Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/yYd4WUIyi7vr2I67nTkoVt0Ejv0.roa
File: yYd4WUIyi7vr2I67nTkoVt0Ejv0.roa (raw, json)
Hash identifier: 5xaRG17r+u4QRTcWLhrlmGzeZOgMH/U+21YclapRGdE=
Subject key identifier: C9:87:78:59:42:32:8B:BB:EB:D8:8E:BB:9D:39:28:56:DD:04:8E:FD
Certificate issuer: /CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Certificate serial: 019DC90A458479E88CA0512D36716921106A
Authority key identifier: 56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/yYd4WUIyi7vr2I67nTkoVt0Ejv0.roa
Signing time: Sun 26 Apr 2026 09:06:26 +0000
ROA not before: Sun 26 Apr 2026 09:06:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43641
IP address blocks: 2a10:fa82:d000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 11:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:c9:0a:45:84:79:e8:8c:a0:51:2d:36:71:69:21:10:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Validity
Not Before: Apr 26 09:06:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c987785942328bbbebd88ebb9d392856dd048efd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:35:9e:fe:06:42:05:23:02:39:03:92:14:3b:
99:e1:f9:bc:ae:2f:ec:86:bc:d7:24:92:e2:b2:76:
52:67:35:3e:5f:b0:7d:51:a9:2c:fb:20:dd:cc:3f:
7d:8d:4b:15:9b:74:71:b2:4d:42:7e:9c:79:f4:67:
00:68:71:ea:51:97:b6:ec:3b:e4:bc:4e:ac:76:8d:
3f:9d:4f:ce:3e:ec:53:60:b3:2a:f9:7b:44:e7:18:
f8:00:eb:11:f9:dc:09:fe:02:98:c9:e2:f4:fa:b3:
80:04:40:2f:52:d2:ec:e1:ba:89:8d:c2:ab:a5:c6:
c7:e1:04:47:21:cc:db:7e:89:71:8d:98:ed:0e:f0:
ab:d0:fb:ff:a8:38:d0:dd:d2:d1:09:99:1d:db:27:
64:ac:61:5b:fb:aa:75:70:d6:fd:1f:b7:24:68:8d:
eb:91:61:9b:af:70:23:97:5c:62:c3:6f:bd:48:f2:
af:5d:b4:11:16:1a:78:dc:6b:76:33:2c:20:d9:51:
5e:ff:1e:6f:ff:0d:3f:92:f4:f3:5a:cc:66:20:ae:
4b:65:bd:48:81:79:58:0f:7d:7d:ff:ec:0f:a1:30:
bd:78:46:82:0d:76:58:8c:07:92:4d:c2:7b:f6:4d:
67:37:f3:ac:1b:fb:8a:1c:12:cc:26:56:9e:e2:c9:
bd:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:87:78:59:42:32:8B:BB:EB:D8:8E:BB:9D:39:28:56:DD:04:8E:FD
X509v3 Authority Key Identifier:
keyid:56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/yYd4WUIyi7vr2I67nTkoVt0Ejv0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:fa82:d000::/36
Signature Algorithm: sha256WithRSAEncryption
05:37:c0:b3:b6:96:bf:86:a7:9f:c0:37:a8:4f:4b:45:b9:5a:
15:46:2b:77:07:30:33:c3:d4:e9:b3:98:0f:8f:05:b3:5e:ca:
17:c6:0f:7f:85:ba:40:14:8f:fd:56:f9:bc:91:27:6c:0f:10:
af:36:59:c9:de:ee:d8:5f:87:bf:05:ac:5f:e3:37:56:43:51:
84:11:1d:c6:6a:73:49:1a:a2:c2:14:0c:ef:8b:7c:31:a2:bb:
68:fd:c8:c3:f5:b7:bb:15:f1:8d:4b:cf:95:b8:23:ce:88:6b:
75:ec:a3:a6:91:a1:33:52:77:fa:e7:be:fd:6a:a0:57:ed:d0:
cf:83:84:0c:5a:be:7a:6c:b0:c6:31:5e:07:8f:33:dc:b6:a6:
50:ce:a2:3d:c8:59:88:08:26:79:7e:55:4b:d3:b4:62:d0:5b:
ee:9d:50:06:9a:6e:ac:ae:f2:20:a6:de:00:08:63:e1:50:43:
70:b0:ec:f5:f3:1a:d0:3e:81:44:8b:55:48:55:fb:28:cf:3a:
97:ea:15:47:82:c9:26:ac:57:61:18:67:69:48:44:3f:9e:a0:
0e:a1:93:e6:fa:b6:e5:dd:19:52:aa:1f:a8:50:b5:0a:e4:1d:
2c:b1:37:0e:dd:ef:e5:67:58:2b:97:8f:f0:a4:58:16:d8:af:
b7:05:fd:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:44:50 2026 by rpki-client