Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/ysSbM9R1cww2z7-kXzIRBmWivdw.roa
File: ysSbM9R1cww2z7-kXzIRBmWivdw.roa (raw, json)
Hash identifier: gcYt+WPx9wue3R82F8lbJBY7gdTVbo1/Ppnj7Hm0qjg=
Subject key identifier: CA:C4:9B:33:D4:75:73:0C:36:CF:BF:A4:5F:32:11:06:65:A2:BD:DC
Certificate issuer: /CN=4fd642102ebdd7f2268c14c27e3ebbf26b4cafeb
Certificate serial: 01A126FC0DD578AC8F68D221000081C4EB48
Authority key identifier: 4F:D6:42:10:2E:BD:D7:F2:26:8C:14:C2:7E:3E:BB:F2:6B:4C:AF:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T9ZCEC691_ImjBTCfj678mtMr-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/ysSbM9R1cww2z7-kXzIRBmWivdw.roa
Signing time: Sat 10 Oct 2026 18:03:35 +0000
ROA not before: Sat 10 Oct 2026 18:03:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218973
IP address blocks: 2a07:e000:33::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/T9ZCEC691_ImjBTCfj678mtMr-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/T9ZCEC691_ImjBTCfj678mtMr-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/T9ZCEC691_ImjBTCfj678mtMr-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 14:21:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:26:fc:0d:d5:78:ac:8f:68:d2:21:00:00:81:c4:eb:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fd642102ebdd7f2268c14c27e3ebbf26b4cafeb
Validity
Not Before: Oct 10 18:03:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cac49b33d475730c36cfbfa45f32110665a2bddc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:71:e2:64:19:64:4e:07:0f:9c:8d:3d:97:20:
8c:19:9a:71:bb:d5:62:83:5f:ab:54:ef:c7:cc:cb:
4e:2b:fa:4c:c2:85:77:1c:f5:86:dd:c2:de:3c:e6:
48:62:1c:e6:b9:1f:7c:e6:24:38:dd:74:d9:8e:08:
da:a2:94:2e:ef:14:14:58:52:cc:61:08:64:4a:86:
aa:62:31:50:8b:7a:5c:61:1f:5d:f6:1f:9a:e8:05:
ab:0a:e4:7d:6a:89:aa:d9:50:97:17:5d:98:af:c2:
3b:3f:a5:c1:71:e2:3e:bb:9c:98:ff:cf:d9:8f:e4:
80:cd:d2:77:32:56:ad:f8:df:35:f5:7a:ae:d4:99:
b9:d4:a7:4c:96:e0:65:32:dd:2e:01:dc:5c:1c:e4:
20:7f:19:b1:df:3a:9e:75:79:f4:ba:54:6f:88:60:
6d:79:f9:72:de:d2:88:26:99:dd:d3:e2:7d:e2:0b:
bb:d8:82:6c:fc:5d:8c:03:04:af:4e:01:04:18:31:
77:a6:53:71:91:88:72:16:9c:85:52:19:b1:03:d6:
f3:e0:6c:e2:b0:54:e1:81:10:5f:36:d9:f2:4b:75:
69:11:5e:c3:4a:2a:35:8d:36:b5:00:e3:d7:70:52:
e2:00:5d:15:b1:8c:c0:c3:21:b3:6a:21:a5:b6:8a:
fd:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:C4:9B:33:D4:75:73:0C:36:CF:BF:A4:5F:32:11:06:65:A2:BD:DC
X509v3 Authority Key Identifier:
keyid:4F:D6:42:10:2E:BD:D7:F2:26:8C:14:C2:7E:3E:BB:F2:6B:4C:AF:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T9ZCEC691_ImjBTCfj678mtMr-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/ysSbM9R1cww2z7-kXzIRBmWivdw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/T9ZCEC691_ImjBTCfj678mtMr-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:e000:33::/48
Signature Algorithm: sha256WithRSAEncryption
29:de:be:6c:64:ca:91:6f:18:b6:c1:84:f4:10:7f:6f:92:1f:
80:1c:d1:e5:e9:98:9d:97:44:bc:b8:75:bd:a1:10:49:b8:c6:
16:61:4b:33:01:45:8c:d9:1d:ea:52:c8:ec:8a:7f:5a:03:cd:
9e:7d:c5:dc:c8:04:67:3a:0d:6d:0f:d7:29:52:69:b1:40:0f:
01:5c:b4:c5:85:ec:3b:b7:c0:e7:ad:bd:53:ae:f3:76:1f:18:
93:2f:d7:54:e9:17:32:9d:41:2d:b5:6c:d3:9f:0f:4c:f5:4b:
36:f7:f7:72:8c:c7:98:e8:11:6e:74:8c:4f:d7:39:23:17:31:
5e:52:ee:1a:cd:c1:19:23:e9:30:4b:c9:d3:29:83:c7:a3:c4:
8c:db:59:60:f3:5d:4d:62:67:3b:1e:95:ae:53:46:ae:1a:16:
27:b8:ee:b0:d4:8d:ec:70:4f:09:5b:31:d8:40:99:62:0f:88:
71:80:4b:f4:ed:2b:f9:84:2d:b0:45:cd:01:de:b3:81:5e:6b:
b8:5d:0c:4f:97:80:9e:4e:7f:8b:20:af:28:a2:e4:e8:0b:b4:
ec:b1:20:fe:93:39:71:59:11:9e:dc:91:24:ea:93:8e:19:1b:
dd:4c:5d:8d:ac:2f:6e:9c:0e:76:48:87:74:2a:7c:b9:f0:26:
ba:ad:42:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 22:10:44 2026 by rpki-client