Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/y4wAHtuhXySsgZAsgfueu86X_u0.roa
File: y4wAHtuhXySsgZAsgfueu86X_u0.roa (raw, json)
Hash identifier: ujLBVevk0lCyiIWcos/hcAcdY8h12ok+FT7VQSNGf6M=
Subject key identifier: CB:8C:00:1E:DB:A1:5F:24:AC:81:90:2C:81:FB:9E:BB:CE:97:FE:ED
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 019DDD5BBA0FDA1065905882BBF2B13DF951
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/y4wAHtuhXySsgZAsgfueu86X_u0.roa
Signing time: Thu 30 Apr 2026 07:47:49 +0000
ROA not before: Thu 30 Apr 2026 07:47:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12389
IP address blocks: 2a09:6285::/32 maxlen: 32
2a0e:b900::/29 maxlen: 29
2a10:4100::/32 maxlen: 32
2a10:4101::/32 maxlen: 32
2a10:4900::/29 maxlen: 29
2a11:4b40::/32 maxlen: 32
2a11:4b41::/32 maxlen: 32
2a12:a341::/32 maxlen: 32
2a13:2984::/30 maxlen: 30
2a13:3880::/32 maxlen: 32
2a13:3881::/32 maxlen: 32
2a13:3882::/32 maxlen: 32
2a13:3883::/32 maxlen: 32
2a13:3884::/32 maxlen: 32
2a13:3885::/32 maxlen: 32
2a13:3886::/32 maxlen: 32
2a13:3887::/32 maxlen: 32
2a13:93c2::/32 maxlen: 32
2a13:93c4::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 05:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:dd:5b:ba:0f:da:10:65:90:58:82:bb:f2:b1:3d:f9:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Apr 30 07:47:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cb8c001edba15f24ac81902c81fb9ebbce97feed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:41:2a:ca:7c:35:66:d4:3d:a1:ec:e0:a2:a4:
fe:f0:60:54:3c:a0:62:b4:84:e5:9d:ba:0e:4e:60:
07:02:f5:47:d2:76:ad:91:e9:85:5c:93:6f:db:a5:
d2:c6:c6:58:03:64:08:5f:8b:19:5a:67:7e:2a:6f:
cb:27:30:e4:dd:78:7a:db:ba:71:89:c8:e0:cb:09:
2e:a8:6d:8a:76:4b:0a:bc:d6:62:2e:e1:29:31:21:
1f:50:eb:4c:12:ed:07:97:16:a1:18:dc:bd:53:ae:
07:93:2c:d6:87:c5:e1:e4:17:ba:2c:79:a5:ef:61:
bf:40:4a:a4:d1:7d:ff:f7:d5:31:16:38:33:cc:91:
07:2a:19:b4:c6:d4:bc:4b:ea:d7:c4:a0:75:89:85:
3c:57:40:9a:36:b0:ea:2c:fa:c7:8c:b2:82:a0:d0:
5a:5c:b7:74:0f:53:c9:db:00:57:fd:75:f8:94:1d:
bf:99:a8:5a:18:60:aa:8f:9a:93:ef:a2:12:1d:0c:
c2:82:08:31:47:9c:18:75:c7:d2:3b:ff:68:53:39:
46:b5:81:d2:d2:ad:42:c8:6a:0f:5a:93:ef:e4:d6:
85:45:10:4e:22:7e:84:99:d1:6c:8e:53:73:15:45:
df:f1:c1:c3:11:f0:f0:ec:7c:b6:71:9a:81:c8:96:
b0:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:8C:00:1E:DB:A1:5F:24:AC:81:90:2C:81:FB:9E:BB:CE:97:FE:ED
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/y4wAHtuhXySsgZAsgfueu86X_u0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:6285::/32
2a0e:b900::/29
2a10:4100::/31
2a10:4900::/29
2a11:4b40::/31
2a12:a341::/32
2a13:2984::/30
2a13:3880::/29
2a13:93c2::/32
2a13:93c4::/32
Signature Algorithm: sha256WithRSAEncryption
1e:a4:d7:a7:b7:32:ec:e5:72:45:8b:40:e7:6f:3d:94:e9:6e:
0e:16:02:34:fd:f9:72:d4:b6:40:db:d4:74:68:fd:66:9f:72:
64:97:4c:cb:05:f3:4e:da:72:0b:27:68:ee:1e:df:18:7d:f5:
12:00:fd:eb:bb:bc:2e:6c:e8:60:78:f0:01:38:cc:5e:71:8c:
3d:7f:f6:f1:d1:83:4d:e0:a8:90:6b:0e:d8:45:72:25:a5:02:
3b:61:af:76:6f:a4:f8:14:e1:0b:6b:ef:5a:56:2b:5b:09:e7:
78:64:53:45:a2:49:2e:9c:4c:2e:fa:1d:d7:11:02:02:86:d8:
05:90:06:bf:88:ff:f4:b2:8b:96:c5:51:31:d2:2a:48:d7:13:
af:80:f7:ea:90:6a:d3:0d:9c:09:a7:81:55:d1:f3:46:f6:af:
45:e7:f0:c1:b4:cb:12:d7:a6:c2:26:9a:4b:7f:e9:e2:84:41:
70:ca:12:89:02:6a:00:4a:ce:b3:06:a9:c1:d6:d0:5e:d7:a2:
80:81:ca:24:06:60:90:d1:ce:d2:ad:44:c9:2f:5c:b9:21:11:
35:ff:1a:38:0e:14:4f:e6:d0:b7:83:a9:14:4f:48:8e:c2:89:
9a:b5:4d:86:bf:2f:ac:fe:21:34:5f:66:26:16:8c:ec:24:e4:
95:85:60:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:43:48 2026 by rpki-client