Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/7912c6-c9d4-43c2-9688-c45f8e251248/1/YQi9tzZ0G5ZlpUErj9axARGt8Yw.roa
File: YQi9tzZ0G5ZlpUErj9axARGt8Yw.roa (raw, json)
Hash identifier: /X3sIc5ZFo2gUG94yP/VTEOSrey/8xQ6E8EZZPcUybk=
Subject key identifier: 61:08:BD:B7:36:74:1B:96:65:A5:41:2B:8F:D6:B1:01:11:AD:F1:8C
Certificate issuer: /CN=f0f27aebf02abc355212afbf1621e3e0d4a76057
Certificate serial: 01A0D52E926BA69A706AD36B0EE4DDE20D18
Authority key identifier: F0:F2:7A:EB:F0:2A:BC:35:52:12:AF:BF:16:21:E3:E0:D4:A7:60:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8PJ66_AqvDVSEq-_FiHj4NSnYFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/7912c6-c9d4-43c2-9688-c45f8e251248/1/YQi9tzZ0G5ZlpUErj9axARGt8Yw.roa
Signing time: Thu 24 Sep 2026 20:49:54 +0000
ROA not before: Thu 24 Sep 2026 20:49:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 2a14:e80:100::/48 maxlen: 48
2a14:e80:101::/48 maxlen: 48
2a14:e80:102::/48 maxlen: 48
2a14:e80:103::/48 maxlen: 48
2a14:e80:104::/48 maxlen: 48
2a14:e80:105::/48 maxlen: 48
2a14:e80:106::/48 maxlen: 48
2a14:e80:107::/48 maxlen: 48
2a14:e80:108::/48 maxlen: 48
2a14:e80:109::/48 maxlen: 48
2a14:e80:10a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/7912c6-c9d4-43c2-9688-c45f8e251248/1/8PJ66_AqvDVSEq-_FiHj4NSnYFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/7912c6-c9d4-43c2-9688-c45f8e251248/1/8PJ66_AqvDVSEq-_FiHj4NSnYFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8PJ66_AqvDVSEq-_FiHj4NSnYFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:2e:92:6b:a6:9a:70:6a:d3:6b:0e:e4:dd:e2:0d:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0f27aebf02abc355212afbf1621e3e0d4a76057
Validity
Not Before: Sep 24 20:49:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6108bdb736741b9665a5412b8fd6b10111adf18c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:bf:79:2e:46:06:26:48:78:44:bd:a3:1c:04:
64:1d:33:43:77:6f:f0:fa:59:cd:8e:c3:50:80:1d:
b9:a6:db:97:d7:3e:7e:43:e2:f5:d1:ba:e9:7c:a9:
a4:b3:e5:ff:3b:39:fa:51:1e:fd:12:b8:c0:00:35:
6e:bf:ee:76:60:dc:a5:0e:8c:f2:b0:34:cb:3f:68:
52:16:68:4c:28:98:3e:d4:43:49:80:49:22:ab:c9:
ba:0c:fa:a4:55:2a:52:eb:10:a0:6e:a8:e8:70:f4:
21:99:ea:ca:c2:4f:6a:43:b3:c4:97:f9:6f:1a:db:
2b:65:0c:aa:dc:9f:d8:51:52:5b:e5:89:98:f9:eb:
61:14:c9:b5:77:35:16:1f:26:ca:ab:f2:4c:9e:ae:
e3:40:0b:8d:c5:d4:82:cf:ab:05:47:f0:93:06:9e:
68:44:11:4d:da:4a:7b:13:23:04:3d:44:e9:35:87:
9a:47:9e:41:4c:68:8e:85:b4:e8:cd:b4:3b:be:2c:
07:d6:e9:3c:c2:8a:6d:11:c6:56:26:1d:2e:31:71:
6c:ea:05:97:dd:79:26:ce:5b:ab:3b:a3:c0:d4:42:
5b:d3:86:cf:e0:73:7b:92:b0:67:fe:47:60:6e:dd:
dc:a3:23:3e:0b:16:57:cc:ce:f2:31:47:b6:e7:95:
06:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:08:BD:B7:36:74:1B:96:65:A5:41:2B:8F:D6:B1:01:11:AD:F1:8C
X509v3 Authority Key Identifier:
keyid:F0:F2:7A:EB:F0:2A:BC:35:52:12:AF:BF:16:21:E3:E0:D4:A7:60:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8PJ66_AqvDVSEq-_FiHj4NSnYFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7912c6-c9d4-43c2-9688-c45f8e251248/1/YQi9tzZ0G5ZlpUErj9axARGt8Yw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7912c6-c9d4-43c2-9688-c45f8e251248/1/8PJ66_AqvDVSEq-_FiHj4NSnYFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:e80:100::-2a14:e80:10a:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
ab:01:73:37:f8:1d:0a:7a:19:e0:80:33:fd:97:7b:ab:4d:7c:
41:1f:1c:88:82:38:81:56:d7:a4:13:41:b8:a2:0a:43:35:07:
08:fc:2c:c4:e0:39:5d:ec:28:1c:c4:a6:90:e1:8a:43:64:2b:
91:6b:55:0e:40:b5:c4:47:94:3a:24:5d:8b:66:e6:a0:ee:24:
aa:03:ad:28:3c:a6:c5:93:1b:57:a9:c9:9f:52:3f:71:31:8b:
fc:d7:b1:8a:92:00:32:b9:2a:f7:53:73:df:28:29:28:e2:81:
dc:5f:04:e6:6a:a5:53:02:24:1a:6b:b8:66:c2:f1:f2:3c:d2:
68:65:54:6e:d0:4b:68:ff:81:eb:69:3f:92:c1:40:77:ef:3d:
b3:4a:e4:59:4a:64:14:f0:93:f7:95:fe:54:c3:5a:7d:6b:15:
d6:33:59:e1:7b:78:8e:86:1c:64:dc:41:3f:9e:35:a3:dc:28:
23:a6:f8:d7:a5:f3:e2:89:44:f5:e0:11:6a:5a:44:48:4b:f3:
30:4a:da:af:be:1a:1f:a9:60:2c:3c:2e:dc:e4:8b:ab:98:4c:
4b:3c:94:30:66:b0:9a:98:3d:92:82:46:0a:00:9d:f2:a3:15:
6f:3a:b4:8a:53:21:8d:26:d6:c2:b4:2a:86:a0:1a:53:63:de:
0d:63:5d:9f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Sep 28 10:07:05 2026 by rpki-client