Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/0yaCS409HGtE8PUF12kU6mwQ1Co.roa
File: 0yaCS409HGtE8PUF12kU6mwQ1Co.roa (raw, json)
Hash identifier: iSSfbXnMKJORvDmkAsKI/vF4doPB03HIevpGdq9obls=
Subject key identifier: D3:26:82:4B:8D:3D:1C:6B:44:F0:F5:05:D7:69:14:EA:6C:10:D4:2A
Certificate issuer: /CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Certificate serial: 019DC44B5D81DACC3BB0CB8B59B8A0E1578A
Authority key identifier: 56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/0yaCS409HGtE8PUF12kU6mwQ1Co.roa
Signing time: Sat 25 Apr 2026 10:59:26 +0000
ROA not before: Sat 25 Apr 2026 10:59:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205941
IP address blocks: 2a10:fa82::/32 maxlen: 32
2a10:fa82::/48 maxlen: 48
2a10:fa82:1::/48 maxlen: 48
2a10:fa82:2::/48 maxlen: 48
2a10:fa82:f600::/40 maxlen: 40
2a10:fa82:f700::/40 maxlen: 40
2a10:fa82:f800::/40 maxlen: 40
2a10:fa82:f900::/40 maxlen: 40
2a10:fa82:fa00::/40 maxlen: 40
2a10:fa82:fb00::/40 maxlen: 40
2a10:fa82:fc00::/40 maxlen: 40
2a10:fa82:fd00::/40 maxlen: 40
2a10:fa82:fe00::/40 maxlen: 40
2a10:fa82:fea0::/48 maxlen: 48
2a10:fa82:fef0::/44 maxlen: 44
2a10:fa82:ff00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:c4:4b:5d:81:da:cc:3b:b0:cb:8b:59:b8:a0:e1:57:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Validity
Not Before: Apr 25 10:59:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d326824b8d3d1c6b44f0f505d76914ea6c10d42a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:54:40:d3:1c:76:38:eb:87:ab:47:cf:ed:e1:
96:75:0a:c4:53:c0:33:89:28:d2:e3:9e:b2:36:28:
44:1f:90:98:30:57:9b:9f:cc:2e:02:c0:61:ec:88:
6c:58:e1:09:1c:39:a1:0f:bf:6e:5a:ab:ee:f0:30:
99:ab:e0:67:bd:1b:2f:cf:79:72:48:45:fa:e9:e1:
83:ca:c2:f6:8a:c6:d7:ee:34:5e:fe:71:64:ca:ee:
14:98:b7:ae:e3:7b:3b:04:76:10:86:6c:a0:99:69:
47:ed:c5:eb:32:b3:84:9b:6b:e9:0d:f5:26:d4:5a:
fc:ea:51:68:8b:bf:4d:c3:d8:c0:15:13:17:22:d1:
52:66:c4:ff:76:ef:99:c1:8a:50:2c:87:2b:fd:b7:
f8:9d:82:3a:65:86:a2:72:c5:0d:5f:a7:cf:4b:d6:
5c:06:d7:4e:23:4b:2b:a2:8a:77:6c:07:7d:d0:6e:
9a:aa:cc:9c:f6:43:54:dc:6e:38:27:7c:df:25:95:
ea:f5:16:5d:e8:87:88:84:f0:51:23:c1:1b:e1:57:
3f:5a:7b:f3:cb:75:28:e0:3d:db:1d:2c:43:0a:53:
b2:56:58:46:12:88:84:25:39:80:99:d4:af:60:b9:
7e:97:c5:f5:e2:40:5f:62:ee:e3:ee:90:47:8c:2b:
5d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:26:82:4B:8D:3D:1C:6B:44:F0:F5:05:D7:69:14:EA:6C:10:D4:2A
X509v3 Authority Key Identifier:
keyid:56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/0yaCS409HGtE8PUF12kU6mwQ1Co.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:fa82::/32
Signature Algorithm: sha256WithRSAEncryption
4f:ea:bc:54:3f:6f:f5:ed:3b:c3:8c:86:b1:3e:89:c8:9f:62:
39:35:5f:00:82:be:6d:bd:26:fa:5d:da:dc:ce:70:2e:4e:17:
56:09:b1:34:ac:d9:0f:86:a5:af:4f:54:f4:16:a7:b2:e3:d7:
5e:f0:2b:ad:d1:61:64:2c:32:ed:97:da:08:2b:25:25:0a:54:
08:ff:2a:d4:19:8f:72:71:d2:1d:57:ae:60:ef:cf:01:ff:90:
bb:c0:41:74:e7:66:37:23:6a:cd:0f:68:96:11:6d:65:c8:d0:
67:ae:2b:7b:dc:37:ac:23:65:2f:cb:31:7f:c3:50:c6:71:24:
7f:be:f5:b8:76:70:8a:2f:81:1f:69:f3:4b:e6:d7:de:03:82:
0c:b4:fb:a0:ad:06:a4:c1:0f:06:64:d3:30:dd:c9:da:68:7d:
fe:18:83:6f:ce:6e:b2:ec:02:72:28:bf:a6:a8:59:6a:68:33:
ac:40:0a:f3:f8:16:0c:5e:8e:19:5e:a6:33:c8:7b:da:2f:83:
2e:31:98:1f:f0:da:97:fb:00:6d:8a:25:e0:a5:51:a0:f3:ab:
a4:64:f6:60:df:c3:e2:71:4b:0f:74:8f:0d:55:11:89:78:32:
3b:ed:81:bb:dc:ed:17:ec:73:77:a4:73:6a:fe:d6:4a:90:ac:
08:a0:9d:4b
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZ3ES12B2sw7sMuLWbig4VeKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2NTliMGJhODQwN2JlMTFjZmM5MTFiZDMxZWQxNDBjZDFj
NjA0NmMwHhcNMjYwNDI1MTA1OTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMzI2ODI0YjhkM2QxYzZiNDRmMGY1MDVkNzY5MTRlYTZjMTBkNDJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlVRA0xx2OOuHq0fP7eGWdQrEU8Az
iSjS456yNihEH5CYMFebn8wuAsBh7IhsWOEJHDmhD79uWqvu8DCZq+BnvRsvz3ly
SEX66eGDysL2isbX7jRe/nFkyu4UmLeu43s7BHYQhmygmWlH7cXrMrOEm2vpDfUm
1Fr86lFoi79Nw9jAFRMXItFSZsT/du+ZwYpQLIcr/bf4nYI6ZYaicsUNX6fPS9Zc
BtdOI0sroop3bAd90G6aqsyc9kNU3G44J3zfJZXq9RZd6IeIhPBRI8Eb4Vc/Wnvz
y3Uo4D3bHSxDClOyVlhGEoiEJTmAmdSvYLl+l8X14kBfYu7j7pBHjCtdjwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFNMmgkuNPRxrRPD1BddpFOpsENQqMB8GA1UdIwQY
MBaAFFZZsLqEB74Rz8kRvTHtFAzRxgRsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVmxtd3VvUUh2aEhQeVJHOU1lMFVETkhHQkd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9kZDhlMzEtMDBiNS00MjEyLTllMDEt
MjM5NGM2NjAwMDIyLzEvMHlhQ1M0MDlIR3RFOFBVRjEya1U2bXdRMUNvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi9kZDhlMzEtMDBiNS00MjEyLTllMDEtMjM5NGM2NjAwMDIy
LzEvVmxtd3VvUUh2aEhQeVJHOU1lMFVETkhHQkd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKhD6gjAN
BgkqhkiG9w0BAQsFAAOCAQEAT+q8VD9v9e07w4yGsT6JyJ9iOTVfAIK+bb0m+l3a
3M5wLk4XVgmxNKzZD4alr09U9BansuPXXvArrdFhZCwy7ZfaCCslJQpUCP8q1BmP
cnHSHVeuYO/PAf+Qu8BBdOdmNyNqzQ9olhFtZcjQZ64re9w3rCNlL8sxf8NQxnEk
f771uHZwii+BH2nzS+bX3gOCDLT7oK0GpMEPBmTTMN3J2mh9/hiDb85usuwCcii/
pqhZamgzrEAK8/gWDF6OGV6mM8h72i+DLjGYH/Dal/sAbYol4KVRoPOrpGT2YN/D
4nFLD3SPDVURiXgyO+2Bu9ztF+xzd6Rzav7WSpCsCKCdSw==
-----END CERTIFICATE-----
Generated at Wed May 13 04:09:22 2026 by rpki-client