Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/YQpmfCp4dWJBP0ltxgtb70EwZEM.roa
File: YQpmfCp4dWJBP0ltxgtb70EwZEM.roa (raw, json)
Hash identifier: m92um8F6ha1UMJmHYAWICPUAK7v5W6W4zIdzVtsHM+E=
Subject key identifier: 61:0A:66:7C:2A:78:75:62:41:3F:49:6D:C6:0B:5B:EF:41:30:64:43
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 019F605B9C03F9B554EAEAF0EFB844CA54B6
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/YQpmfCp4dWJBP0ltxgtb70EwZEM.roa
Signing time: Tue 14 Jul 2026 11:20:44 +0000
ROA not before: Tue 14 Jul 2026 11:20:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49542
IP address blocks: 2a12:d802::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 05:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:60:5b:9c:03:f9:b5:54:ea:ea:f0:ef:b8:44:ca:54:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Jul 14 11:20:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=610a667c2a787562413f496dc60b5bef41306443
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:75:93:81:59:aa:70:8a:5e:2f:52:e9:0d:07:
4f:c0:24:56:1e:60:d4:2c:d5:fe:22:12:e1:65:7f:
c8:10:7f:00:c5:ac:b3:83:f8:f6:8d:d9:3b:41:2e:
a5:b1:2a:9f:9a:ad:53:80:1f:2e:bf:72:65:34:0a:
c1:c4:0a:70:66:e9:ef:cb:e9:a0:e5:5f:bd:97:e4:
6d:4f:3d:a0:a3:21:43:f3:d0:f0:81:18:f3:25:4e:
39:7d:48:f0:02:1a:f6:fc:12:2d:06:4e:fb:5e:ae:
a7:97:8f:9b:f7:c5:7d:2a:de:55:83:6b:c1:58:b6:
2e:2f:c6:00:4f:57:8f:e7:55:2f:09:3e:e3:94:2c:
53:be:4d:80:82:73:5d:66:79:55:29:f6:37:e4:06:
4a:6f:0e:7f:4b:94:62:24:7c:f8:4a:01:af:ec:0a:
7d:a4:70:6b:6c:55:4d:fe:01:d9:6f:05:f5:40:b9:
72:c7:df:5a:d9:86:8e:06:c0:27:e5:ea:d1:23:ea:
91:3b:05:3f:b8:10:28:06:d2:65:4a:d2:71:42:e3:
58:eb:b7:d9:12:b7:03:6e:bf:1e:da:a4:10:13:ed:
d6:91:c0:77:29:a4:57:d9:ba:a6:3c:35:6c:c9:35:
9d:0b:ff:40:f9:eb:08:89:ab:4b:3a:45:f3:57:9b:
d0:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:0A:66:7C:2A:78:75:62:41:3F:49:6D:C6:0B:5B:EF:41:30:64:43
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/YQpmfCp4dWJBP0ltxgtb70EwZEM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:d802::/32
Signature Algorithm: sha256WithRSAEncryption
4b:0c:89:44:2f:6d:d3:3d:53:02:cc:f8:7b:1b:15:21:12:5a:
a1:1f:1a:75:c0:26:57:4c:6d:7e:33:9d:60:b0:b3:39:5c:38:
5e:68:03:11:81:a6:a4:aa:03:6d:61:2e:6a:81:95:5e:39:b1:
24:5e:11:ad:a6:51:45:30:85:eb:2a:61:f3:11:bc:cd:8d:07:
81:31:f7:72:04:98:7a:6a:f6:5c:69:f2:ea:9e:54:71:a4:10:
1d:46:2d:cb:19:e4:6d:5f:5f:63:8e:ce:6c:89:9a:6e:45:76:
42:c4:3e:d4:fd:c3:dc:84:74:09:29:10:b7:39:86:55:c8:04:
ad:57:d1:60:27:28:0e:42:f5:04:14:e5:b7:d6:71:8e:dd:70:
b7:fc:16:e3:b9:e9:18:39:2c:0b:15:bc:54:c4:f9:ff:29:2a:
62:ab:40:5a:ef:09:bf:0e:2a:7d:cb:ab:e3:05:1a:0c:4a:71:
79:22:33:97:10:9d:b6:a1:b5:66:30:2c:ee:e7:e3:18:5f:06:
cc:f8:41:f7:b4:ea:d8:a7:dc:89:01:d8:4a:f9:e1:23:0e:5b:
2a:08:76:4a:67:23:8c:05:f4:4d:5c:72:12:cb:ae:39:e7:ae:
7f:0d:0e:47:1f:df:82:a8:06:fb:7a:b7:73:27:74:32:df:14:
35:04:9d:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:57:26 2026 by rpki-client