Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/YWG5ON1b6X3BqwXFFTAP2PK_wGs.roa
File: YWG5ON1b6X3BqwXFFTAP2PK_wGs.roa (raw, json)
Hash identifier: CcEaIDcXc7s7X0W0T9ehF2loB+l3cG3LCSPSSnUIhJc=
Subject key identifier: 61:61:B9:38:DD:5B:E9:7D:C1:AB:05:C5:15:30:0F:D8:F2:BF:C0:6B
Certificate issuer: /CN=cbe3da3582a22830ec4e67547e75fa3b9da20b23
Certificate serial: 01A17FCD55A83F3F94FEED82A9C598FFA8FB
Authority key identifier: CB:E3:DA:35:82:A2:28:30:EC:4E:67:54:7E:75:FA:3B:9D:A2:0B:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y-PaNYKiKDDsTmdUfnX6O52iCyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/YWG5ON1b6X3BqwXFFTAP2PK_wGs.roa
Signing time: Tue 27 Oct 2026 23:58:45 +0000
ROA not before: Tue 27 Oct 2026 23:58:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214502
IP address blocks: 2a11:b44:c004::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.mft
rsync://rpki.ripe.net/repository/DEFAULT/y-PaNYKiKDDsTmdUfnX6O52iCyM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7f:cd:55:a8:3f:3f:94:fe:ed:82:a9:c5:98:ff:a8:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbe3da3582a22830ec4e67547e75fa3b9da20b23
Validity
Not Before: Oct 27 23:58:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6161b938dd5be97dc1ab05c515300fd8f2bfc06b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:5a:ee:dc:25:d7:b0:02:fd:cb:6a:76:55:55:
a5:92:e1:9e:a7:0d:e2:ba:78:f7:fd:47:69:bf:51:
8a:c1:71:2a:c4:66:18:57:9f:11:ae:f4:61:40:95:
96:57:fc:c9:8a:7b:0d:3f:5b:cd:d1:0f:65:61:2d:
9c:ae:a5:ee:cd:37:4c:b3:36:61:1d:88:54:6b:4c:
d6:b2:9b:04:9a:36:93:e7:48:58:da:88:f1:d9:a6:
1f:cb:7f:97:f3:6d:57:51:f6:90:53:92:c5:ae:29:
5d:05:2a:a9:9c:5b:4e:e6:0c:8a:16:bf:76:67:8e:
91:c8:a8:9b:5e:60:d1:69:f2:b3:3b:23:b7:4e:3e:
bd:ba:27:6b:83:29:e5:1f:c5:f3:09:db:eb:ae:be:
34:2c:63:e2:ff:33:2e:4a:b4:74:a1:1a:2a:35:2b:
f6:42:89:40:4b:0a:9b:47:99:17:c2:48:04:7d:0b:
83:43:de:92:6a:60:f1:7f:ab:2e:81:43:0a:b0:4a:
26:d0:92:73:bb:f8:da:38:b2:3c:2b:cf:76:e0:29:
c0:a8:be:f5:9f:f3:8e:2e:dc:5d:46:7c:03:1a:be:
60:d9:44:45:0b:9d:60:17:fc:89:8f:c1:97:5c:25:
52:c7:29:fc:81:6b:2b:5a:50:c7:d5:9c:96:c6:18:
12:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:61:B9:38:DD:5B:E9:7D:C1:AB:05:C5:15:30:0F:D8:F2:BF:C0:6B
X509v3 Authority Key Identifier:
keyid:CB:E3:DA:35:82:A2:28:30:EC:4E:67:54:7E:75:FA:3B:9D:A2:0B:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y-PaNYKiKDDsTmdUfnX6O52iCyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/YWG5ON1b6X3BqwXFFTAP2PK_wGs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:b44:c004::/48
Signature Algorithm: sha256WithRSAEncryption
b9:1a:ae:db:de:2e:4f:1a:01:f8:83:af:9f:48:d7:88:0c:38:
c0:9d:1e:3b:b6:b2:51:17:8e:94:eb:9e:ec:54:d7:5f:4a:35:
8c:82:b3:70:e6:ee:39:65:d0:b3:b6:92:ae:ef:29:55:d3:d0:
31:bc:e8:56:ce:50:c0:c7:41:3a:2b:a1:d0:56:7b:0a:e7:af:
ec:7f:ce:1c:b0:d2:9d:91:8e:19:96:0b:75:94:c3:b3:a9:00:
6c:d7:ee:bb:b6:61:51:2d:a1:84:09:23:3b:0d:a8:79:7f:dd:
04:1c:18:83:c6:db:8e:75:fa:25:18:15:aa:8b:78:5a:21:4f:
86:81:22:fe:a9:86:18:3e:78:9f:51:ab:2a:0c:17:b5:33:85:
a8:5a:22:7a:26:6b:de:42:d0:d1:d7:86:c0:77:bc:44:8d:48:
36:65:ab:df:6a:a8:b2:5f:27:f7:0a:67:4d:ad:cd:74:01:8f:
40:9b:10:ea:e4:24:86:e5:c2:0d:2b:a3:13:74:37:42:b7:bc:
54:89:72:d2:90:68:d0:2f:f3:63:46:c0:ea:f5:c0:1e:eb:b5:
2f:bc:ec:92:50:dc:35:43:c4:e4:72:b5:da:73:61:b9:74:84:
db:b9:c6:8d:8a:69:0d:d3:95:be:97:60:a5:a0:f8:92:d7:20:
41:f2:db:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:03:55 2026 by rpki-client