Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/YVTKpOvf0L49qbz3AiG57WYfgj8.roa
File: YVTKpOvf0L49qbz3AiG57WYfgj8.roa (raw, json)
Hash identifier: 7kKFQTU+SEHGEUx3xbwOgwsOK41/nLxTB7/dFrIF4uI=
Subject key identifier: 61:54:CA:A4:EB:DF:D0:BE:3D:A9:BC:F7:02:21:B9:ED:66:1F:82:3F
Certificate issuer: /CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Certificate serial: 01A0C5C3EF9E99EB03FC33B5E90284ABA3F1
Authority key identifier: 56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/YVTKpOvf0L49qbz3AiG57WYfgj8.roa
Signing time: Mon 21 Sep 2026 20:59:07 +0000
ROA not before: Mon 21 Sep 2026 20:59:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35661
IP address blocks: 2a10:fa80:7::/48 maxlen: 48
2a10:fa80:120::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:c3:ef:9e:99:eb:03:fc:33:b5:e9:02:84:ab:a3:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Validity
Not Before: Sep 21 20:59:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6154caa4ebdfd0be3da9bcf70221b9ed661f823f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:19:ac:67:df:71:13:e6:38:1f:fe:f8:21:86:
2e:71:4f:27:95:e0:dd:d6:a4:98:60:8c:fc:db:21:
ea:de:88:68:22:3c:28:cd:d3:fb:f5:dc:36:af:33:
af:f3:83:d2:84:32:a8:d9:4b:1a:14:24:00:80:68:
88:dd:07:d9:71:71:dd:4a:fb:91:df:5f:80:3b:b8:
b3:15:71:f2:12:22:d7:73:a9:87:8d:0e:f6:f2:01:
77:d7:6f:45:3f:d3:51:91:29:bd:a6:90:3e:30:6e:
ff:3f:2f:a3:b5:19:c7:e6:55:8f:2d:df:3f:a9:04:
d1:57:68:b8:70:c8:76:c0:88:b9:2b:7b:c8:16:1d:
06:b4:fa:b7:8d:89:d6:ae:e4:e8:96:1f:36:32:31:
60:cb:99:09:76:f1:36:e6:e9:74:fd:7c:7a:29:f3:
b8:7e:6c:8c:08:4f:b2:d2:bc:ab:ad:3f:49:77:dc:
d8:4d:c2:c4:e4:68:35:ad:09:1b:3e:0a:76:0a:49:
81:e0:ce:f7:d9:56:82:20:90:b5:00:cc:b6:59:11:
9e:bb:bd:74:6e:75:70:20:b8:a0:75:ef:72:24:15:
2c:a5:b6:a7:17:95:67:9a:b9:a0:94:62:50:e9:28:
bb:3d:dd:0c:25:a1:75:a8:41:3b:f4:36:db:9f:4c:
92:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:54:CA:A4:EB:DF:D0:BE:3D:A9:BC:F7:02:21:B9:ED:66:1F:82:3F
X509v3 Authority Key Identifier:
keyid:56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/YVTKpOvf0L49qbz3AiG57WYfgj8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:fa80:7::/48
2a10:fa80:120::/44
Signature Algorithm: sha256WithRSAEncryption
36:d6:85:c3:13:ea:5f:a4:70:6a:0d:06:e5:5c:2e:cd:e6:4a:
95:de:9b:f6:d3:11:08:8e:54:24:e9:df:70:48:6d:09:1b:1b:
25:fc:de:f7:71:0d:8b:d7:a0:8b:ce:49:8a:a7:54:9e:66:20:
09:2c:f5:a7:1b:1b:fe:85:4e:b0:5a:f5:19:24:e3:ac:72:fa:
0f:c4:b1:d6:81:16:79:14:2d:8c:32:94:6a:3f:66:93:6f:07:
30:2a:26:e8:a9:5e:68:22:44:98:50:9b:3e:f2:97:39:39:4a:
9f:0f:36:77:75:49:6f:2c:a9:71:62:4e:77:77:13:65:29:eb:
a1:e8:57:77:f4:0d:96:ac:eb:05:e4:62:6b:25:b1:72:1b:96:
46:fc:8c:fa:dc:af:ae:8f:64:dc:14:b5:de:04:f6:58:0d:73:
48:6f:60:59:b9:e0:59:58:d7:8a:12:2a:0f:02:02:91:20:12:
fe:85:e3:01:66:96:b5:41:4f:02:df:92:cc:95:42:c9:f9:42:
72:ff:41:c4:e1:06:ca:1f:e7:21:95:98:9a:29:a9:1f:e2:e6:
23:65:30:52:44:39:35:b8:62:c8:b5:f3:25:ff:de:c1:7e:49:
11:a5:f9:9c:10:df:03:ff:2e:4f:9d:80:c0:c9:6a:fc:b1:5a:
5c:ad:4a:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:04:04 2026 by rpki-client