ca:5f:26:64:1d:df:f9:7b:da:04:75:d7:5b:18:71:
b6:5e:6d:b4:46:f5:36:cb:2a:1a:44:88:a2:b6:87:f2:83:c3:
2f:fa:25:4a:1e:10:16:9b:c8:4e:18:96:45:4b:80:00:dc:5c:
92:95:0f:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:59:14 2026 by rpki-client