Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/yrkh5a8oa9TAeGqxBHy0VPVJ1U0.roa
File: yrkh5a8oa9TAeGqxBHy0VPVJ1U0.roa (raw, json)
Hash identifier: NQmFdUWHQfgicwpZ0sRLtZpgVUOak/o9L26iE81cOG4=
Subject key identifier: CA:B9:21:E5:AF:28:6B:D4:C0:78:6A:B1:04:7C:B4:54:F5:49:D5:4D
Certificate issuer: /CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8
Certificate serial: 019F47F5E399D81E4378168AA044198682A6
Authority key identifier: 49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/yrkh5a8oa9TAeGqxBHy0VPVJ1U0.roa
Signing time: Thu 09 Jul 2026 17:38:44 +0000
ROA not before: Thu 09 Jul 2026 17:38:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402604
IP address blocks: 2a04:ca80::/29 maxlen: 29
2a0c:b140::/29 maxlen: 29
2a11:2dc0::/29 maxlen: 29
2a11:5e40::/29 maxlen: 29
2a12:200::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:47:f5:e3:99:d8:1e:43:78:16:8a:a0:44:19:86:82:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8
Validity
Not Before: Jul 9 17:38:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cab921e5af286bd4c0786ab1047cb454f549d54d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d1:75:da:78:9d:77:48:a4:12:9c:ff:9c:d2:
0a:95:28:3d:a9:18:b8:bd:9a:10:8c:3c:38:9e:34:
3a:91:23:e0:8c:35:82:67:cb:2a:fb:72:ae:71:e7:
52:ec:66:40:ca:6a:05:b2:f7:b5:73:ba:e6:c0:d9:
43:37:56:89:58:e6:51:a7:c5:f6:7c:2e:05:c8:2c:
60:06:ed:41:3b:a7:28:a0:35:25:ec:d3:12:cf:d8:
dd:cb:94:59:6e:0c:90:c2:fa:37:e4:80:21:98:a4:
81:b6:a5:79:40:9c:fe:cf:e0:d5:de:5a:1d:ca:16:
3e:9f:e7:52:6c:b1:79:aa:1e:62:47:0f:8e:fc:38:
c1:de:b7:a3:cb:a6:cc:b3:99:47:4c:ef:99:42:1c:
56:3f:24:99:d4:f2:c9:5c:44:74:7c:ee:1f:d7:f3:
02:84:72:91:cd:6b:aa:b8:14:bf:52:11:ec:f5:d7:
c1:23:ed:b9:d0:ab:0a:82:19:82:b0:71:7f:f5:fa:
dd:66:5f:d5:18:2b:0a:5d:06:74:6a:50:9e:aa:dc:
b3:3a:eb:09:7c:6b:0f:f6:84:d4:05:47:70:c6:8c:
1e:20:b7:b3:91:aa:b9:58:c3:f3:2d:f8:71:e3:0a:
77:88:00:2c:f0:ac:27:6b:67:61:07:49:c0:89:85:
13:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:B9:21:E5:AF:28:6B:D4:C0:78:6A:B1:04:7C:B4:54:F5:49:D5:4D
X509v3 Authority Key Identifier:
keyid:49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/yrkh5a8oa9TAeGqxBHy0VPVJ1U0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:ca80::/29
2a0c:b140::/29
2a11:2dc0::/29
2a11:5e40::/29
2a12:200::/29
Signature Algorithm: sha256WithRSAEncryption
61:23:f2:91:00:9b:a8:7b:3b:dc:eb:a9:d3:c6:d7:1e:69:9e:
d2:fa:cf:99:13:f2:43:aa:9b:f1:06:0c:63:ac:8b:16:84:87:
1e:ee:cc:37:5e:24:79:42:bd:98:fb:c5:0a:8a:aa:0b:42:33:
ae:20:68:e4:f8:5c:3c:84:81:59:3d:b1:d3:a9:1b:a1:e7:de:
93:b8:21:8a:dd:71:10:89:d5:9e:eb:46:77:0d:0f:4f:9c:0c:
6d:21:4c:6a:98:86:b1:49:a7:86:ac:df:42:cc:0b:45:30:bb:
e7:6c:91:5c:8d:75:33:43:16:e8:14:32:58:df:29:de:da:16:
0b:69:0b:d8:d3:23:1c:0a:9b:0f:46:23:15:90:99:6a:12:55:
4f:2d:b4:6e:01:54:9f:ee:44:de:d9:2f:00:8a:bb:f8:f7:7a:
9d:a8:89:64:5f:db:fa:24:bc:8f:b0:be:83:71:80:4c:34:ea:
f4:ff:bd:f2:c1:44:51:d1:4b:66:6f:60:13:ae:1a:74:00:59:
0c:07:5a:27:97:21:83:25:a0:b6:26:b7:3c:63:62:0e:0f:17:
d4:d4:17:4d:98:ed:77:d7:51:b7:56:32:e7:d0:4b:63:56:97:
2d:6a:2e:e6:3d:bd:a5:95:28:c6:d0:a6:ae:ed:a9:04:c2:e3:
1a:fa:4d:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:35:50 2026 by rpki-client