Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/107788-8502-4541-9480-8f48a3702f90/1/yR0dGVdEjAMjDpMr_9w6lM09S4Q.roa
File: yR0dGVdEjAMjDpMr_9w6lM09S4Q.roa (raw, json)
Hash identifier: umwlZGJl591xCRTw6gLVt5FDOEtVDC3jktYmPDdcoaU=
Subject key identifier: C9:1D:1D:19:57:44:8C:03:23:0E:93:2B:FF:DC:3A:94:CD:3D:4B:84
Certificate issuer: /CN=9d1b09ad09c34756ac340dd8ea1491a8c7fcb687
Certificate serial: 019F23686F54F4323BCF7DFC1A83E45FC498
Authority key identifier: 9D:1B:09:AD:09:C3:47:56:AC:34:0D:D8:EA:14:91:A8:C7:FC:B6:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nRsJrQnDR1asNA3Y6hSRqMf8toc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/107788-8502-4541-9480-8f48a3702f90/1/yR0dGVdEjAMjDpMr_9w6lM09S4Q.roa
Signing time: Thu 02 Jul 2026 15:17:54 +0000
ROA not before: Thu 02 Jul 2026 15:17:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8075
IP address blocks: 2001:67c:d1c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/107788-8502-4541-9480-8f48a3702f90/1/nRsJrQnDR1asNA3Y6hSRqMf8toc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/107788-8502-4541-9480-8f48a3702f90/1/nRsJrQnDR1asNA3Y6hSRqMf8toc.mft
rsync://rpki.ripe.net/repository/DEFAULT/nRsJrQnDR1asNA3Y6hSRqMf8toc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:6f:54:f4:32:3b:cf:7d:fc:1a:83:e4:5f:c4:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d1b09ad09c34756ac340dd8ea1491a8c7fcb687
Validity
Not Before: Jul 2 15:17:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c91d1d1957448c03230e932bffdc3a94cd3d4b84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:54:0e:91:d6:d3:b5:c9:7a:73:e5:c0:49:03:
74:4a:ce:63:ea:1f:39:03:c4:ff:5a:85:63:2e:ca:
a2:87:aa:af:3f:e2:d2:7b:b6:2d:66:53:e3:9a:05:
e7:c1:09:13:4f:aa:a3:d8:f2:4e:fd:db:fe:89:6a:
f2:14:29:4b:13:5e:d7:54:60:a9:e3:b7:ee:cf:67:
1b:a3:f7:d1:58:8b:d1:43:f1:8a:49:01:83:f1:6a:
35:29:2a:c3:70:02:18:48:61:04:e1:4c:2f:41:3a:
b9:ed:3d:b3:eb:89:33:f3:64:4d:55:e5:06:92:e8:
33:80:27:d1:de:0b:26:de:f7:06:1d:2d:ef:e0:ec:
ac:31:55:80:a6:e6:80:8b:2b:b5:e9:f6:1c:8b:a9:
30:09:64:5e:a9:78:56:ab:8a:23:7e:5c:30:bd:27:
1a:35:4f:f9:3b:1d:7f:d8:03:22:1e:0d:5f:9a:0c:
03:4a:4e:59:55:62:d1:be:16:e7:14:5b:53:e2:ac:
12:43:96:db:1a:be:b8:36:29:27:ec:51:3b:18:85:
19:53:e7:87:98:48:bd:e6:34:56:5c:35:7a:75:04:
56:a5:06:35:ef:3d:0e:88:64:e4:3d:5c:72:74:9c:
36:40:94:3c:bc:a6:8c:9a:ca:af:a1:b7:0c:16:aa:
0d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:1D:1D:19:57:44:8C:03:23:0E:93:2B:FF:DC:3A:94:CD:3D:4B:84
X509v3 Authority Key Identifier:
keyid:9D:1B:09:AD:09:C3:47:56:AC:34:0D:D8:EA:14:91:A8:C7:FC:B6:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nRsJrQnDR1asNA3Y6hSRqMf8toc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/107788-8502-4541-9480-8f48a3702f90/1/yR0dGVdEjAMjDpMr_9w6lM09S4Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/107788-8502-4541-9480-8f48a3702f90/1/nRsJrQnDR1asNA3Y6hSRqMf8toc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:d1c::/48
Signature Algorithm: sha256WithRSAEncryption
20:ba:44:6a:80:66:7e:9e:2c:68:f3:38:bb:57:b9:a5:69:39:
57:2c:a6:32:a4:83:63:a3:70:3d:31:de:f8:82:4f:0c:3c:3b:
c7:4c:28:3b:80:cf:46:ec:6c:91:c8:4c:54:06:99:0c:b1:28:
da:40:98:38:1b:fb:bb:f3:21:6e:53:3a:91:bf:41:cf:05:c9:
b5:d7:04:1e:07:4f:92:9a:02:1b:aa:04:20:70:58:9a:06:de:
f3:ac:90:97:c5:c7:1c:dc:d5:ac:6a:53:44:b1:54:fe:11:91:
6c:a7:3a:b3:25:3f:26:39:5e:4c:b8:9a:04:73:de:b4:4f:56:
fd:ce:99:5d:70:f2:41:d4:76:b3:26:0c:c7:e2:03:03:a1:a1:
92:e3:3a:44:b9:4e:32:16:00:2c:a3:21:7d:2d:67:21:0c:ec:
b8:8a:5e:f0:00:48:05:d1:29:d6:8c:2b:30:11:56:46:cc:5b:
e1:74:ff:4c:c0:24:50:d3:9f:56:96:44:e9:1d:6d:e4:be:bb:
a9:1a:b1:3a:ce:dc:02:5d:7e:3b:aa:f3:f8:85:9a:af:ec:6e:
21:dc:e1:3f:b3:4a:f7:0d:7e:a3:6f:c3:bb:4e:56:c3:8a:1f:
2b:9c:e0:f9:10:22:30:43:ba:75:1d:fc:6a:59:6f:0d:50:45:
04:24:7d:b3
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZ8jaG9U9DI7z338GoPkX8SYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMWIwOWFkMDljMzQ3NTZhYzM0MGRkOGVhMTQ5MWE4Yzdm
Y2I2ODcwHhcNMjYwNzAyMTUxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOTFkMWQxOTU3NDQ4YzAzMjMwZTkzMmJmZmRjM2E5NGNkM2Q0Yjg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj1QOkdbTtcl6c+XASQN0Ss5j6h85
A8T/WoVjLsqih6qvP+LSe7YtZlPjmgXnwQkTT6qj2PJO/dv+iWryFClLE17XVGCp
47fuz2cbo/fRWIvRQ/GKSQGD8Wo1KSrDcAIYSGEE4UwvQTq57T2z64kz82RNVeUG
kugzgCfR3gsm3vcGHS3v4OysMVWApuaAiyu16fYci6kwCWReqXhWq4ojflwwvSca
NU/5Ox1/2AMiHg1fmgwDSk5ZVWLRvhbnFFtT4qwSQ5bbGr64Nikn7FE7GIUZU+eH
mEi95jRWXDV6dQRWpQY17z0OiGTkPVxydJw2QJQ8vKaMmsqvobcMFqoNDwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFMkdHRlXRIwDIw6TK//cOpTNPUuEMB8GA1UdIwQY
MBaAFJ0bCa0Jw0dWrDQN2OoUkajH/LaHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblJzSnJRbkRSMWFzTkEzWTZoU1JxTWY4dG9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8xMDc3ODgtODUwMi00NTQxLTk0ODAt
OGY0OGEzNzAyZjkwLzEveVIwZEdWZEVqQU1qRHBNcl85dzZsTTA5UzRRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC8xMDc3ODgtODUwMi00NTQxLTk0ODAtOGY0OGEzNzAyZjkw
LzEvblJzSnJRbkRSMWFzTkEzWTZoU1JxTWY4dG9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfA0c
MA0GCSqGSIb3DQEBCwUAA4IBAQAgukRqgGZ+nixo8zi7V7mlaTlXLKYypINjo3A9
Md74gk8MPDvHTCg7gM9G7GyRyExUBpkMsSjaQJg4G/u78yFuUzqRv0HPBcm11wQe
B0+SmgIbqgQgcFiaBt7zrJCXxccc3NWsalNEsVT+EZFspzqzJT8mOV5MuJoEc960
T1b9zpldcPJB1HazJgzH4gMDoaGS4zpEuU4yFgAsoyF9LWchDOy4il7wAEgF0SnW
jCswEVZGzFvhdP9MwCRQ059WlkTpHW3kvrupGrE6ztwCXX47qvP4hZqv7G4h3OE/
s0r3DX6jb8O7TlbDih8rnOD5ECIwQ7p1HfxqWW8NUEUEJH2z
-----END CERTIFICATE-----
Generated at Tue Jul 21 04:53:12 2026 by rpki-client