Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fc/c0e7b4-f369-4b8e-b3c3-1771b83d67e8/1/y8cnHcyt3VjfzlrJcmcgg3rUJQA.roa
File: y8cnHcyt3VjfzlrJcmcgg3rUJQA.roa (raw, json)
Hash identifier: ij7Riuco9SCaywsTWfDKgoi8S8Zx6rSYwN0U/29wCBk=
Subject key identifier: CB:C7:27:1D:CC:AD:DD:58:DF:CE:5A:C9:72:67:20:83:7A:D4:25:00
Certificate issuer: /CN=4540e5229a2c7295d21f3adff3add40995014095
Certificate serial: 01A06E7ED2B3BFFAB138B5AAAE3B02CB8A97
Authority key identifier: 45:40:E5:22:9A:2C:72:95:D2:1F:3A:DF:F3:AD:D4:09:95:01:40:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RUDlIposcpXSHzrf863UCZUBQJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/c0e7b4-f369-4b8e-b3c3-1771b83d67e8/1/y8cnHcyt3VjfzlrJcmcgg3rUJQA.roa
Signing time: Fri 04 Sep 2026 22:16:40 +0000
ROA not before: Fri 04 Sep 2026 22:16:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208259
IP address blocks: 2a0b:9900::/29 maxlen: 29
2a0b:9900::/36 maxlen: 36
2a0b:9900::/48 maxlen: 48
2a0b:9900:1000::/36 maxlen: 36
2a0b:9900:2000::/36 maxlen: 36
2a0b:9900:3000::/36 maxlen: 36
2a0b:9900:4000::/36 maxlen: 36
2a0b:9900:5000::/36 maxlen: 36
2a0b:9900:6000::/36 maxlen: 36
2a0b:9900:7000::/36 maxlen: 36
2a0b:9900:8000::/44 maxlen: 48
2a0b:9900:8010::/44 maxlen: 48
2a0b:9900:8020::/44 maxlen: 48
2a0b:9900:8030::/44 maxlen: 48
2a0b:9900:8040::/44 maxlen: 48
2a0b:9900:8050::/44 maxlen: 48
2a0b:9900:8060::/44 maxlen: 48
2a0b:9900:8070::/44 maxlen: 48
2a0b:9900:8080::/44 maxlen: 48
2a0b:9900:8090::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/c0e7b4-f369-4b8e-b3c3-1771b83d67e8/1/RUDlIposcpXSHzrf863UCZUBQJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/c0e7b4-f369-4b8e-b3c3-1771b83d67e8/1/RUDlIposcpXSHzrf863UCZUBQJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/RUDlIposcpXSHzrf863UCZUBQJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 15:20:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:7e:d2:b3:bf:fa:b1:38:b5:aa:ae:3b:02:cb:8a:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4540e5229a2c7295d21f3adff3add40995014095
Validity
Not Before: Sep 4 22:16:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cbc7271dccaddd58dfce5ac9726720837ad42500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:00:2c:d1:c8:9b:0d:a8:d9:18:3d:ff:69:44:
19:20:06:0c:1b:ce:cd:5e:14:bf:34:4f:68:10:bb:
a9:e7:b0:8b:93:71:fd:5d:6f:57:39:04:b9:1d:43:
c3:2c:58:65:c4:c1:83:98:2d:78:d9:74:f2:36:c0:
99:3f:fe:7e:9a:a8:8c:b4:21:10:48:f8:85:92:78:
01:88:34:8b:da:77:4b:56:3f:e1:6c:28:3e:cf:98:
20:d1:b9:6d:e1:4f:0b:26:a9:ed:a7:a8:22:94:b8:
ba:91:76:df:48:77:4c:14:07:a6:15:9e:68:22:39:
4b:e4:67:3b:af:5a:b0:4d:cd:f6:43:00:3a:72:b7:
e5:b1:4e:92:fa:b1:70:cb:29:46:ca:67:b2:78:01:
ac:13:6a:27:70:f5:b0:56:7c:18:d3:8c:5c:5f:42:
08:3b:7e:ae:35:0f:5a:9e:5b:d8:bc:95:1f:90:81:
44:79:96:c4:0c:82:39:f2:99:83:8e:d7:92:1a:cc:
8e:66:e5:b0:c8:71:da:e2:a3:13:41:a0:94:68:ed:
a3:05:05:d0:d8:58:52:09:34:e6:b5:4b:cf:bb:cd:
e5:70:be:aa:d6:1d:94:6d:bb:06:69:1e:cf:60:5b:
5e:27:7c:11:3a:c7:fd:44:44:70:be:72:c7:db:c4:
ef:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:C7:27:1D:CC:AD:DD:58:DF:CE:5A:C9:72:67:20:83:7A:D4:25:00
X509v3 Authority Key Identifier:
keyid:45:40:E5:22:9A:2C:72:95:D2:1F:3A:DF:F3:AD:D4:09:95:01:40:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RUDlIposcpXSHzrf863UCZUBQJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c0e7b4-f369-4b8e-b3c3-1771b83d67e8/1/y8cnHcyt3VjfzlrJcmcgg3rUJQA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c0e7b4-f369-4b8e-b3c3-1771b83d67e8/1/RUDlIposcpXSHzrf863UCZUBQJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:9900::/29
Signature Algorithm: sha256WithRSAEncryption
6a:23:ae:a0:1c:91:b9:73:ee:84:7f:0d:bd:7c:c6:61:0d:05:
21:00:2b:09:74:a1:67:a5:a0:2a:ce:07:ef:be:08:93:0a:a5:
cc:80:b7:5d:ae:ad:5e:af:0f:dd:5e:96:b6:c0:8d:90:fc:2c:
83:a1:a5:55:f0:0b:f0:d4:fc:55:ff:78:33:02:9d:ef:c3:fc:
7e:70:05:96:a0:ad:a8:3d:f4:42:58:5f:09:c5:d8:de:e5:d3:
d6:1a:86:64:89:8f:30:e0:1e:10:1d:e0:03:89:8f:04:bf:c9:
89:cb:d1:cd:01:e3:c5:80:dc:2b:a1:2a:ba:4d:d8:c9:98:d7:
68:c3:18:12:b1:6b:7b:1e:20:e6:49:26:43:4d:30:6b:33:1d:
05:54:35:c7:d7:4d:9f:a7:ff:5c:1d:a2:2c:5b:1c:ab:d9:27:
d4:4f:be:26:1a:0d:3b:f3:1b:1a:db:a4:09:85:b4:7e:db:6f:
af:98:6d:45:0d:06:64:f1:c7:1d:51:14:8b:6e:e9:cc:da:41:
4c:b5:f8:45:f7:30:70:66:47:6b:eb:c7:89:59:71:3b:79:73:
69:79:7f:3c:a6:91:34:76:bb:d5:b1:3e:c7:a5:b0:a0:cb:5c:
75:34:16:50:e1:2c:2a:6f:2b:04:9e:75:fa:66:05:ab:d5:72:
8f:e0:78:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 20:13:51 2026 by rpki-client