Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ac/9de98e-17b4-47ff-a9c9-11c3009f44df/1/SY8sAwxJ4orXv7fbtZF9iwGefY0.roa
File: SY8sAwxJ4orXv7fbtZF9iwGefY0.roa (raw, json)
Hash identifier: HipHGaRJhkRGALyKeX5EqGL4fZkr0kATRWXunZXx3M4=
Subject key identifier: 49:8F:2C:03:0C:49:E2:8A:D7:BF:B7:DB:B5:91:7D:8B:01:9E:7D:8D
Certificate issuer: /CN=117a04a927019c3ce2d0c9db3a314977a0a7b35c
Certificate serial: 01A1347FCD0791E9F8A20BD30EEC83C20148
Authority key identifier: 11:7A:04:A9:27:01:9C:3C:E2:D0:C9:DB:3A:31:49:77:A0:A7:B3:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EXoEqScBnDzi0MnbOjFJd6Cns1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/9de98e-17b4-47ff-a9c9-11c3009f44df/1/SY8sAwxJ4orXv7fbtZF9iwGefY0.roa
Signing time: Tue 13 Oct 2026 09:02:33 +0000
ROA not before: Tue 13 Oct 2026 09:02:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31898
IP address blocks: 2a06:4887::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/9de98e-17b4-47ff-a9c9-11c3009f44df/1/EXoEqScBnDzi0MnbOjFJd6Cns1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/9de98e-17b4-47ff-a9c9-11c3009f44df/1/EXoEqScBnDzi0MnbOjFJd6Cns1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/EXoEqScBnDzi0MnbOjFJd6Cns1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 10:37:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:34:7f:cd:07:91:e9:f8:a2:0b:d3:0e:ec:83:c2:01:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=117a04a927019c3ce2d0c9db3a314977a0a7b35c
Validity
Not Before: Oct 13 09:02:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=498f2c030c49e28ad7bfb7dbb5917d8b019e7d8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:de:da:bd:bf:79:d0:aa:52:55:36:5d:48:2e:
5a:66:47:c2:84:b6:bc:5b:5e:a2:91:04:0b:80:76:
44:73:f0:20:ea:08:45:4b:ba:f4:54:2a:05:3c:1d:
9c:c1:d1:47:23:32:45:a3:70:08:1a:f9:8f:37:44:
cb:4d:1d:15:6f:50:35:5e:c9:89:4c:b4:d1:2f:78:
cc:2c:6a:17:52:f7:d9:b3:2c:1c:fd:2f:d8:bf:91:
97:cb:bd:34:99:cb:a9:ca:67:bb:fe:9b:72:f7:5c:
59:d8:3e:cc:c2:d4:56:b7:f1:79:7a:49:5b:a3:f1:
31:c8:93:16:df:27:07:db:84:67:fb:86:88:e1:08:
80:01:94:d7:37:53:86:d4:be:c1:8a:f0:1b:6b:c6:
1b:9f:26:31:92:d8:0a:07:da:52:07:1f:4a:6e:66:
97:c2:41:c7:e2:ee:36:38:b2:a9:81:97:91:a0:38:
a8:a8:ad:9d:88:e9:a3:e1:7b:0c:b2:78:62:d2:80:
8d:0b:a7:63:5c:62:4a:35:d3:22:cd:35:38:3d:e9:
68:a6:40:bf:97:ae:78:65:60:8a:d1:81:e3:7f:ca:
a3:76:be:66:dc:38:b0:35:ef:e0:6c:7d:d5:01:5d:
41:8c:d2:c5:ea:1d:c7:7a:ed:3d:06:a4:a4:57:72:
38:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:8F:2C:03:0C:49:E2:8A:D7:BF:B7:DB:B5:91:7D:8B:01:9E:7D:8D
X509v3 Authority Key Identifier:
keyid:11:7A:04:A9:27:01:9C:3C:E2:D0:C9:DB:3A:31:49:77:A0:A7:B3:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EXoEqScBnDzi0MnbOjFJd6Cns1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9de98e-17b4-47ff-a9c9-11c3009f44df/1/SY8sAwxJ4orXv7fbtZF9iwGefY0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9de98e-17b4-47ff-a9c9-11c3009f44df/1/EXoEqScBnDzi0MnbOjFJd6Cns1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:4887::/32
Signature Algorithm: sha256WithRSAEncryption
28:70:4a:9d:b5:32:9a:ba:cc:a8:ea:35:66:52:47:ea:d7:92:
a8:2f:a3:ce:1c:97:58:5c:2d:6e:96:70:bb:88:59:bf:f4:5a:
a4:8f:ed:5d:0e:63:be:e8:96:87:76:dc:90:25:93:b1:34:0c:
54:2b:cb:77:59:44:c4:ff:51:ed:7c:5f:ad:ad:cb:ec:f0:2b:
16:83:4e:b9:33:64:bd:d1:c5:d8:00:f0:25:a9:bb:96:2d:d5:
98:5f:a1:3b:28:9b:4e:62:e0:3a:cf:62:ae:a0:44:b1:09:5a:
a3:01:c9:45:7b:af:f3:a2:bb:63:27:1c:fc:ad:91:d8:26:40:
ed:47:be:e1:a3:0a:88:2f:e0:16:82:7e:dc:fe:0d:e0:cf:7b:
c1:c9:93:9d:4e:d5:9b:b2:50:1e:08:f4:a8:fc:02:78:d8:09:
be:41:6c:01:e1:cd:49:a8:92:9d:37:f7:1b:b2:f1:f0:d2:af:
ab:ca:6a:36:4c:0b:42:d4:09:05:99:2e:27:69:21:80:7c:bb:
0d:77:e0:73:bf:a5:7a:a2:a9:7c:14:e1:04:57:86:eb:4d:3c:
cd:14:a4:11:07:70:db:f6:61:65:4c:4c:fc:b8:41:47:f6:a8:
75:21:aa:1d:7c:66:8f:30:ba:79:03:ee:5e:1d:63:0d:5e:16:
76:56:30:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 20:47:23 2026 by rpki-client