Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/yi7x-mBtwQeg8FprNLWvslMCrZg.roa
File: yi7x-mBtwQeg8FprNLWvslMCrZg.roa (raw, json)
Hash identifier: 5V/O65AIDW9qxW7W9/IyUH97d/aU4p9WBBDyRlN9KG0=
Subject key identifier: CA:2E:F1:FA:60:6D:C1:07:A0:F0:5A:6B:34:B5:AF:B2:53:02:AD:98
Certificate issuer: /CN=0f025fa357c20abbf118426234658e62d7dc7076
Certificate serial: 019E004FFD1A44FAEEDB989474517CAC89BD
Authority key identifier: 0F:02:5F:A3:57:C2:0A:BB:F1:18:42:62:34:65:8E:62:D7:DC:70:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DwJfo1fCCrvxGEJiNGWOYtfccHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/yi7x-mBtwQeg8FprNLWvslMCrZg.roa
Signing time: Thu 07 May 2026 02:41:42 +0000
ROA not before: Thu 07 May 2026 02:41:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50340
IP address blocks: 2a01:ee80:2003::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/DwJfo1fCCrvxGEJiNGWOYtfccHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/DwJfo1fCCrvxGEJiNGWOYtfccHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/DwJfo1fCCrvxGEJiNGWOYtfccHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 17:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:00:4f:fd:1a:44:fa:ee:db:98:94:74:51:7c:ac:89:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f025fa357c20abbf118426234658e62d7dc7076
Validity
Not Before: May 7 02:41:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ca2ef1fa606dc107a0f05a6b34b5afb25302ad98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c1:17:f3:60:f4:48:9d:d6:ce:bd:34:27:49:
4b:a1:f3:cd:54:d3:ef:00:63:6b:17:46:c7:53:9b:
f3:2e:2d:04:88:96:1d:2a:df:6f:5d:99:b7:70:67:
79:49:fc:76:02:52:7a:76:3c:32:c7:78:61:02:25:
50:ed:d8:9c:2c:fa:06:b2:ae:01:14:fa:51:f4:28:
46:9c:9e:98:85:fb:d4:5d:32:cf:d5:4c:f6:df:f1:
b3:14:5c:8f:53:38:09:ee:ff:b1:98:ca:a6:2c:e1:
8c:2b:fd:7f:a6:45:91:99:3e:90:24:3e:7b:93:db:
89:66:ec:f2:65:d8:56:9d:13:3f:26:b2:cd:3e:89:
a5:f9:4b:3c:c9:3b:81:3a:a4:07:33:ab:73:b3:b5:
74:b6:9c:1c:11:1b:ea:e4:d7:c0:8d:d1:90:87:a9:
2c:72:14:bc:05:50:09:8b:b5:88:96:56:ae:00:f1:
cb:a0:0c:15:82:c6:55:89:e7:ef:7b:5d:92:fe:f0:
e7:ca:0f:cc:f3:b8:cc:04:22:37:30:80:15:e8:55:
ac:d5:23:db:28:50:fe:e5:11:b1:0e:8e:55:ea:0c:
b7:81:61:0a:86:7d:34:48:00:2e:3a:7e:56:9b:5d:
fc:fc:c2:5a:8a:f6:a3:28:ac:b9:9d:6b:5b:1a:e6:
d4:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:2E:F1:FA:60:6D:C1:07:A0:F0:5A:6B:34:B5:AF:B2:53:02:AD:98
X509v3 Authority Key Identifier:
keyid:0F:02:5F:A3:57:C2:0A:BB:F1:18:42:62:34:65:8E:62:D7:DC:70:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DwJfo1fCCrvxGEJiNGWOYtfccHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/yi7x-mBtwQeg8FprNLWvslMCrZg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/DwJfo1fCCrvxGEJiNGWOYtfccHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:ee80:2003::/48
Signature Algorithm: sha256WithRSAEncryption
60:4a:e8:86:b8:33:a4:3c:11:7b:cf:7f:a8:a4:bf:99:18:76:
66:a4:1f:4c:31:57:95:49:a9:c8:9f:e9:b8:85:0a:89:cd:33:
fb:15:3e:ab:fa:68:97:12:b0:95:ee:a0:f8:05:9f:10:b2:c4:
86:ad:d8:46:42:dc:df:e4:59:d1:9b:cf:f2:fc:a6:34:fd:61:
af:67:3a:3a:96:d4:90:27:92:b5:ce:0a:29:f5:0e:1c:c0:ba:
f2:7e:b2:eb:6f:19:88:d4:97:08:e6:8c:02:f2:c4:72:79:9c:
db:f0:0b:a3:71:fa:80:e8:9b:63:0e:40:bb:d0:7d:13:d9:b7:
cc:4c:1a:00:ee:9f:6b:12:59:57:64:8b:7a:4a:76:9b:6b:a1:
48:53:c4:b9:48:8f:bc:99:0a:5d:87:86:3d:b2:22:90:42:42:
d2:4f:88:a2:ca:df:c7:21:18:c4:2a:ff:21:9a:42:b3:09:61:
48:24:af:48:4c:7c:02:39:26:7f:69:6c:4f:3e:46:90:49:0e:
50:58:00:90:f8:4f:cd:44:33:d6:1c:5b:66:0c:de:9d:a5:70:
54:05:15:f9:1a:29:c8:a9:10:b9:00:79:ef:44:dc:f5:7a:8a:
94:1a:ae:59:a5:32:29:fc:2d:77:c7:94:55:ba:2f:8e:79:54:
9a:c8:e0:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:49:45 2026 by rpki-client