Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/yEBQ8ssWALUUryQvQ9RYb_QaMMo.roa
File: yEBQ8ssWALUUryQvQ9RYb_QaMMo.roa (raw, json)
Hash identifier: o7y5j+9zSQ9bo2/bYKk6EX1p2UEYV72NkU/oq3bqKZI=
Subject key identifier: C8:40:50:F2:CB:16:00:B5:14:AF:24:2F:43:D4:58:6F:F4:1A:30:CA
Certificate issuer: /CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75
Certificate serial: 019F47F5E375DF189E0A03ED2A389855DC48
Authority key identifier: 17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/yEBQ8ssWALUUryQvQ9RYb_QaMMo.roa
Signing time: Thu 09 Jul 2026 17:38:44 +0000
ROA not before: Thu 09 Jul 2026 17:38:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402604
IP address blocks: 2a11:1300::/29 maxlen: 29
2a11:7dc0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.mft
rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:47:f5:e3:75:df:18:9e:0a:03:ed:2a:38:98:55:dc:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75
Validity
Not Before: Jul 9 17:38:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c84050f2cb1600b514af242f43d4586ff41a30ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:05:78:88:52:bb:dc:bb:0d:5b:1c:19:5e:57:
6f:88:96:96:e5:90:d6:38:f1:d3:c9:b5:c5:79:60:
5c:75:6c:1b:b0:2d:79:5c:df:9a:f2:43:b8:23:6e:
0d:fe:89:52:54:e6:5c:f7:52:d7:45:d7:da:f1:be:
c9:78:6e:96:0e:2f:36:f8:ac:18:d6:47:97:f3:89:
3a:6d:02:97:1f:be:e2:c6:d5:b7:7b:e9:07:d4:f9:
32:21:3d:f7:f3:31:e7:f4:ce:c8:69:0a:20:27:69:
01:3c:d1:9b:60:75:74:18:96:7a:c4:e9:91:af:38:
33:52:78:4d:ae:b8:7d:9e:29:b7:fe:ab:3a:a4:d3:
9a:2c:fa:d4:c4:9d:fe:18:ea:35:de:1a:9e:e3:a2:
ac:e9:9f:e2:10:bf:c6:bb:83:04:2a:e1:cd:a0:63:
fe:01:02:c0:0c:fe:ad:22:b4:8f:a3:8a:23:f4:d3:
2a:18:cc:53:28:0a:65:af:89:25:7d:91:e7:56:35:
ef:a1:50:a6:54:92:78:18:71:0e:a9:04:a4:53:c6:
c5:f4:cd:49:97:90:5e:45:df:35:ad:94:a3:ff:ed:
d3:c6:85:e6:31:a2:f2:c2:76:c9:69:b5:ea:c2:13:
8b:40:44:55:ee:ac:6f:bb:db:df:78:1e:12:d3:3c:
2e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:40:50:F2:CB:16:00:B5:14:AF:24:2F:43:D4:58:6F:F4:1A:30:CA
X509v3 Authority Key Identifier:
keyid:17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/yEBQ8ssWALUUryQvQ9RYb_QaMMo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:1300::/29
2a11:7dc0::/29
Signature Algorithm: sha256WithRSAEncryption
0c:6b:48:ba:4b:5e:54:c6:0d:f6:ff:e9:4a:48:82:28:ae:61:
4a:45:fb:44:5a:e3:7b:d4:dc:a5:40:a9:e0:a3:db:6d:e2:1e:
be:ad:79:a6:56:91:67:1f:60:ad:2b:e4:6c:6f:58:a0:ea:41:
ff:a3:a3:a2:d7:c6:a9:c3:a2:f3:a9:88:94:7b:f0:47:30:3e:
f3:e5:56:a9:8b:84:a2:a9:81:21:03:92:dd:25:1a:d7:b3:df:
c3:c3:ff:2d:b2:43:da:5e:e4:d7:64:db:1c:57:66:8e:46:e2:
a4:9a:c5:6b:0b:c0:98:9c:5f:1d:4f:9e:cd:01:19:d1:a0:e9:
64:4a:00:a9:79:49:4c:f1:80:d5:00:f8:e7:a1:54:38:91:b4:
dc:cb:16:ae:d5:9f:bf:38:29:6b:73:ec:8c:66:74:04:29:8e:
47:04:7e:d3:2a:62:40:ef:d8:ec:08:02:57:69:3e:ad:fb:0b:
12:ef:3b:21:e0:d5:1b:66:e3:7b:97:01:83:34:67:2b:5c:6b:
83:79:13:88:8b:78:8b:35:57:a3:9a:4e:ed:3a:85:7d:f7:ca:
74:b3:9f:98:b5:a8:f1:4a:26:53:92:ca:84:79:cb:d7:dd:c3:
6c:44:50:2b:d7:92:8b:69:e7:50:5a:11:38:ce:59:1e:86:06:
b2:47:f0:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:36:41 2026 by rpki-client